Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.mft
File: wBQuXVz6pFIWa8e1WmVVj1JNZ1E.mft (raw, json)
Hash identifier: NQJug2iIDO7Qw3Xj+YIos4XKkCfbUW5yrYNCrQilcF8=
Subject key identifier: 4A:B7:22:19:5E:52:12:CF:73:D5:CF:CC:52:32:B9:0C:5C:FA:D7:12
Authority key identifier: C0:14:2E:5D:5C:FA:A4:52:16:6B:C7:B5:5A:65:55:8F:52:4D:67:51
Certificate issuer: /CN=c0142e5d5cfaa452166bc7b55a65558f524d6751
Certificate serial: 0197C614772B2815E37230EC23FA659E4E61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.mft
Manifest number: 15BE
Signing time: Tue 01 Jul 2025 13:01:59 +0000
Manifest this update: Tue 01 Jul 2025 13:01:59 +0000
Manifest next update: Wed 02 Jul 2025 13:01:59 +0000
Files and hashes: 1: sNmSuLPwop12596I--vLe1Fw_L8.roa (hash: rnnFcpfS8qT33aKuf/kRcr+W7tCgIM7nW6QVvMfILWQ=)
2: wBQuXVz6pFIWa8e1WmVVj1JNZ1E.crl (hash: Qui0q3RMuWpPEWTLJ06ofRI9j2Z3730aNF6Bf8GS2FQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:14:77:2b:28:15:e3:72:30:ec:23:fa:65:9e:4e:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0142e5d5cfaa452166bc7b55a65558f524d6751
Validity
Not Before: Jul 1 13:01:59 2025 GMT
Not After : Jul 2 13:01:59 2025 GMT
Subject: CN=4ab722195e5212cf73d5cfcc5232b90c5cfad712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:36:08:c4:05:4a:b9:de:e3:0b:68:8d:20:4b:
72:c5:ff:08:11:7f:c3:3d:38:7b:17:78:00:f9:74:
40:82:39:01:1b:f4:34:70:9c:7e:31:04:3e:5a:3d:
58:60:d9:32:3b:59:0a:81:bd:57:5d:fb:6c:70:03:
36:ee:73:76:ab:63:9f:13:95:20:7a:f6:ff:da:2f:
9f:23:a5:0a:3d:2d:df:1d:e9:b3:46:36:e2:d6:89:
c2:eb:ed:a6:02:5d:9e:b5:3d:97:b1:48:be:87:05:
da:8e:fc:d0:a8:29:c7:f8:60:b9:d2:b2:b1:f1:8f:
95:28:c4:43:a8:f6:5c:c6:40:42:d6:56:ed:2f:f5:
4d:35:ce:f1:94:2a:1b:25:b6:91:c1:04:fa:4f:e2:
bf:19:d3:db:55:57:c9:a6:6f:cd:0e:03:91:37:97:
b6:da:d9:5c:01:7f:86:29:21:d4:23:d0:aa:4b:ab:
68:58:66:ba:60:c6:1f:49:4e:4f:96:38:0a:37:24:
f8:f7:0f:77:7d:81:68:89:3c:8d:7e:88:05:1c:61:
ea:2e:7e:dc:e8:5f:60:83:e9:1a:87:e2:d8:54:8b:
02:ad:af:c2:a3:2a:01:db:d5:1c:00:4f:71:fe:eb:
c5:59:1e:14:26:f0:dd:6c:d2:4f:a3:70:98:58:04:
7c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B7:22:19:5E:52:12:CF:73:D5:CF:CC:52:32:B9:0C:5C:FA:D7:12
X509v3 Authority Key Identifier:
keyid:C0:14:2E:5D:5C:FA:A4:52:16:6B:C7:B5:5A:65:55:8F:52:4D:67:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:c0:81:91:81:e5:83:0d:d5:ea:6b:50:e7:7c:4c:d8:92:eb:
cf:0c:40:b1:b8:3a:ff:fd:30:f3:37:69:97:c6:3c:73:90:7b:
bf:89:5b:de:bc:7f:ef:18:72:cf:c4:46:00:69:44:dc:ca:c4:
dc:c2:87:bd:9a:36:bf:5d:db:6d:8e:39:1c:c0:c9:14:32:3d:
10:b7:91:bd:15:48:84:98:3b:a2:51:99:ac:2f:3f:65:1c:15:
c6:ba:cf:83:19:ba:63:d3:cb:50:f1:b1:f7:9c:fa:37:e2:7e:
2e:76:52:e7:c5:9c:61:0d:68:a4:fb:d3:06:ef:5c:50:44:74:
6a:a1:7c:b8:7d:7e:7e:2c:c4:37:f5:5b:bb:08:cf:96:67:3d:
05:da:b9:4e:3b:6b:ff:e6:b3:18:78:a4:da:eb:43:13:56:54:
d0:88:d1:19:72:dd:f4:fa:80:cc:8d:a3:0c:1f:0a:b3:59:56:
78:78:a5:9a:fc:ec:a9:c6:8f:6f:35:32:a4:22:03:cf:c9:23:
92:1a:c2:69:88:8c:86:7b:6c:51:f2:35:d5:5b:59:18:a6:17:
93:aa:54:43:db:8e:c3:5b:52:8f:41:bc:b8:16:45:b4:4e:5d:
40:84:7e:cc:42:9f:7a:5f:86:26:32:d7:a6:be:36:e9:c3:71:
02:0b:62:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 17:30:32 2025 by rpki-client