Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/wcJrtXS4m4wYZvhHS7HLADJk7CA.mft
File: wcJrtXS4m4wYZvhHS7HLADJk7CA.mft (raw, json)
Hash identifier: tmmef3u4liLB49S8x1dwtaIxiDCBBaN38f+FqOFFVzk=
Subject key identifier: AA:16:7A:21:6C:E6:F6:01:0D:59:52:A3:28:ED:92:70:2F:87:28:A8
Authority key identifier: C1:C2:6B:B5:74:B8:9B:8C:18:66:F8:47:4B:B1:CB:00:32:64:EC:20
Certificate issuer: /CN=c1c26bb574b89b8c1866f8474bb1cb003264ec20
Certificate serial: 0197B70F533E664F4FF73A21560A6AC33964
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wcJrtXS4m4wYZvhHS7HLADJk7CA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/wcJrtXS4m4wYZvhHS7HLADJk7CA.mft
Manifest number: 0643
Signing time: Sat 28 Jun 2025 15:02:04 +0000
Manifest this update: Sat 28 Jun 2025 15:02:04 +0000
Manifest next update: Sun 29 Jun 2025 15:02:04 +0000
Files and hashes: 1: H8Cq2hKbd_raQeCt0efxgfoaB4I.roa (hash: RUeP+naWIGNfUeaNzoap2yVUas20CdFw2eVfjen4R5E=)
2: XfKLRFVMoC15KLcrzjJhZWM3w8Q.roa (hash: 25hZw2F6xwasOHU65AIF0S+NpXK61ycgU51PVxUloRM=)
3: jWpsvTVNS1Ff638kpa7ScxTuuk4.roa (hash: 63THTjmppr49Yj/Ay+jWsinwc396xB57u7trQc+8Nhg=)
4: wcJrtXS4m4wYZvhHS7HLADJk7CA.crl (hash: q2fr0p1Dmj+31aUqYBs9wvTRJa8wBPhW8W1LCWXUoWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/wcJrtXS4m4wYZvhHS7HLADJk7CA.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/wcJrtXS4m4wYZvhHS7HLADJk7CA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wcJrtXS4m4wYZvhHS7HLADJk7CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:53:3e:66:4f:4f:f7:3a:21:56:0a:6a:c3:39:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c26bb574b89b8c1866f8474bb1cb003264ec20
Validity
Not Before: Jun 28 15:02:04 2025 GMT
Not After : Jun 29 15:02:04 2025 GMT
Subject: CN=aa167a216ce6f6010d5952a328ed92702f8728a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:8d:de:52:d0:4c:82:ed:42:54:07:b6:35:2b:
bb:9c:5e:99:4b:cc:d0:4a:d3:0f:0c:ad:7a:25:a9:
bf:8e:17:62:b5:df:b2:a8:74:34:05:b1:e6:fc:d2:
c8:6c:75:11:ff:a4:c2:6c:0e:40:10:d0:5d:c3:cc:
a8:76:c2:14:59:21:f4:4d:c5:5c:09:a5:03:8e:2e:
fc:be:c4:db:2c:f6:da:cb:79:6b:90:8c:78:d5:6f:
fd:2b:02:11:ec:23:fa:bc:9a:79:5e:f3:92:71:cd:
6a:3e:03:70:2a:72:36:67:40:30:d9:6d:df:4f:89:
79:fc:c3:13:9f:6f:8f:13:35:3e:9e:2d:f5:48:81:
33:ae:80:80:9d:25:46:3e:e3:2b:82:26:66:37:63:
eb:00:fa:c2:7a:19:fa:d5:8b:ab:a0:b4:73:93:db:
44:63:e9:e3:53:76:99:4b:07:8c:50:42:bd:8e:f2:
e4:07:c9:7a:de:e4:3f:99:c1:15:c2:0c:ba:42:4d:
16:32:72:98:c8:fa:7c:c1:a9:1a:da:de:b9:fc:51:
ab:bb:e0:5d:85:eb:54:df:64:d6:90:a3:2d:78:14:
86:14:ab:25:78:c0:86:83:ca:8e:20:a6:84:40:18:
9e:21:22:46:8b:b3:9b:81:e7:e6:e1:df:95:1f:6d:
30:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:16:7A:21:6C:E6:F6:01:0D:59:52:A3:28:ED:92:70:2F:87:28:A8
X509v3 Authority Key Identifier:
keyid:C1:C2:6B:B5:74:B8:9B:8C:18:66:F8:47:4B:B1:CB:00:32:64:EC:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wcJrtXS4m4wYZvhHS7HLADJk7CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/wcJrtXS4m4wYZvhHS7HLADJk7CA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/wcJrtXS4m4wYZvhHS7HLADJk7CA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:bf:bb:b7:da:14:61:d2:46:27:93:b8:5a:09:95:58:5a:85:
fa:37:1d:03:32:2f:39:71:68:c2:b4:29:95:ce:53:17:a5:7b:
51:d2:ce:55:21:17:6d:83:e9:9f:21:a3:2b:26:a5:f5:8b:8e:
b2:68:b8:f9:75:b5:5b:69:b3:54:7e:4d:41:28:f5:87:3c:65:
ad:d2:f6:e7:46:ac:a6:59:df:a4:a7:ff:98:8e:5a:74:06:bd:
bd:3a:29:7e:c6:1e:6a:88:e2:b6:48:31:4c:96:a0:eb:2c:3f:
40:85:f7:4f:e0:a2:0e:b8:a0:23:4e:7a:7f:c8:58:0f:a4:52:
75:33:92:c3:53:f1:0f:2e:79:c0:b4:51:af:6c:e7:0c:25:a8:
d2:e1:61:6d:40:e6:93:0b:ab:ff:38:d0:4e:1f:f2:c5:70:20:
a2:fc:21:2b:5a:4f:d5:15:da:c1:2f:ee:e4:6f:fe:7a:76:77:
35:ad:e4:9d:b4:47:38:f5:3d:03:6f:fe:d1:8f:d6:11:46:c1:
02:7f:4f:6d:68:20:7d:95:6a:d3:93:57:4f:70:73:10:c7:66:
05:ad:a1:59:a5:ed:d7:3b:ad:ea:3b:bd:07:1e:5e:f7:59:2d:
9b:e8:09:94:65:41:e7:af:30:a0:7b:ca:3c:bc:24:2c:09:6a:
ac:d4:16:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:51:19 2025 by rpki-client