Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.mft
File: wqkR1pxPZFehCd53scdSSdxTDhc.mft (raw, json)
Hash identifier: Z2SeIygDaVlDp5M2KXy3+kOjHlIHi0HFrDcPcsB8ksk=
Subject key identifier: 2C:3A:8B:93:D8:5F:9B:69:8C:5E:2C:2F:76:1D:D0:2A:D1:F6:97:73
Authority key identifier: C2:A9:11:D6:9C:4F:64:57:A1:09:DE:77:B1:C7:52:49:DC:53:0E:17
Certificate issuer: /CN=c2a911d69c4f6457a109de77b1c75249dc530e17
Certificate serial: 0197B9A194EC5EFF6F415C51517970FC4BE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wqkR1pxPZFehCd53scdSSdxTDhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.mft
Manifest number: 0829
Signing time: Sun 29 Jun 2025 03:01:03 +0000
Manifest this update: Sun 29 Jun 2025 03:01:03 +0000
Manifest next update: Mon 30 Jun 2025 03:01:03 +0000
Files and hashes: 1: JlMTszQ0SriAWERqlr9FMnp6WvU.roa (hash: M6WDGwhPPqHvkOqSI6cVPu36gkAbrulfoDxAqaGV7po=)
2: wqkR1pxPZFehCd53scdSSdxTDhc.crl (hash: qXStE5vqdacIcSXx1PZpg9+Q8blM7szvNwsnqM1ukDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wqkR1pxPZFehCd53scdSSdxTDhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 03:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:94:ec:5e:ff:6f:41:5c:51:51:79:70:fc:4b:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2a911d69c4f6457a109de77b1c75249dc530e17
Validity
Not Before: Jun 29 03:01:03 2025 GMT
Not After : Jun 30 03:01:03 2025 GMT
Subject: CN=2c3a8b93d85f9b698c5e2c2f761dd02ad1f69773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:24:a2:66:e4:59:66:01:75:ae:72:af:58:c2:
34:bb:b1:4f:de:68:a6:81:8e:9e:7c:59:aa:c7:65:
32:c3:c7:5b:4a:8a:b8:6a:29:e0:07:ff:21:74:3f:
28:74:23:04:c0:dd:89:a7:55:d9:11:0f:da:1d:2a:
a1:ce:17:fe:cd:4c:de:54:b3:09:8d:8b:e5:67:e6:
93:93:fa:9f:a0:94:4f:e9:ee:dd:6b:bd:26:9f:8d:
2e:75:9b:21:e4:eb:f0:53:05:69:f4:0a:76:21:e9:
64:c1:6c:e7:da:3b:b3:8f:bf:a7:32:2d:c9:fb:4d:
76:96:2c:b9:3d:d9:8e:55:af:52:2b:75:b4:ab:02:
de:8a:60:99:8f:b1:b6:4c:68:04:be:fe:fa:99:b9:
9f:d0:53:bf:01:da:e1:45:24:40:6b:22:3e:8a:2d:
5d:9f:5c:53:63:88:35:5e:d3:7e:b9:5c:bb:a5:3c:
4d:16:e2:15:c8:58:2c:7e:1b:98:a2:56:76:05:81:
c6:85:7f:94:87:52:6b:4a:cb:cd:71:7a:79:78:b7:
46:2c:38:8b:1e:a6:8a:d8:ae:98:f5:be:56:bb:74:
af:cc:9b:d6:82:1e:48:1d:07:53:da:13:bf:a0:de:
71:5c:9f:08:aa:68:97:15:6a:5e:1b:51:1f:77:c5:
1e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:3A:8B:93:D8:5F:9B:69:8C:5E:2C:2F:76:1D:D0:2A:D1:F6:97:73
X509v3 Authority Key Identifier:
keyid:C2:A9:11:D6:9C:4F:64:57:A1:09:DE:77:B1:C7:52:49:DC:53:0E:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wqkR1pxPZFehCd53scdSSdxTDhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:0b:76:85:91:80:f4:4e:ee:c6:6c:a8:90:a4:f0:7b:fb:a2:
37:7b:5c:49:7b:9e:99:1b:e6:e2:f1:65:00:31:c8:df:dd:e7:
eb:de:6f:aa:08:05:52:df:6e:22:3d:10:ae:c5:c2:1a:a6:73:
9b:e8:50:a9:7e:8d:c0:c4:f3:07:93:97:99:98:bd:a7:7b:ec:
95:d2:ce:f3:0c:50:c9:ee:e0:c5:35:56:2e:ae:40:25:47:27:
f5:6f:f9:49:8a:c3:a7:49:62:f6:52:a6:14:a7:b8:24:4d:ae:
dc:cc:3f:d9:df:53:f0:ba:5e:15:39:58:8d:7d:8b:d9:1e:cf:
92:86:af:da:b3:64:7e:d7:ec:0e:bc:08:5f:fb:78:dc:8d:bd:
5f:82:8c:7d:02:35:67:88:47:b7:4b:41:9c:ac:66:cd:aa:88:
97:9b:46:8a:eb:61:e9:06:b0:14:12:40:6e:ce:8c:c6:a7:80:
89:eb:a1:0c:23:53:2a:95:3a:f9:6c:59:2d:d7:6b:a0:f0:d0:
e4:93:09:31:e9:29:4c:33:9c:f4:e4:21:9d:f8:e2:f7:f4:73:
cf:26:98:bd:02:bb:0d:0b:d5:1f:9b:c8:b4:2f:94:27:74:86:
5e:6a:74:83:17:c8:9e:c1:02:24:a8:41:30:c1:a6:bd:69:21:
15:4d:46:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:18:48 2025 by rpki-client