Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/wKqzltZQgmAnwr2KBiByEJIQnik.mft
File: wKqzltZQgmAnwr2KBiByEJIQnik.mft (raw, json)
Hash identifier: DqhEgrY5D30G32t5SUoX9mTeB0ukaA0ZcHSg7yh3so8=
Subject key identifier: 65:0A:44:2D:F7:E1:C4:D0:1A:D1:5C:16:5E:51:2E:7A:4A:D0:88:EE
Authority key identifier: C0:AA:B3:96:D6:50:82:60:27:C2:BD:8A:06:20:72:10:92:10:9E:29
Certificate issuer: /CN=c0aab396d650826027c2bd8a0620721092109e29
Certificate serial: 01976A7378582CC0A9CDAAEF066A1875D87C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wKqzltZQgmAnwr2KBiByEJIQnik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/wKqzltZQgmAnwr2KBiByEJIQnik.mft
Manifest number: 43
Signing time: Fri 13 Jun 2025 18:00:41 +0000
Manifest this update: Fri 13 Jun 2025 18:00:41 +0000
Manifest next update: Sat 14 Jun 2025 18:00:41 +0000
Files and hashes: 1: FQ0Z9CjauF1-N_C29EdkHs_XYtQ.roa (hash: +snXzR2/FfWDx0T5r9Nyn9CPDVn/IvcZNIPrKP0aONw=)
2: wKqzltZQgmAnwr2KBiByEJIQnik.crl (hash: rmUYiu5v99Saooe0QoPgvadHXKdf1wcBlkLPSg8ifL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/wKqzltZQgmAnwr2KBiByEJIQnik.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/wKqzltZQgmAnwr2KBiByEJIQnik.mft
rsync://rpki.ripe.net/repository/DEFAULT/wKqzltZQgmAnwr2KBiByEJIQnik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:73:78:58:2c:c0:a9:cd:aa:ef:06:6a:18:75:d8:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0aab396d650826027c2bd8a0620721092109e29
Validity
Not Before: Jun 13 18:00:41 2025 GMT
Not After : Jun 14 18:00:41 2025 GMT
Subject: CN=650a442df7e1c4d01ad15c165e512e7a4ad088ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bf:10:85:72:c5:27:45:3b:f4:ac:b5:b4:a2:
b5:78:8e:03:36:f9:c1:72:92:12:c0:52:25:54:01:
b9:30:83:4f:3a:f3:a1:f3:b1:54:63:db:2e:b8:68:
bc:1e:e3:89:2e:40:a0:54:4e:0b:68:cc:c0:a8:73:
d3:96:c6:4c:f6:57:c4:03:67:23:ea:ca:24:e1:5f:
b0:0d:31:5b:3f:b4:6e:14:c0:e6:d9:84:a2:b9:a8:
a5:0c:06:c7:a2:c2:be:bf:20:66:e6:f2:94:ef:48:
71:3a:4c:2f:b0:21:b7:6c:43:22:d0:14:a5:e1:22:
d8:d7:46:55:aa:e8:a5:d1:8c:87:48:ef:9c:e0:28:
5a:4d:e1:d7:07:9f:cb:19:25:0d:a1:a6:54:18:99:
14:21:f8:83:95:c6:01:1e:59:b2:fc:6e:1b:72:20:
3d:5d:95:58:ad:34:69:0d:56:cf:a2:bc:16:dd:dc:
a4:ee:1a:df:fb:3b:d1:7e:ce:5b:14:2c:ac:c7:ce:
53:bb:c2:5b:bd:be:97:15:40:e8:a5:04:2c:15:09:
92:ea:d2:cb:d3:ab:96:3a:fd:25:45:79:dc:c5:3e:
9b:bd:5b:1b:75:2d:a8:2c:65:84:b8:21:0d:3d:2c:
ac:3d:62:4b:29:63:d8:d7:45:87:24:57:f1:1f:88:
d2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:0A:44:2D:F7:E1:C4:D0:1A:D1:5C:16:5E:51:2E:7A:4A:D0:88:EE
X509v3 Authority Key Identifier:
keyid:C0:AA:B3:96:D6:50:82:60:27:C2:BD:8A:06:20:72:10:92:10:9E:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKqzltZQgmAnwr2KBiByEJIQnik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/wKqzltZQgmAnwr2KBiByEJIQnik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/wKqzltZQgmAnwr2KBiByEJIQnik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:62:0e:f5:96:13:4a:88:6b:09:b4:11:5c:aa:af:b7:f9:1d:
3a:50:b0:01:1b:5a:15:d7:91:c0:31:13:7b:02:5a:c2:90:10:
81:57:42:66:bd:4b:c5:a1:a5:d7:ac:2b:5e:6f:ec:b4:2e:9d:
c7:53:13:46:03:04:39:96:1c:3e:ff:e7:4b:49:50:e8:27:0b:
68:18:0a:43:f0:3d:0d:d7:a7:18:0f:79:6c:c8:9b:ab:54:be:
1b:e1:d5:06:3e:08:c6:d0:b8:ab:c3:9e:d9:dc:6c:2b:b6:51:
dc:4d:84:d8:e6:60:61:75:0e:da:81:33:6a:d6:f1:6c:8f:9f:
df:d8:03:3e:fd:26:08:ce:b0:36:53:7e:ab:10:e0:98:45:94:
8e:c8:80:31:4f:44:5e:d1:20:4a:c6:7f:f8:89:07:8f:c6:88:
cf:d8:7d:3e:88:3e:22:8b:a7:61:01:96:5d:c1:95:aa:ee:41:
88:51:e6:3f:d6:70:a2:df:4c:00:cb:85:a6:de:67:2e:44:3b:
c0:12:8a:fa:80:8a:e9:8f:ea:bf:8f:a8:ec:bc:ec:ff:74:b9:
fd:d5:c4:7c:78:1f:da:fd:cf:c7:e1:69:10:8a:f7:34:db:85:
26:42:28:e8:4f:b1:bd:26:2c:7c:5a:72:9f:bf:23:a5:c6:47:
43:7f:1c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:50:06 2025 by rpki-client