Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.mft
File: wFB0h3942_Sb03ohVJHmmg-LbkM.mft (raw, json)
Hash identifier: ti5ZkPzmkrdIjZodQgWjLa3qk1ry1Y2c24v8H7sUeNI=
Subject key identifier: E9:D9:F1:E3:9F:2F:E5:49:02:FD:2F:F1:BE:5B:47:83:29:BB:E1:EC
Authority key identifier: C0:50:74:87:7F:78:DB:F4:9B:D3:7A:21:54:91:E6:9A:0F:8B:6E:43
Certificate issuer: /CN=c05074877f78dbf49bd37a215491e69a0f8b6e43
Certificate serial: 0197CB70CE621F63388B045007BE39648DC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wFB0h3942_Sb03ohVJHmmg-LbkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.mft
Manifest number: 0C20
Signing time: Wed 02 Jul 2025 14:00:56 +0000
Manifest this update: Wed 02 Jul 2025 14:00:56 +0000
Manifest next update: Thu 03 Jul 2025 14:00:56 +0000
Files and hashes: 1: nV-HLk-vNtMZyXYUE8luuJv4468.roa (hash: 02+QZOjgpDh+SF+gzgnBzWxE50MSq+IOFGGOIUAQpsk=)
2: wFB0h3942_Sb03ohVJHmmg-LbkM.crl (hash: eSoY/NHW/MUXqtBj4LJn6TpwF3LDAUJyzhdy7cJisjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wFB0h3942_Sb03ohVJHmmg-LbkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:70:ce:62:1f:63:38:8b:04:50:07:be:39:64:8d:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c05074877f78dbf49bd37a215491e69a0f8b6e43
Validity
Not Before: Jul 2 14:00:56 2025 GMT
Not After : Jul 3 14:00:56 2025 GMT
Subject: CN=e9d9f1e39f2fe54902fd2ff1be5b478329bbe1ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:eb:d8:5b:12:a0:31:66:61:ba:16:c3:65:a1:
6f:ee:70:78:1f:59:e0:0e:36:e4:52:5f:20:b7:16:
ac:fe:c3:46:ac:f6:15:18:a0:e7:52:78:6c:43:4e:
7d:6e:46:21:56:9e:4d:5f:b8:69:d2:55:bc:16:d8:
b4:b6:c1:e7:6f:e4:dc:0f:fe:e9:8e:4f:24:42:af:
e9:0c:c8:82:23:51:52:b5:7a:42:25:d9:b8:f3:33:
0e:7f:fa:48:cb:42:bb:d5:0f:85:56:62:fd:74:3d:
7d:b9:05:28:4a:d1:5d:24:71:27:b2:96:ab:47:56:
ea:17:dd:73:07:24:c4:d6:cf:ab:c2:2f:9b:62:f2:
7b:12:e4:72:a0:7c:90:17:45:fe:3c:60:73:8d:2d:
14:75:63:90:59:d4:67:c1:a5:92:38:70:f6:99:60:
c4:63:c9:23:65:9d:0b:4e:c8:3c:cc:82:08:38:65:
e5:88:04:56:e3:ee:9d:8a:e3:3e:45:62:e6:68:12:
36:9a:7d:f3:d4:7a:6c:a5:4e:f5:00:37:5c:73:9e:
1d:30:cc:d2:96:38:e6:bd:58:72:76:12:b4:b6:68:
b5:5c:b1:f2:f5:05:13:a9:0f:a4:2e:04:99:f8:8e:
0f:8b:ae:15:80:29:ba:8c:93:77:eb:63:4d:1a:e1:
6d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:D9:F1:E3:9F:2F:E5:49:02:FD:2F:F1:BE:5B:47:83:29:BB:E1:EC
X509v3 Authority Key Identifier:
keyid:C0:50:74:87:7F:78:DB:F4:9B:D3:7A:21:54:91:E6:9A:0F:8B:6E:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wFB0h3942_Sb03ohVJHmmg-LbkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:37:62:e5:07:58:e9:07:36:b3:5e:5e:f6:7c:8e:c5:7c:23:
fd:16:0e:7c:16:cd:4c:0c:60:1e:d0:c0:77:6f:9f:58:b4:0b:
a9:e3:10:a7:68:1d:44:f6:80:1e:64:99:9f:44:73:12:32:38:
78:14:83:62:cc:af:bf:2c:61:74:a4:45:7d:ff:ed:27:84:64:
4a:fd:ff:d6:ff:f8:9d:e5:39:91:ee:c4:d7:91:d9:32:a0:78:
ef:41:7b:8e:b3:cd:2e:fb:33:89:12:de:a5:bc:bb:52:a2:d5:
02:b0:ff:ea:e3:88:42:75:f2:75:9d:a8:e2:36:7f:06:de:b7:
f4:92:b0:30:53:ac:85:d4:a5:ca:9c:33:78:ec:56:3e:d4:c1:
e4:b5:33:23:50:e6:9f:b3:26:cd:8a:1e:2d:75:f7:6d:df:96:
a7:a6:28:95:c7:52:89:be:ca:1d:03:b3:d8:c6:38:56:dd:fa:
be:b3:90:e6:01:83:28:f9:32:80:66:2e:b4:b7:d0:bf:05:2a:
3d:a9:44:1f:9b:21:98:2c:de:af:c8:50:fd:82:77:a7:df:1d:
2e:7d:b4:4d:2d:59:70:59:1a:cc:a6:72:e8:99:b3:00:da:4c:
a1:26:53:52:29:42:26:19:31:88:ef:1d:6f:f1:8e:e5:eb:a8:
f2:cf:42:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 22:18:22 2025 by rpki-client