Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
File: wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft (raw, json)
Hash identifier: 7w/z4Z6i5894m4a3Y5GjJqn9mZraKUmUk+OpOeh8IVk=
Subject key identifier: B5:B1:17:BB:29:58:D5:AB:A5:5B:42:71:C7:05:85:91:A1:5B:E3:E1
Authority key identifier: C0:09:35:18:5C:68:03:6A:0F:AE:DE:EA:AA:6B:FE:F4:E6:2A:0C:93
Certificate issuer: /CN=c00935185c68036a0faedeeaaa6bfef4e62a0c93
Certificate serial: 01976D74AA4AD110A571B1A527BAAC92DB68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wAk1GFxoA2oPrt7qqmv-9OYqDJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
Manifest number: 0606
Signing time: Sat 14 Jun 2025 08:00:51 +0000
Manifest this update: Sat 14 Jun 2025 08:00:51 +0000
Manifest next update: Sun 15 Jun 2025 08:00:51 +0000
Files and hashes: 1: 6zfU2J2wR6MMPAQDPcdRmDUSTTk.roa (hash: qvQ90YxdjeGEsA7jHHHCLNHaXx9teWbipOiBvb0hjRc=)
2: wAk1GFxoA2oPrt7qqmv-9OYqDJM.crl (hash: NdNyv/lbt9DCgP/CMnK4FcVavvG4hNb1aJTmlqn3qHA=)
3: x0gusjZxaAiftvAcjczux1Ius_E.roa (hash: HFa+GGzqn2pKQb0OIJEk/YaY1MmpeAOG1mYH0pjtvqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wAk1GFxoA2oPrt7qqmv-9OYqDJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:aa:4a:d1:10:a5:71:b1:a5:27:ba:ac:92:db:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c00935185c68036a0faedeeaaa6bfef4e62a0c93
Validity
Not Before: Jun 14 08:00:51 2025 GMT
Not After : Jun 15 08:00:51 2025 GMT
Subject: CN=b5b117bb2958d5aba55b4271c7058591a15be3e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:3b:71:09:53:d6:3c:ab:d2:ce:42:eb:5e:3f:
4f:53:73:e6:5c:05:25:b2:43:9f:65:c5:18:14:d0:
9c:3a:83:c4:60:3a:16:00:fb:07:ee:a1:68:1a:eb:
6e:95:b3:59:83:63:81:e4:77:c7:b2:1e:3c:f9:24:
89:54:5a:14:31:5a:de:45:71:3d:ed:ee:af:11:5b:
d6:6b:dc:d4:de:c4:2f:2e:ff:20:1f:ab:01:8e:7f:
15:02:10:98:ae:c8:78:97:15:dc:79:97:ae:46:0c:
1c:05:ff:0d:b6:43:9a:58:71:c2:73:59:05:a4:cd:
c9:fb:5e:21:87:83:32:44:a4:7b:99:fc:e7:24:5d:
c9:c8:14:dd:8c:14:b1:80:8d:d0:e0:9d:1e:4a:d7:
ae:70:95:e2:6f:18:85:e8:6c:fa:0b:39:c0:23:62:
97:b6:89:09:85:8f:fb:08:7d:d5:5b:87:b0:72:60:
79:7b:8a:c3:c7:9b:53:23:39:16:1e:96:0f:dc:11:
3a:ee:1a:ff:cf:63:9d:20:e4:f6:c1:a2:c3:48:0b:
25:9a:ef:1f:7c:a7:f7:11:2d:49:2b:e6:7e:02:82:
9b:02:5e:f0:d8:ba:ad:b2:19:6d:52:43:de:82:e7:
28:db:ea:59:aa:da:34:5c:c4:46:6a:51:cc:30:e0:
aa:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:B1:17:BB:29:58:D5:AB:A5:5B:42:71:C7:05:85:91:A1:5B:E3:E1
X509v3 Authority Key Identifier:
keyid:C0:09:35:18:5C:68:03:6A:0F:AE:DE:EA:AA:6B:FE:F4:E6:2A:0C:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wAk1GFxoA2oPrt7qqmv-9OYqDJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:b5:44:eb:2a:a9:a4:15:1f:1b:a5:b4:fe:ba:ca:df:cc:b4:
54:6c:1e:1f:8b:63:6e:41:19:c1:2b:4c:f9:b9:e4:3e:eb:fe:
ec:f8:bb:21:f9:78:e3:4a:a1:6d:da:02:3b:6d:c8:1f:f4:49:
28:2d:7e:0d:39:ae:9a:0f:74:06:62:a7:db:e6:36:f7:1a:f4:
32:20:2e:cb:ad:a4:eb:80:73:3a:35:57:a9:57:6a:60:fa:f9:
65:cf:a0:3c:62:01:94:64:22:2a:39:ad:8c:5c:1e:10:c5:40:
25:58:a8:ac:b4:de:e5:6c:28:66:60:73:00:3a:85:4c:3f:d9:
47:12:7d:ac:bb:63:f1:cd:bd:f7:b4:17:dd:e7:5a:8a:ca:3c:
b3:1b:5d:54:b4:0a:1b:bf:0a:57:61:11:9a:60:bd:a4:f7:4f:
86:d9:a6:79:5e:e9:2c:c8:14:9e:79:71:fc:29:58:fd:2b:63:
9c:1a:a5:0d:b6:5b:d1:df:39:43:f7:af:f0:0c:8a:1c:91:a9:
a2:70:f7:17:15:b5:55:5a:32:19:bb:72:e6:e1:19:62:93:b6:
af:ae:82:61:ab:fb:2d:3c:cf:fc:fb:06:6a:70:5d:f2:a5:fc:
36:ea:2d:5d:9d:16:1b:68:12:e5:2a:ae:7a:84:f0:ee:c3:53:
09:0f:96:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:47:58 2025 by rpki-client