Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/dceacf-dae2-4763-b399-2fb99fe5e477/1/wvMmbgYS2DFPTp-So9uLyyU-2rw.mft
File: wvMmbgYS2DFPTp-So9uLyyU-2rw.mft (raw, json)
Hash identifier: EUN+FMjo0II7JTOmQkbhGGK3mNQjJ1ulzl/WAUckJlc=
Subject key identifier: E8:C5:71:DD:08:2C:C0:F4:02:80:6B:E5:40:71:7A:B0:1B:97:65:4F
Authority key identifier: C2:F3:26:6E:06:12:D8:31:4F:4E:9F:92:A3:DB:8B:CB:25:3E:DA:BC
Certificate issuer: /CN=c2f3266e0612d8314f4e9f92a3db8bcb253edabc
Certificate serial: 0197B6A06D3ADBD7E3EEF3CDB96C47D5C2C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wvMmbgYS2DFPTp-So9uLyyU-2rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/dceacf-dae2-4763-b399-2fb99fe5e477/1/wvMmbgYS2DFPTp-So9uLyyU-2rw.mft
Manifest number: 0A14
Signing time: Sat 28 Jun 2025 13:00:56 +0000
Manifest this update: Sat 28 Jun 2025 13:00:56 +0000
Manifest next update: Sun 29 Jun 2025 13:00:56 +0000
Files and hashes: 1: 9QfEv6VDYJHwg-_mBcw3nPg902w.roa (hash: bDGQkiI5avL3G45Js05YIuwiQofAZ2dxukXBkwwmDkY=)
2: wvMmbgYS2DFPTp-So9uLyyU-2rw.crl (hash: ZsbvqOImAHn3qrhO7cwcmolo0UbGxcRhs+19uNdmbIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/dceacf-dae2-4763-b399-2fb99fe5e477/1/wvMmbgYS2DFPTp-So9uLyyU-2rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/dceacf-dae2-4763-b399-2fb99fe5e477/1/wvMmbgYS2DFPTp-So9uLyyU-2rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/wvMmbgYS2DFPTp-So9uLyyU-2rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:6d:3a:db:d7:e3:ee:f3:cd:b9:6c:47:d5:c2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2f3266e0612d8314f4e9f92a3db8bcb253edabc
Validity
Not Before: Jun 28 13:00:56 2025 GMT
Not After : Jun 29 13:00:56 2025 GMT
Subject: CN=e8c571dd082cc0f402806be540717ab01b97654f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5c:73:da:cc:d5:b7:ea:89:13:b0:be:1e:94:
a7:2a:24:01:e9:1e:4e:47:6f:83:7f:03:4c:5c:e7:
07:bf:a5:d3:40:a5:17:c6:2c:71:31:d4:91:64:94:
9e:f2:11:61:1d:fa:f7:7d:dc:69:be:8d:31:37:9c:
ab:bb:cb:bd:79:ae:9f:6b:19:00:1c:f5:16:4a:13:
3b:48:ad:1d:46:b5:50:8a:e5:53:6e:79:eb:37:17:
f7:b1:39:f6:43:d3:cc:29:6e:c5:77:64:f0:b5:d7:
fe:b4:80:86:38:ef:22:de:20:50:3f:22:6f:37:be:
29:67:c1:d4:22:e7:8e:50:ab:ee:d8:c8:64:e1:da:
cc:4c:da:10:67:f0:ce:5a:18:bd:48:0c:f7:f0:6a:
c7:8b:ca:13:1c:87:b6:1b:fb:fe:f6:13:eb:ea:29:
57:4e:6e:93:50:0a:fe:c5:ec:0b:50:9d:6c:6a:ed:
c7:ac:1f:ae:c3:8a:b7:ec:8e:58:7d:6a:3b:a3:53:
f0:a4:1e:6e:7b:98:5b:ca:5b:78:c5:2a:42:07:78:
4a:85:6a:12:4f:d3:69:37:5e:5c:11:6c:e8:05:9d:
9e:89:32:94:3e:32:2e:42:43:b1:5c:5d:29:22:fe:
53:f5:30:66:55:e0:05:fc:fc:e1:50:d5:d1:3f:47:
ed:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C5:71:DD:08:2C:C0:F4:02:80:6B:E5:40:71:7A:B0:1B:97:65:4F
X509v3 Authority Key Identifier:
keyid:C2:F3:26:6E:06:12:D8:31:4F:4E:9F:92:A3:DB:8B:CB:25:3E:DA:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wvMmbgYS2DFPTp-So9uLyyU-2rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/dceacf-dae2-4763-b399-2fb99fe5e477/1/wvMmbgYS2DFPTp-So9uLyyU-2rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/dceacf-dae2-4763-b399-2fb99fe5e477/1/wvMmbgYS2DFPTp-So9uLyyU-2rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:1a:1d:4e:fd:13:54:39:42:46:e3:ce:b4:e9:a8:57:66:c5:
25:33:22:cc:8a:8a:04:0a:f0:81:4b:11:b5:a6:b4:a0:6b:78:
e5:f2:ac:7b:7b:ed:64:de:39:e6:25:d2:56:bd:6b:11:d4:ad:
65:29:94:ec:4c:58:6d:8a:a7:52:05:1a:83:6c:6f:f9:7d:3d:
12:b5:fe:f2:78:a7:75:19:f3:22:67:8c:1c:c4:b8:92:42:b4:
0c:c8:72:36:7f:df:27:00:21:d1:2a:b6:3d:cf:7c:6a:c5:eb:
2e:3a:d3:9e:b3:c0:f8:2e:2e:8c:2d:21:c1:33:fb:16:ae:30:
f7:9c:26:b1:89:66:fa:f3:82:5a:b5:91:bd:cf:fa:43:6c:0d:
b3:c0:0c:c2:b8:96:22:54:7a:ed:c6:17:97:6f:97:51:67:1a:
27:60:a7:82:5f:51:1f:c3:98:7b:68:10:b1:d9:58:e6:87:d5:
c9:59:5b:a6:3a:b3:df:d3:e1:e8:d3:57:0f:38:e0:10:9a:47:
47:5d:4c:c5:4e:e4:de:af:d9:67:93:57:d8:2a:47:18:51:ff:
59:4c:f2:d4:96:ce:cd:97:fc:f7:aa:ba:46:d4:2f:53:37:43:
84:ff:30:ef:f3:e2:0f:e5:c8:b4:5c:5a:31:63:58:77:46:3b:
e9:81:c2:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:41:36 2025 by rpki-client