Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.mft
File: wnLUdhJANZrLqKM306w6k5eSWnI.mft (raw, json)
Hash identifier: GL3jYM6cu6soKaDZooFt2UPXUNF+YGT4XcOtyztjvH8=
Subject key identifier: 1F:ED:84:76:5C:4F:49:AD:67:4C:18:2B:D6:AD:59:BD:61:4D:A1:77
Authority key identifier: C2:72:D4:76:12:40:35:9A:CB:A8:A3:37:D3:AC:3A:93:97:92:5A:72
Certificate issuer: /CN=c272d4761240359acba8a337d3ac3a9397925a72
Certificate serial: 0197CA279428EEC8564BF034ACEDC075E5A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnLUdhJANZrLqKM306w6k5eSWnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.mft
Manifest number: 15C0
Signing time: Wed 02 Jul 2025 08:01:20 +0000
Manifest this update: Wed 02 Jul 2025 08:01:20 +0000
Manifest next update: Thu 03 Jul 2025 08:01:20 +0000
Files and hashes: 1: 70HJo7jmffKHG2PpOcP0KSY9roI.roa (hash: DYvGlsMyhOdp02WTRHANgmcPEVdr2t5PTlBu3xJcVlU=)
2: wnLUdhJANZrLqKM306w6k5eSWnI.crl (hash: qrZhslC0N8Y0GgsIYd/+QMfikzI/5mTQf894Amj15gE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wnLUdhJANZrLqKM306w6k5eSWnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 08:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:27:94:28:ee:c8:56:4b:f0:34:ac:ed:c0:75:e5:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c272d4761240359acba8a337d3ac3a9397925a72
Validity
Not Before: Jul 2 08:01:20 2025 GMT
Not After : Jul 3 08:01:20 2025 GMT
Subject: CN=1fed84765c4f49ad674c182bd6ad59bd614da177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d7:2e:2b:30:fb:b9:44:4c:4d:ca:29:a9:73:
9c:74:b0:81:b6:69:a9:18:41:0a:37:e4:44:69:30:
2d:19:d7:4a:ec:e3:fc:9e:62:16:24:e8:cd:d5:aa:
69:39:12:3e:d8:90:a1:33:19:ca:41:b7:42:1a:24:
5c:df:7d:e0:3b:86:4d:79:87:d0:33:4f:87:6a:76:
b0:3e:f6:84:5c:c1:9d:b6:d1:51:b6:5a:a2:74:28:
92:b4:f6:2b:25:cd:70:21:7a:9b:a5:d7:28:ff:08:
55:8e:c8:7b:ca:8b:5b:c8:56:b3:6e:06:a5:e8:92:
bd:66:87:33:97:0c:82:91:63:3f:ff:d7:7e:7a:4a:
ee:1b:bd:c9:0c:9a:08:5f:2f:c1:a8:5c:0c:bb:b6:
27:9f:14:31:96:d1:aa:86:20:35:e1:45:d4:18:a9:
48:23:aa:02:86:b9:11:de:19:9c:cb:10:ed:68:aa:
98:f3:d2:7c:f5:f1:5b:f4:c0:33:49:b7:9d:52:22:
52:76:b4:fb:75:f9:e2:19:77:c9:f5:43:03:5b:be:
3e:ac:a6:1a:3a:b5:54:c7:34:8d:56:f8:4f:b9:b6:
83:d0:8f:e6:9b:66:0b:1a:36:e5:b4:33:06:1d:0e:
6c:20:5c:85:51:19:a9:60:6a:82:40:59:f7:18:9c:
55:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:ED:84:76:5C:4F:49:AD:67:4C:18:2B:D6:AD:59:BD:61:4D:A1:77
X509v3 Authority Key Identifier:
keyid:C2:72:D4:76:12:40:35:9A:CB:A8:A3:37:D3:AC:3A:93:97:92:5A:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnLUdhJANZrLqKM306w6k5eSWnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:6c:e6:0a:54:24:32:d6:7b:6e:9f:f9:ed:ca:e5:ac:f6:26:
14:eb:e0:82:4b:c5:8a:f0:66:98:be:e8:41:c1:0f:bd:d1:85:
a6:fd:8d:f7:23:5d:dd:bd:1b:58:6c:50:77:56:ee:99:9e:54:
1f:6e:56:9b:20:89:c5:00:01:8f:62:c7:58:ab:d9:44:e8:e8:
22:f2:0f:ef:fa:3e:df:11:7c:da:e2:24:e6:08:e3:97:f1:23:
19:44:00:66:b7:7f:db:25:5f:f2:c2:02:1f:73:c3:fc:ae:fc:
1d:9e:ae:9d:b5:8b:1e:21:08:e6:53:6e:5f:d3:65:26:30:31:
cc:d8:12:02:47:2c:7e:9f:0a:e7:dc:1b:37:71:8b:fd:9d:52:
c6:68:51:c2:6d:4a:2a:fb:de:83:ec:2f:a9:00:9d:2f:c2:06:
a9:f0:dd:14:7a:6e:dc:f5:c9:5b:7d:a8:05:4e:53:e8:04:1e:
18:e3:9d:35:d0:a1:70:e5:69:65:85:b7:c5:04:3d:fc:f0:40:
1a:72:99:05:19:1e:2c:03:88:e0:94:81:c0:02:dd:1e:58:0c:
44:e0:19:8b:01:42:81:67:d7:f8:fe:74:a0:4d:9d:5c:65:45:
c3:a2:c2:8d:a6:99:4b:e7:a0:87:bf:a7:0d:ee:55:94:f8:70:
88:65:7b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 15:17:45 2025 by rpki-client