Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.mft
File: wuP6h-sxaafS3XRFMoMCGicDx2k.mft (raw, json)
Hash identifier: gDlB/XZFopK2QkgVYotViRM7Uio82LW6ty2MGZebDQE=
Subject key identifier: 1F:6A:15:75:18:5F:3A:8E:CD:28:BE:58:4A:18:B4:E1:0C:2F:A0:66
Authority key identifier: C2:E3:FA:87:EB:31:69:A7:D2:DD:74:45:32:83:02:1A:27:03:C7:69
Certificate issuer: /CN=c2e3fa87eb3169a7d2dd74453283021a2703c769
Certificate serial: 01976CCF9B194CBE9667240A6553BD69E565
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wuP6h-sxaafS3XRFMoMCGicDx2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 05:00:34 +0000
Manifest this update: Sat 14 Jun 2025 05:00:34 +0000
Manifest next update: Sun 15 Jun 2025 05:00:34 +0000
Files and hashes: 1: UQeJyG9BAYXx7MdsdkPbT5nATwI.roa (hash: hKLTaUlMIPTXFfDFectFLlcV0ReJ/iVzU3RYDLItnvI=)
2: wuP6h-sxaafS3XRFMoMCGicDx2k.crl (hash: 86TRqyfhzYUzmvN6vstVtrMLRW3JXM4FVn9RietPel8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/wuP6h-sxaafS3XRFMoMCGicDx2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:9b:19:4c:be:96:67:24:0a:65:53:bd:69:e5:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2e3fa87eb3169a7d2dd74453283021a2703c769
Validity
Not Before: Jun 14 05:00:34 2025 GMT
Not After : Jun 15 05:00:34 2025 GMT
Subject: CN=1f6a1575185f3a8ecd28be584a18b4e10c2fa066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f3:a2:91:3b:11:07:eb:8f:08:4d:74:de:7f:
c7:e3:2e:80:a4:d9:24:31:e6:32:10:5b:f2:5b:c6:
e7:14:2c:76:87:e2:81:ae:c1:f9:a4:d9:0d:ec:ef:
4c:6a:f4:9c:eb:b9:4b:fb:53:92:e8:c2:8e:8a:83:
2a:79:e3:91:ae:85:3f:35:28:9b:a5:1e:64:f2:f4:
27:12:40:c6:b9:86:70:cc:8c:9f:88:ef:a7:ca:a0:
1b:89:f9:36:fe:7c:ea:e3:6e:a6:b6:2f:ff:3c:b4:
33:0e:89:a2:ba:7f:8b:f5:96:74:b0:d6:ab:ce:39:
af:05:75:b3:d8:e0:65:41:45:4c:c4:e3:f8:ce:46:
78:b4:35:85:6f:2a:d1:76:b3:25:b1:14:b3:0b:14:
dd:50:62:38:8f:86:46:ef:f2:eb:7e:17:c5:f9:ea:
0d:13:db:03:f8:95:af:68:a8:e8:1e:93:78:e7:92:
18:f7:f7:37:1d:82:51:5a:52:a1:cf:52:fe:90:8d:
11:ce:58:07:3f:1a:29:45:df:76:53:24:c5:9b:29:
59:36:58:84:9a:af:17:f0:55:3f:c4:11:15:f9:b8:
13:a2:3c:b5:11:b4:99:46:4e:6b:3c:f2:e4:63:a9:
03:6b:fc:00:c5:bc:eb:f2:be:74:9e:89:63:e2:eb:
e2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:6A:15:75:18:5F:3A:8E:CD:28:BE:58:4A:18:B4:E1:0C:2F:A0:66
X509v3 Authority Key Identifier:
keyid:C2:E3:FA:87:EB:31:69:A7:D2:DD:74:45:32:83:02:1A:27:03:C7:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wuP6h-sxaafS3XRFMoMCGicDx2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:1b:10:d0:b2:5a:e3:5e:7a:7c:a8:ba:a3:de:ff:1f:01:b6:
50:dd:a4:94:29:b3:99:62:39:a5:91:8a:bf:ea:61:8a:8f:d9:
52:57:1e:c5:d4:5d:ad:df:ad:b3:95:4f:3c:5b:91:67:f8:96:
8b:f2:8e:63:3f:36:24:f2:4f:86:f1:ef:76:9c:08:85:1f:a8:
ab:0f:40:01:f5:94:6a:b3:69:40:76:d0:63:7e:ec:5f:00:89:
b8:5b:d4:a3:03:ca:92:0c:70:dc:38:b3:0c:29:7e:5d:0d:f0:
4d:4a:a6:de:62:f1:18:ab:57:ef:e4:32:52:cf:8a:2c:b0:20:
60:53:86:a2:60:aa:50:f3:48:53:c1:70:2d:e5:a7:fb:27:8e:
38:05:9e:09:cc:ad:b7:98:37:92:7d:d7:ed:a2:aa:80:ad:09:
17:db:1d:bc:7d:a2:a1:d2:a1:ac:a7:e7:a7:54:a6:42:1e:6b:
80:af:e7:0f:c7:bd:b2:e5:08:2f:48:30:e9:d5:0f:08:a1:d5:
96:fc:82:47:39:f1:ec:d0:37:62:b3:46:56:e6:e9:0f:ee:25:
f2:3d:c4:c8:cf:48:46:57:5a:e0:32:3e:b5:6b:68:73:36:d8:
e6:c9:69:24:51:ba:13:96:64:0e:ff:4f:95:ef:8c:ed:66:77:
d9:d9:b6:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:59:28 2025 by rpki-client