Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft
File: WZp0D0vDCiwEzcszRK8Nai0FpIE.mft (raw, json)
Hash identifier: wi+CHzRfZJ29a/ltvAWeyE/fJKChC/F3Qlb/wI2Yn7g=
Subject key identifier: BC:DC:04:82:8A:2B:8D:99:3F:56:96:87:AF:09:0F:E7:1E:83:17:8A
Authority key identifier: 59:9A:74:0F:4B:C3:0A:2C:04:CD:CB:33:44:AF:0D:6A:2D:05:A4:81
Certificate issuer: /CN=599a740f4bc30a2c04cdcb3344af0d6a2d05a481
Certificate serial: 019769CF094DA4F39025D707AB9E99F0A5A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WZp0D0vDCiwEzcszRK8Nai0FpIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft
Manifest number: 0A0D
Signing time: Fri 13 Jun 2025 15:01:05 +0000
Manifest this update: Fri 13 Jun 2025 15:01:05 +0000
Manifest next update: Sat 14 Jun 2025 15:01:05 +0000
Files and hashes: 1: WZp0D0vDCiwEzcszRK8Nai0FpIE.crl (hash: oeR6IInTW1lIue20FIMIrjsRsS9Nhm0U2lQTiA/vqd0=)
2: ozGik-9_sBnUMoYXrZRViJEmIeY.roa (hash: 3AnFoieE3CjYtQiFDGskoD5Nyb6r911fFXwGIZ9/+iA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WZp0D0vDCiwEzcszRK8Nai0FpIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:cf:09:4d:a4:f3:90:25:d7:07:ab:9e:99:f0:a5:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=599a740f4bc30a2c04cdcb3344af0d6a2d05a481
Validity
Not Before: Jun 13 15:01:05 2025 GMT
Not After : Jun 14 15:01:05 2025 GMT
Subject: CN=bcdc04828a2b8d993f569687af090fe71e83178a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:be:a8:68:84:83:51:7b:22:ed:22:8b:88:c2:
dd:ba:16:14:3b:0f:2a:16:9e:c8:d7:f3:bd:98:f9:
11:b1:f6:e2:79:e1:a4:fc:2f:55:18:09:e8:24:3a:
74:b2:31:f5:00:33:d3:6b:bc:7f:ac:a8:ad:e8:36:
e0:ba:72:f3:81:17:50:86:b2:33:36:91:89:bb:30:
2c:49:79:f6:60:43:9d:1f:4f:7d:61:ce:89:85:6f:
63:32:de:df:93:22:c8:b7:f0:68:9c:59:9b:2a:9f:
5e:25:63:79:9a:73:a2:77:2c:87:ae:61:f6:7b:7d:
b3:76:6f:9c:b2:f0:1d:37:37:0b:b1:ac:97:47:bb:
32:21:38:65:ad:fc:6c:45:d8:10:df:49:95:fe:80:
d5:5d:fa:1c:64:67:21:08:77:cb:1c:6d:b1:68:f8:
88:b6:35:e3:1d:da:de:6d:b3:6b:0b:96:0c:35:18:
9f:65:75:ca:29:d4:de:66:6e:71:b2:19:b7:5c:5f:
65:87:75:30:d8:d3:49:43:c6:d1:6d:c2:f9:86:3e:
7d:02:8a:c5:87:b4:9c:14:6e:53:b3:37:3e:eb:b2:
63:f3:bd:0e:fb:71:f5:dd:4b:36:de:aa:80:ce:88:
f3:c6:e5:65:6b:b8:ea:21:4f:bc:5e:6a:53:9d:30:
24:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:DC:04:82:8A:2B:8D:99:3F:56:96:87:AF:09:0F:E7:1E:83:17:8A
X509v3 Authority Key Identifier:
keyid:59:9A:74:0F:4B:C3:0A:2C:04:CD:CB:33:44:AF:0D:6A:2D:05:A4:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WZp0D0vDCiwEzcszRK8Nai0FpIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:b1:84:8c:a6:dd:af:84:88:49:2f:81:80:ab:ef:a2:57:09:
b7:8c:60:da:eb:be:87:90:25:62:5a:b9:36:67:50:a3:33:7a:
8c:c4:65:9e:2e:b8:87:59:b8:e7:ae:b9:f5:21:df:a4:a4:a6:
62:2a:f8:e5:35:a2:45:b0:de:1e:b7:f2:8a:c0:55:cf:e6:db:
a4:2c:f6:86:5d:52:2f:e4:59:5c:14:a3:9b:ce:0a:9a:66:51:
10:6e:b2:0e:eb:9a:9a:39:92:0e:f9:54:26:f2:64:5e:b2:b6:
79:6d:8b:cf:cf:7d:0d:d3:ce:fa:c9:38:1b:b5:3e:73:33:47:
49:9f:47:d2:64:d1:f1:7c:47:c4:96:6b:62:6b:c8:e8:a5:16:
9a:ce:91:2f:4b:0a:94:0a:a8:4c:fe:67:52:7d:57:e4:96:2d:
68:d3:35:c3:fb:01:4f:d9:52:98:63:ab:86:45:c0:c0:5f:b4:
04:af:03:21:7a:34:3d:87:a8:2c:0a:72:4c:2b:84:67:78:e6:
f6:f9:c3:f8:bb:4a:04:97:08:6e:73:42:b2:54:06:a9:7a:9c:
7f:ca:3d:fe:07:44:8b:b5:f1:4e:df:9e:e2:1e:31:02:72:cc:
be:3b:de:40:31:f1:b1:e3:8e:ca:1b:ed:3c:48:c6:34:e7:0d:
ac:38:61:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:59:24 2025 by rpki-client