Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft
File: wg5lyt2-zUjS-HeHmTEThCvfzl0.mft (raw, json)
Hash identifier: da7y28Ba+kOMmajVtLVCnMZW/5CanSJrEbnVwSdD1Cg=
Subject key identifier: CB:E2:33:02:13:C3:E7:BB:E9:A8:2E:21:17:0F:8C:D5:6E:30:52:15
Authority key identifier: C2:0E:65:CA:DD:BE:CD:48:D2:F8:77:87:99:31:13:84:2B:DF:CE:5D
Certificate issuer: /CN=c20e65caddbecd48d2f87787993113842bdfce5d
Certificate serial: 0197C0B6827ADE5BE295C3BD54D4EDA566AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wg5lyt2-zUjS-HeHmTEThCvfzl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft
Manifest number: 1042
Signing time: Mon 30 Jun 2025 12:01:15 +0000
Manifest this update: Mon 30 Jun 2025 12:01:15 +0000
Manifest next update: Tue 01 Jul 2025 12:01:15 +0000
Files and hashes: 1: 7kdmagU4QbQazPFAKJN_jh3ESjI.roa (hash: UKie7fx67vGuUXCr+OJM9sf2md8+FYbcDpZ0gOMQ3f0=)
2: oMWup55nUaojGXh2IYtrkxVaIxk.roa (hash: IgvfZQFj2syunyqqYTcXoGNSKYWlXxrN3iDEjFeptJ0=)
3: wg5lyt2-zUjS-HeHmTEThCvfzl0.crl (hash: 15Y/6Xaq97AlU/DLyaf3R2bZ7SJ24tDw87eXJz1mnaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wg5lyt2-zUjS-HeHmTEThCvfzl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 12:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:b6:82:7a:de:5b:e2:95:c3:bd:54:d4:ed:a5:66:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c20e65caddbecd48d2f87787993113842bdfce5d
Validity
Not Before: Jun 30 12:01:15 2025 GMT
Not After : Jul 1 12:01:15 2025 GMT
Subject: CN=cbe2330213c3e7bbe9a82e21170f8cd56e305215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:69:84:aa:96:e7:5b:e3:0f:09:23:ff:28:38:
27:4f:2d:af:a2:98:25:59:2b:f8:3d:70:ae:46:a0:
53:83:83:54:ae:fb:b5:38:ee:d9:b9:96:21:a3:70:
60:98:28:f1:a2:76:f8:d4:75:da:58:d3:50:8e:06:
f8:65:68:4c:eb:d5:c6:04:1a:82:a2:62:86:f3:77:
21:ec:9a:3a:d6:1e:db:ac:5a:d7:7f:5b:30:db:e4:
a0:c5:b6:c5:30:93:7d:3f:a5:33:1f:e1:91:7f:64:
b8:3e:50:ee:0a:02:a9:ed:14:a1:62:dc:fe:55:c3:
48:85:70:6a:7a:37:eb:9d:59:62:7c:82:0b:82:31:
93:c9:1e:f3:66:27:b3:82:2c:b4:34:44:16:2c:6e:
a9:70:b2:25:2f:28:df:91:b9:db:22:ec:1b:02:bf:
54:c8:9e:bf:42:3f:21:e8:80:4c:c4:d0:90:50:33:
a1:f7:b5:36:e0:af:c2:9d:80:30:19:4b:88:4e:a6:
e5:2d:fd:71:65:1e:59:64:a6:b5:b9:53:13:14:f4:
8b:e1:38:ce:02:81:73:86:bb:c0:b7:fd:ff:53:a9:
c3:a1:b6:26:9d:33:b2:2c:49:a9:b8:14:2e:27:e0:
a6:38:d4:f7:31:82:98:90:9f:62:66:a8:63:e6:62:
60:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E2:33:02:13:C3:E7:BB:E9:A8:2E:21:17:0F:8C:D5:6E:30:52:15
X509v3 Authority Key Identifier:
keyid:C2:0E:65:CA:DD:BE:CD:48:D2:F8:77:87:99:31:13:84:2B:DF:CE:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wg5lyt2-zUjS-HeHmTEThCvfzl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:a9:e5:bc:71:b3:1e:26:8e:a5:e2:fc:98:e4:51:d7:9c:21:
70:a7:6e:51:99:74:20:64:ff:13:bf:63:e9:ea:c9:a9:d1:71:
70:12:43:6a:0e:65:cf:20:6c:2e:02:47:95:a8:fc:c2:65:78:
86:6c:c7:bb:a1:4b:e7:3f:47:7c:e2:22:09:05:10:91:e4:3c:
e4:8c:d1:aa:11:19:ae:89:ed:5b:78:6f:e6:ea:7a:6e:be:1e:
61:a4:86:82:66:e0:e8:f8:ae:44:c8:0c:a7:ae:83:18:64:76:
a2:22:d3:40:df:0c:f0:f8:b8:93:66:a3:c9:a7:22:9d:2e:d7:
64:c5:cc:54:8b:f3:17:b6:b8:70:fb:8d:5c:77:0b:51:e1:b2:
08:63:85:df:55:22:02:2f:ac:fb:44:9c:bd:67:61:3d:31:54:
af:99:0c:ac:d5:83:ee:e6:fc:09:53:cc:2c:ec:71:ad:65:71:
c1:1c:b9:bb:bd:27:ec:6d:56:84:0e:db:16:ed:03:08:f3:19:
61:fc:0d:cd:74:61:45:7a:91:11:41:35:1b:38:5f:bf:35:d2:
90:67:c9:4b:01:f8:1c:8c:e6:0a:96:b5:3a:ff:3e:84:a7:24:
f2:af:3e:2d:f5:b1:6b:72:51:a4:13:fc:77:a5:29:44:8d:f8:
44:ff:8d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:56:07 2025 by rpki-client