Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft
File: WduoTN3qQ_y-QemGsfx4E33P79c.mft (raw, json)
Hash identifier: c01ujNXYYcTIougbhs5LDniUGaVkdMYSnsPA7LXgiVQ=
Subject key identifier: C9:01:07:B7:AB:BB:74:AC:E5:EE:29:E1:65:02:69:E0:7B:75:FF:D5
Authority key identifier: 59:DB:A8:4C:DD:EA:43:FC:BE:41:E9:86:B1:FC:78:13:7D:CF:EF:D7
Certificate issuer: /CN=59dba84cddea43fcbe41e986b1fc78137dcfefd7
Certificate serial: 0197B632E717711D0EC5EC0A808EF376EBE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WduoTN3qQ_y-QemGsfx4E33P79c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft
Manifest number: 0398
Signing time: Sat 28 Jun 2025 11:01:18 +0000
Manifest this update: Sat 28 Jun 2025 11:01:18 +0000
Manifest next update: Sun 29 Jun 2025 11:01:18 +0000
Files and hashes: 1: RhPTeugmZDfkfUBJoLhRret8XmI.roa (hash: H4OyvWIew7LAcqrSk19ToeJf4eN45LOuyTBAz8MK5+Q=)
2: WduoTN3qQ_y-QemGsfx4E33P79c.crl (hash: ypyOSRzRr9w3uSGcci36RGrNnPHWp2WLdtgBUI3W4M0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft
rsync://rpki.ripe.net/repository/DEFAULT/WduoTN3qQ_y-QemGsfx4E33P79c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:e7:17:71:1d:0e:c5:ec:0a:80:8e:f3:76:eb:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dba84cddea43fcbe41e986b1fc78137dcfefd7
Validity
Not Before: Jun 28 11:01:18 2025 GMT
Not After : Jun 29 11:01:18 2025 GMT
Subject: CN=c90107b7abbb74ace5ee29e1650269e07b75ffd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:86:11:5d:a9:aa:53:bd:52:13:b3:0e:b8:4d:
c3:45:60:46:ed:42:7b:e8:01:d9:4c:3e:5e:7e:a4:
eb:78:83:c0:bb:31:f0:e8:4d:1c:3c:a7:f7:16:2d:
a2:45:40:50:00:e7:c1:df:a2:ee:1d:f2:49:21:e6:
25:22:5d:6a:58:30:06:2c:60:73:47:3e:71:95:52:
b9:69:04:53:3d:6d:7c:15:5e:d5:ad:46:7a:d4:1f:
11:4f:47:74:e4:69:f5:47:f7:4d:84:15:fa:b8:b2:
48:f2:75:32:b1:1f:2a:77:ea:0f:4c:8c:20:2b:77:
f1:7e:da:6e:90:f5:5e:26:f8:1e:ba:20:a3:55:5f:
40:7c:29:e8:b7:36:68:45:9f:af:fe:93:da:a0:16:
af:27:3d:b0:f9:44:d2:0f:2e:71:d9:53:9c:63:16:
a6:92:35:df:08:0e:92:92:fd:c4:91:53:22:a2:27:
18:27:e4:45:ce:56:01:3d:35:41:f3:29:42:52:2f:
56:75:57:5d:3e:fe:15:a4:b7:e2:72:50:6f:89:78:
60:0e:9f:58:8b:7e:85:6a:c5:e9:13:e3:b7:b5:fa:
a3:c8:51:9e:2b:bf:6a:2b:0d:29:57:65:62:01:70:
9f:8e:d6:51:0b:35:2f:28:b0:52:4f:31:1b:55:6d:
0f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:01:07:B7:AB:BB:74:AC:E5:EE:29:E1:65:02:69:E0:7B:75:FF:D5
X509v3 Authority Key Identifier:
keyid:59:DB:A8:4C:DD:EA:43:FC:BE:41:E9:86:B1:FC:78:13:7D:CF:EF:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WduoTN3qQ_y-QemGsfx4E33P79c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:80:b2:4e:04:80:c0:24:67:a0:14:e6:8e:19:52:e2:36:74:
54:d9:7a:88:0f:9b:62:61:18:f9:f4:11:51:3e:71:99:d7:26:
de:94:5b:3e:eb:14:6b:41:9e:06:f8:77:59:8b:1d:8e:8c:92:
73:c5:20:04:32:7a:19:b2:b1:e9:53:98:33:4b:43:91:9a:41:
ec:00:b9:a2:76:5f:74:30:06:44:3f:dc:c0:62:e8:81:82:16:
ce:f8:71:2b:52:0f:e4:d9:84:dd:09:67:9d:24:18:e1:6f:67:
44:25:5b:f9:df:26:c2:ca:a4:76:3d:8e:a5:c0:cc:a1:e5:10:
2d:81:38:7f:7a:35:8f:8a:30:ce:64:5a:3a:43:99:54:45:28:
79:4e:ae:79:12:73:33:4b:45:da:55:35:19:94:e0:ee:82:2b:
4a:03:f7:0e:4a:f8:ec:69:79:5a:82:8e:71:01:e0:75:8b:68:
da:41:f8:be:4b:f0:29:76:b2:f7:8c:8c:37:c9:17:c6:98:6e:
87:f1:4d:a8:3c:10:d3:8f:90:9f:44:86:b8:3c:8c:42:cf:84:
c6:c9:5e:b8:8b:32:39:21:68:36:cf:4b:cc:c8:e7:12:9b:22:
3e:d6:d1:cd:38:c1:56:77:ee:1b:55:67:b9:e4:de:31:8f:f6:
a3:3f:73:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:50:38 2025 by rpki-client