Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
File: wBZuIWw2DDbg91sNORI9utQiZOk.mft (raw, json)
Hash identifier: tS9glMaNorv3eqL9uAhXguMTUbTcqrMIKLmCD0AvPFQ=
Subject key identifier: 35:76:B7:2D:D9:08:1A:0A:24:72:28:48:50:D5:D0:0A:53:40:07:4B
Authority key identifier: C0:16:6E:21:6C:36:0C:36:E0:F7:5B:0D:39:12:3D:BA:D4:22:64:E9
Certificate issuer: /CN=c0166e216c360c36e0f75b0d39123dbad42264e9
Certificate serial: 019768BBD44D6D705C85A43B504466771C9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBZuIWw2DDbg91sNORI9utQiZOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
Manifest number: 158E
Signing time: Fri 13 Jun 2025 10:00:29 +0000
Manifest this update: Fri 13 Jun 2025 10:00:29 +0000
Manifest next update: Sat 14 Jun 2025 10:00:29 +0000
Files and hashes: 1: Wxr7kgALDgcsOOCQfZoACHYOwbQ.roa (hash: B9f7m4dPaZeRMrrY3iGXe7xjmu9+7nX6lw2kW7YcneQ=)
2: wBZuIWw2DDbg91sNORI9utQiZOk.crl (hash: QF5jyNzXE+E1JTiPJGb0lQzGJiLSR7eRcEBggwK8qw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wBZuIWw2DDbg91sNORI9utQiZOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bb:d4:4d:6d:70:5c:85:a4:3b:50:44:66:77:1c:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0166e216c360c36e0f75b0d39123dbad42264e9
Validity
Not Before: Jun 13 10:00:29 2025 GMT
Not After : Jun 14 10:00:29 2025 GMT
Subject: CN=3576b72dd9081a0a2472284850d5d00a5340074b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5c:fb:6d:88:cf:b1:a5:8c:1b:f1:10:b3:c1:
91:c8:fe:46:c0:50:0e:da:f5:5b:fe:15:a8:4c:9d:
5c:0b:3a:b2:6d:20:59:c7:cb:e0:15:98:75:3c:cc:
cc:90:3c:f8:15:55:97:fb:36:9a:99:84:84:a2:bf:
c0:03:80:7c:1e:68:79:14:c5:14:e6:e6:83:f5:87:
08:e2:b0:4d:54:45:63:22:fc:41:20:46:00:7c:6c:
51:9d:44:ec:f7:37:d0:f0:3c:d4:7e:9f:6a:6d:a1:
1d:39:19:7e:83:b0:be:6d:e3:0e:62:d9:46:92:7a:
a0:5f:d4:3c:21:ab:da:11:c2:3a:d6:27:ac:16:d1:
96:2d:7a:19:1f:67:14:0e:77:ff:07:a2:19:76:41:
81:80:a9:c0:90:3a:14:0e:82:05:14:0c:b0:ce:d9:
68:cd:15:b0:6c:60:a9:35:9b:ad:35:7b:a7:8c:2f:
3f:4a:c3:91:bc:0d:fb:3e:eb:6d:46:0c:96:26:f7:
97:09:b9:de:11:92:c7:53:2b:4c:81:06:a4:5b:ec:
77:ef:85:a7:a4:36:bf:aa:cf:fc:62:62:7a:d6:65:
c5:1c:a1:9d:3d:7e:b7:73:62:72:66:33:6e:30:ab:
af:35:69:bf:68:a1:c9:b3:ec:1c:28:f8:25:7c:fe:
32:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:76:B7:2D:D9:08:1A:0A:24:72:28:48:50:D5:D0:0A:53:40:07:4B
X509v3 Authority Key Identifier:
keyid:C0:16:6E:21:6C:36:0C:36:E0:F7:5B:0D:39:12:3D:BA:D4:22:64:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBZuIWw2DDbg91sNORI9utQiZOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:67:b5:34:fb:c3:ef:e5:08:b0:88:e2:60:b3:2f:1b:9b:af:
71:d8:36:b6:b6:93:d2:59:a2:f6:50:af:aa:a1:2b:bd:8f:7e:
74:8c:60:6d:f4:f1:b4:0c:68:8e:ca:9d:06:03:57:3b:b5:f3:
7b:c4:fd:6f:bc:a7:d3:14:d0:3c:c9:98:bd:56:16:4f:79:89:
67:78:0d:46:8b:b9:69:cb:f3:97:36:d8:f0:80:df:65:73:a2:
35:f7:3f:a1:eb:8d:63:d3:4c:c5:0a:8a:d5:17:3f:9f:75:15:
8c:14:e8:eb:eb:b8:93:4b:86:74:1d:b4:b9:0d:70:9e:a6:e2:
4a:38:89:d7:11:fb:f6:91:59:d7:53:61:a9:94:ae:a4:5e:b3:
21:de:fe:89:b6:bc:88:ca:80:c4:38:25:1c:62:d5:5f:42:d0:
1b:99:67:ed:e0:45:08:f7:0e:ce:1c:da:6c:35:8c:af:df:f2:
da:51:45:f4:33:af:02:58:75:bf:99:cf:dd:02:c2:bc:a5:e1:
6e:ee:8e:55:b1:f2:e7:d6:1f:71:ab:1a:d8:a8:9f:58:f5:f1:
4d:24:f7:f9:89:64:59:82:06:de:6d:4e:6c:3e:90:59:38:18:
1c:de:03:95:06:70:e3:ee:8d:91:6a:4a:7f:b2:07:85:ca:d3:
e8:64:42:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:59:48 2025 by rpki-client