Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.mft
File: wcIPvEj6WafY3qV5CPNQobl0Wd8.mft (raw, json)
Hash identifier: QA+ainRlo4mArr6PSkbEdbmhdulHv/qGRBzfuG1fTBg=
Subject key identifier: 2F:A9:0C:C9:FA:4C:C0:37:72:98:E6:B2:BA:7F:23:64:50:65:5D:12
Authority key identifier: C1:C2:0F:BC:48:FA:59:A7:D8:DE:A5:79:08:F3:50:A1:B9:74:59:DF
Certificate issuer: /CN=c1c20fbc48fa59a7d8dea57908f350a1b97459df
Certificate serial: 01976B85DBBD95C0876C85A71ABA4232B178
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wcIPvEj6WafY3qV5CPNQobl0Wd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.mft
Manifest number: 13A8
Signing time: Fri 13 Jun 2025 23:00:24 +0000
Manifest this update: Fri 13 Jun 2025 23:00:24 +0000
Manifest next update: Sat 14 Jun 2025 23:00:24 +0000
Files and hashes: 1: 1FW1XbyYUs66xbKImXHkiZU-xAA.roa (hash: DA26l55wpmFxpEPwr1TEVKDAhIdZwBFIGz/j/ljF/kM=)
2: rQGBYURhHxIS2gUjxgxhWlf8G-M.roa (hash: d90EC3mny7b2jkfAqHp6/1/Pw4XbnGm5shftI7zAdH4=)
3: wcIPvEj6WafY3qV5CPNQobl0Wd8.crl (hash: y3uADtxdvOS7Vo6SLpTxI/QgssL2IKZ7QohJ5XqqzkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wcIPvEj6WafY3qV5CPNQobl0Wd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:85:db:bd:95:c0:87:6c:85:a7:1a:ba:42:32:b1:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c20fbc48fa59a7d8dea57908f350a1b97459df
Validity
Not Before: Jun 13 23:00:24 2025 GMT
Not After : Jun 14 23:00:24 2025 GMT
Subject: CN=2fa90cc9fa4cc0377298e6b2ba7f236450655d12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e6:f6:01:b8:b3:ae:17:d9:39:0a:80:de:c5:
04:c0:7a:cd:86:25:6c:29:90:6f:a5:af:78:28:d3:
cd:77:9c:38:71:f2:d3:02:73:82:a7:36:83:ba:91:
0b:9e:39:0d:47:7e:ea:c3:30:e5:5a:c9:82:0b:18:
b9:68:8e:c4:c2:3e:78:78:9f:cc:d9:95:79:80:83:
6d:65:be:65:90:ed:9c:da:f9:76:b5:fa:3d:39:61:
74:25:9b:47:d8:dd:14:9b:60:61:9c:3b:46:16:83:
8e:00:14:c4:66:8d:c3:b5:7a:f4:ae:29:22:88:3f:
83:82:59:5e:38:3e:c3:98:49:21:0f:cd:97:a4:52:
3b:2c:7a:c2:95:a7:04:0a:21:35:0a:47:b0:ad:15:
f1:3e:f7:bd:f6:c6:9e:31:07:a1:4c:ad:7c:89:76:
93:2d:bc:b0:6b:8b:4f:dd:af:ca:b7:c9:fb:07:7f:
0c:d4:f1:02:73:90:03:d3:2f:4e:13:08:86:ae:e2:
f3:26:a1:78:c6:0e:05:29:d5:3e:72:d4:36:c5:11:
00:f7:6c:ac:43:3b:f8:cd:10:58:50:ee:81:4f:0c:
54:2b:05:be:4a:f3:fa:9d:f4:1a:c9:7c:24:4a:6f:
9c:6c:a5:b7:cf:43:a8:8f:f5:77:81:94:1d:1d:b0:
a8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A9:0C:C9:FA:4C:C0:37:72:98:E6:B2:BA:7F:23:64:50:65:5D:12
X509v3 Authority Key Identifier:
keyid:C1:C2:0F:BC:48:FA:59:A7:D8:DE:A5:79:08:F3:50:A1:B9:74:59:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wcIPvEj6WafY3qV5CPNQobl0Wd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:8d:35:b8:48:5d:bd:fa:bd:cd:61:59:18:e5:59:ac:58:9c:
15:33:47:92:db:a5:51:6b:43:85:de:28:b2:90:89:fa:6e:79:
09:9b:dc:46:d7:54:dd:de:e6:29:38:14:7c:51:f1:b3:8a:64:
22:93:a7:0d:5f:af:eb:69:16:49:96:1e:e0:ee:9c:20:6f:55:
63:81:e3:ad:ba:a8:be:0b:e9:08:b9:4e:da:30:59:9e:9c:da:
49:ea:11:63:e7:59:ac:18:e5:10:09:6d:5f:a2:44:e4:67:c1:
7c:64:79:e9:4f:96:a6:b5:f9:a2:01:f0:29:5a:52:3c:50:0a:
0b:97:be:84:af:a4:7f:b9:77:41:aa:44:60:07:4b:d9:48:9b:
c1:47:8c:5d:b4:f4:bc:ca:0d:33:b8:34:ca:e4:5b:bf:b7:0e:
6c:14:ea:fa:ee:2c:de:ef:ea:53:92:bf:dd:6f:d5:7a:9b:80:
43:66:35:35:76:c1:c8:fd:5b:19:26:01:ea:06:cc:bc:cb:16:
bc:6b:9d:10:49:13:51:bc:4e:f9:c4:a8:ff:95:26:24:88:05:
91:97:f5:3f:63:d3:1a:0e:c1:80:03:ab:b2:f1:5e:3f:f7:24:
2d:1e:e5:f5:6e:9d:bd:78:ba:59:9c:c6:5a:54:f3:e9:32:0f:
81:c8:dc:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:14:42 2025 by rpki-client