Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.mft
File: wHCBpvcho3qeHXmTFbs-onWLiHc.mft (raw, json)
Hash identifier: RHmugIBmGfHrUuZ1E2nHxoJ8l5n1aveFm7VNnJNwBao=
Subject key identifier: 77:4B:54:C9:80:F8:64:38:CE:EB:DF:C0:52:B5:5D:C9:BD:99:42:EE
Authority key identifier: C0:70:81:A6:F7:21:A3:7A:9E:1D:79:93:15:BB:3E:A2:75:8B:88:77
Certificate issuer: /CN=c07081a6f721a37a9e1d799315bb3ea2758b8877
Certificate serial: 0197700807B9E4542DE0D8EB1394D4081FC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wHCBpvcho3qeHXmTFbs-onWLiHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.mft
Manifest number: 04E4
Signing time: Sat 14 Jun 2025 20:01:03 +0000
Manifest this update: Sat 14 Jun 2025 20:01:03 +0000
Manifest next update: Sun 15 Jun 2025 20:01:03 +0000
Files and hashes: 1: irXVQKZrZFERT0qlEvOEYo8eStU.roa (hash: SM6wGE9/EVXEBgUTm1zsTO58ye4c68Xl+iOGBhNr7JE=)
2: wHCBpvcho3qeHXmTFbs-onWLiHc.crl (hash: rfdOkyRBw3fGcyQ1feCPTBQ+xspvLjx+L5+wmC6V7jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wHCBpvcho3qeHXmTFbs-onWLiHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:08:07:b9:e4:54:2d:e0:d8:eb:13:94:d4:08:1f:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c07081a6f721a37a9e1d799315bb3ea2758b8877
Validity
Not Before: Jun 14 20:01:03 2025 GMT
Not After : Jun 15 20:01:03 2025 GMT
Subject: CN=774b54c980f86438ceebdfc052b55dc9bd9942ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:97:2c:04:3b:c4:d8:7d:50:7c:76:80:df:9a:
31:c9:2d:26:1e:49:48:50:96:22:c6:7a:af:ab:a0:
a7:e4:32:50:08:f4:0e:83:e9:8d:06:e5:42:14:18:
64:01:bb:f7:c7:ec:cb:5b:f4:12:a1:19:be:62:6d:
10:1c:62:35:2b:00:c0:15:62:38:66:b8:1f:0e:b3:
66:1e:5e:b8:03:c3:a1:b5:17:4f:9f:32:bd:8d:ce:
5c:15:71:83:f3:f6:0d:62:d5:74:ca:d7:3c:36:be:
eb:b7:5d:23:92:c0:df:d5:31:24:7b:99:ca:3c:10:
19:72:02:08:59:20:97:e2:c5:2b:09:fc:e8:4b:77:
74:47:98:9c:ba:da:91:1f:b6:8b:59:6b:cf:a5:90:
02:ca:c5:88:22:b0:7c:5f:55:e5:12:aa:a0:69:3b:
66:3a:11:6c:31:fb:0a:82:ac:e9:43:0f:f6:e5:a8:
cb:97:3d:f0:58:43:4e:e3:11:09:2a:56:7b:0a:aa:
c6:a4:19:23:a8:e0:fc:8b:75:4d:53:82:dd:a9:af:
4f:b9:82:ef:b2:9c:c9:29:73:0d:aa:bd:c9:36:8b:
fc:e4:53:49:a1:96:e0:15:82:17:dc:79:de:07:a2:
32:37:93:60:7f:b1:34:42:d0:74:00:93:06:f2:ce:
a5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:4B:54:C9:80:F8:64:38:CE:EB:DF:C0:52:B5:5D:C9:BD:99:42:EE
X509v3 Authority Key Identifier:
keyid:C0:70:81:A6:F7:21:A3:7A:9E:1D:79:93:15:BB:3E:A2:75:8B:88:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHCBpvcho3qeHXmTFbs-onWLiHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:ab:6f:6c:96:07:d5:92:33:86:16:ef:03:3d:fa:69:9a:91:
78:13:9d:2f:8a:85:58:1b:ad:02:1e:74:54:dc:2d:07:90:2b:
14:89:3a:6c:15:83:0b:91:74:d0:3a:7f:bc:57:bc:85:2d:48:
a5:ab:74:64:0c:6a:e0:db:ee:bb:2a:ed:13:3a:4c:a7:4f:f0:
e0:e7:d6:aa:81:f6:e5:c7:7f:6f:54:5d:68:07:59:f9:c4:9e:
d2:9a:26:fa:34:4a:80:cf:ed:75:e6:70:6c:db:58:1d:8a:e6:
09:6e:a0:67:18:83:b5:b2:0f:06:5f:55:5d:36:93:28:97:7e:
de:f5:fd:a2:04:dd:1a:0a:96:57:80:e3:81:9e:7e:30:5c:33:
f1:f4:28:d5:a1:4f:b9:4e:6c:e8:59:d1:0f:8c:fd:2b:c4:7c:
d0:6d:5f:73:e3:a0:4d:5d:82:c4:b9:f0:23:f0:46:74:0c:60:
a9:1f:af:10:c4:a7:8e:21:11:81:7a:1d:03:aa:be:da:87:5c:
50:04:48:16:51:52:44:0f:2d:d7:56:9d:3d:07:f7:00:da:c7:
75:13:fe:ab:c8:f6:49:73:42:af:fe:77:08:9f:9a:f9:7a:d1:
37:cf:57:ad:65:ab:de:85:8c:57:3e:42:90:b0:cb:93:8a:ec:
d6:34:5f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:33:28 2025 by rpki-client