Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.mft
File: wQKF31sDng8E4t_s4opaj77G6Tg.mft (raw, json)
Hash identifier: eiOKN12IX6ugHL0dvJ3aSKtMYM9PXdY6TPO3WUA+U8s=
Subject key identifier: 2F:E8:2D:A2:C9:8B:E8:C1:58:1D:C8:CA:EB:8B:11:28:4A:19:E3:DA
Authority key identifier: C1:02:85:DF:5B:03:9E:0F:04:E2:DF:EC:E2:8A:5A:8F:BE:C6:E9:38
Certificate issuer: /CN=c10285df5b039e0f04e2dfece28a5a8fbec6e938
Certificate serial: 0197B933E72CB3A00D190C9969C82FF2809B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQKF31sDng8E4t_s4opaj77G6Tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.mft
Manifest number: 0EF2
Signing time: Sun 29 Jun 2025 01:01:15 +0000
Manifest this update: Sun 29 Jun 2025 01:01:15 +0000
Manifest next update: Mon 30 Jun 2025 01:01:15 +0000
Files and hashes: 1: XqKPzfmuCzaXuReNqmun-bylVl0.roa (hash: fIH8TXgcjjHXQ/BvOpbDJ0pldyGYRtZMTKQJxTQ5HkU=)
2: llJ6liNS1pumqjPV_Jv49wbPcyA.roa (hash: 8yXr4/k0VmsJ3fSG9IZQB1mAPItrWTFszMy9LsJzJdk=)
3: ty37WXzEM_QABRJJkI6c7K_G8EQ.roa (hash: KUqDTpdF99zPoKmTMTv8GshjWBlrKcQSI4Ly51l4brg=)
4: wQKF31sDng8E4t_s4opaj77G6Tg.crl (hash: PmdQ+RbOJDPXloD8IdBZELZ8Ly0ekToh0K1tg7nA54o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQKF31sDng8E4t_s4opaj77G6Tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:33:e7:2c:b3:a0:0d:19:0c:99:69:c8:2f:f2:80:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c10285df5b039e0f04e2dfece28a5a8fbec6e938
Validity
Not Before: Jun 29 01:01:15 2025 GMT
Not After : Jun 30 01:01:15 2025 GMT
Subject: CN=2fe82da2c98be8c1581dc8caeb8b11284a19e3da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:00:b3:59:e3:bd:63:82:4c:bc:21:9f:7e:c3:
c1:92:5e:18:b7:aa:ac:42:f3:70:0e:a4:36:0a:7e:
1f:c7:2f:72:95:8e:27:13:b8:37:8f:69:14:e3:9f:
db:81:c5:9f:a9:73:fc:59:4b:60:77:e6:ad:a1:35:
bd:6f:3d:f2:7a:2c:01:9a:95:35:6c:04:a1:34:4d:
2b:f8:db:4c:bc:77:96:ab:a0:dd:ba:1a:49:7e:9b:
a8:26:22:da:0b:a8:4c:17:4a:ab:a1:89:89:42:0e:
dc:b6:ac:1e:a3:96:8a:3c:7f:7d:91:de:48:44:eb:
c1:ea:e4:75:5f:3d:cb:19:fc:56:e7:35:87:81:57:
9e:49:ce:f1:cd:d3:2f:34:8c:11:56:aa:9e:87:dd:
cc:47:f5:45:3b:a5:0f:3c:d5:ae:20:04:df:47:ed:
26:bf:0f:bb:50:55:41:ca:8c:bc:e7:6b:e3:21:f6:
1b:09:d2:72:3d:1a:ae:fa:85:44:7a:ea:2f:8c:5f:
d8:bd:cd:aa:7d:b2:2a:e4:0f:ce:15:cc:fd:45:5a:
a7:82:8f:90:2c:0e:f0:94:ef:e0:3f:eb:1a:63:92:
a3:0e:9c:1b:69:52:61:93:e7:4f:a1:d9:a4:50:d1:
42:bc:8a:dd:10:fb:63:58:f6:4c:ee:0a:8f:e8:be:
3f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E8:2D:A2:C9:8B:E8:C1:58:1D:C8:CA:EB:8B:11:28:4A:19:E3:DA
X509v3 Authority Key Identifier:
keyid:C1:02:85:DF:5B:03:9E:0F:04:E2:DF:EC:E2:8A:5A:8F:BE:C6:E9:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQKF31sDng8E4t_s4opaj77G6Tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:8f:ad:1e:50:38:90:cf:dc:72:06:a1:a5:25:9e:d0:1f:4d:
b8:6e:dc:91:c7:22:f0:98:39:b4:43:bd:00:a4:11:0c:25:83:
1f:2f:f9:af:00:a4:6e:90:87:4d:0e:6f:33:ae:bf:69:21:3e:
aa:a6:f1:65:b5:29:49:59:38:44:16:36:6c:14:d5:eb:d4:bf:
fe:50:ba:6a:d9:7b:8e:f6:50:08:57:69:aa:30:18:2e:46:ad:
68:c5:48:a6:bf:5f:a7:0b:79:56:fa:5b:f7:f8:ef:9e:5f:89:
79:99:a1:ca:3c:82:73:9c:2f:b0:e1:80:bc:a6:c2:0d:44:fe:
6b:6f:b5:48:70:7d:fc:6f:41:4f:0d:b8:55:e8:ce:ef:0c:ca:
59:e2:ed:34:33:1d:f2:0e:2f:53:7f:1e:df:b3:f5:22:0a:50:
c8:d1:43:51:c5:48:8e:96:4c:ee:36:8b:1d:0c:51:31:d6:76:
56:fe:10:42:04:22:8d:b9:4f:e7:7a:14:f7:ec:db:56:16:b7:
7a:e1:d4:9f:80:83:eb:18:af:80:c0:11:4c:75:6d:97:1b:31:
87:f0:98:c9:8e:d2:e9:44:cc:f7:ce:74:2a:2c:69:a4:e5:ea:
59:44:85:2f:ee:33:04:a2:c9:28:a3:0b:fa:75:f3:ff:e8:ed:
30:db:4a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:27:38 2025 by rpki-client