Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.mft
File: ws4IFBZ-qoGJ_YTTkCcOrfKUgss.mft (raw, json)
Hash identifier: w/ipGoQfzBRkCwXQC7pB+j7fCbwHXj3YFGAhNcotO18=
Subject key identifier: A1:A8:BF:9D:F4:A2:39:CB:63:70:D5:A3:E4:18:21:11:71:78:4A:25
Authority key identifier: C2:CE:08:14:16:7E:AA:81:89:FD:84:D3:90:27:0E:AD:F2:94:82:CB
Certificate issuer: /CN=c2ce0814167eaa8189fd84d390270eadf29482cb
Certificate serial: 01976EF5510558813C6F53ACEBC7BA85A219
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.mft
Manifest number: 0A10
Signing time: Sat 14 Jun 2025 15:01:00 +0000
Manifest this update: Sat 14 Jun 2025 15:01:00 +0000
Manifest next update: Sun 15 Jun 2025 15:01:00 +0000
Files and hashes: 1: R1gidcfPTDL9l_CbPS671EyX5iY.roa (hash: c4a4L7/lsOBY0SjW+Je19dj12ru5NWUKEP164tb+S4Q=)
2: Re7xjUICEpcefdPF_f0YtM8qXn4.roa (hash: ekIH5kxgf0bGVz6q5zIjK4NfDPuAaNIY8i0OtjeIH9w=)
3: ws4IFBZ-qoGJ_YTTkCcOrfKUgss.crl (hash: ASrTKdZxIExfaLusu5ot/nGUXULcSXi/jhvn4r0uWfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.mft
rsync://rpki.ripe.net/repository/DEFAULT/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:f5:51:05:58:81:3c:6f:53:ac:eb:c7:ba:85:a2:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ce0814167eaa8189fd84d390270eadf29482cb
Validity
Not Before: Jun 14 15:01:00 2025 GMT
Not After : Jun 15 15:01:00 2025 GMT
Subject: CN=a1a8bf9df4a239cb6370d5a3e418211171784a25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:48:45:3c:21:66:88:e3:9f:73:65:75:a2:01:
af:bd:db:8a:81:94:13:a1:a5:de:02:0a:f8:6c:bd:
ad:4b:ba:9a:68:b0:ee:8f:38:bc:a6:5f:4e:d9:9e:
50:b7:38:31:0e:fb:ff:87:c8:57:77:1a:8f:aa:a3:
89:81:6c:95:d3:bc:97:56:16:05:cb:81:71:8c:99:
1f:eb:51:e4:41:ec:a5:8d:30:c3:44:1f:07:81:23:
73:7c:5c:8a:2b:fe:d4:09:26:71:bf:12:36:c4:9e:
ac:1e:5b:62:2d:94:fb:a5:f1:6b:57:e8:0a:9d:9a:
69:f0:f0:95:d9:af:d6:74:e8:70:bf:d7:b3:62:ea:
0f:b9:5e:94:47:77:13:d2:c7:60:0f:12:ea:27:2c:
e9:d1:a9:95:21:fb:29:3a:cc:8c:4f:00:ce:e9:74:
9d:b5:cd:c1:fd:76:07:35:4d:55:19:63:6c:26:57:
2c:36:e3:17:05:19:03:d9:79:5f:c5:42:89:a5:ef:
f1:ab:93:e5:54:38:a6:a4:b3:23:93:4e:34:8a:fc:
bb:3f:db:cf:00:09:cd:f6:94:6f:71:24:01:65:0f:
9c:26:80:95:27:42:e2:7e:a1:5f:8b:f4:1d:01:37:
6d:28:b4:4a:ba:c0:04:1f:1a:de:c3:68:e5:cc:93:
4c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A8:BF:9D:F4:A2:39:CB:63:70:D5:A3:E4:18:21:11:71:78:4A:25
X509v3 Authority Key Identifier:
keyid:C2:CE:08:14:16:7E:AA:81:89:FD:84:D3:90:27:0E:AD:F2:94:82:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:66:b7:97:3a:56:e0:dc:dc:ef:3b:7a:1d:87:3f:22:24:b3:
33:51:f6:e1:63:49:e0:11:ff:16:1d:49:a5:8d:a7:5d:95:de:
a1:d1:28:8c:84:a9:50:87:f8:f8:b5:cf:03:e8:17:fd:2f:cb:
12:3c:54:f6:3d:98:f9:af:27:9d:da:65:27:ec:07:44:20:2f:
1d:d5:a7:7f:81:52:b4:c8:b5:9d:70:c6:f4:db:1d:06:19:a9:
a5:d8:e2:13:93:85:71:86:38:1e:f9:61:7f:4f:bf:9d:72:bf:
54:dc:6b:60:3c:36:96:91:ac:ce:88:41:19:eb:48:93:da:76:
d0:bc:cf:df:48:8b:b6:1b:b2:0c:1d:85:26:7b:08:d1:29:1b:
98:59:91:33:9e:a5:a3:92:0d:41:60:b8:b9:75:02:e0:66:40:
cc:ee:9e:ae:4f:c6:79:70:fb:f5:45:e6:c1:06:ad:e8:7c:4a:
61:1f:13:4e:00:6b:1a:ef:0c:e4:24:31:ce:d6:bd:e4:1c:1d:
87:d7:59:9d:15:ba:2d:e0:d3:58:6a:19:b4:a2:c4:2a:b1:d5:
90:55:e2:07:7e:89:a0:98:7d:23:c8:0a:0f:cf:cc:ab:08:96:
fb:f7:05:8d:d9:3a:ac:ba:33:02:26:d5:ef:57:11:0e:bb:88:
15:42:14:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:53:42 2025 by rpki-client