Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/_wcypCMoB0cBFCIh49RqKfKWwpw.mft
File: _wcypCMoB0cBFCIh49RqKfKWwpw.mft (raw, json)
Hash identifier: lpQ9jvh4JLCgDntkLDrPCiGW05bRq7xGYejF18+Kxkc=
Subject key identifier: BD:B9:C7:1B:BD:6A:29:1D:C5:83:2E:17:85:9E:F0:D7:AA:42:C8:F1
Authority key identifier: FF:07:32:A4:23:28:07:47:01:14:22:21:E3:D4:6A:29:F2:96:C2:9C
Certificate issuer: /CN=ff0732a42328074701142221e3d46a29f296c29c
Certificate serial: 0197B77C469C1A4C58A41FEE074BF96ADBE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_wcypCMoB0cBFCIh49RqKfKWwpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/_wcypCMoB0cBFCIh49RqKfKWwpw.mft
Manifest number: 0164
Signing time: Sat 28 Jun 2025 17:01:04 +0000
Manifest this update: Sat 28 Jun 2025 17:01:04 +0000
Manifest next update: Sun 29 Jun 2025 17:01:04 +0000
Files and hashes: 1: 1-dSj2fWJdUO6bz9sc2BYVK5JDQE.roa (hash: dsFKxx55TJI4durjTXMUPKnGnFdN9dd8cpckDwK4aTc=)
2: _wcypCMoB0cBFCIh49RqKfKWwpw.crl (hash: G64HwJinXrGMmw+pTKeyKNB1o/Q2R6FIKu5Suo4zj0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/_wcypCMoB0cBFCIh49RqKfKWwpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/_wcypCMoB0cBFCIh49RqKfKWwpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_wcypCMoB0cBFCIh49RqKfKWwpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:46:9c:1a:4c:58:a4:1f:ee:07:4b:f9:6a:db:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff0732a42328074701142221e3d46a29f296c29c
Validity
Not Before: Jun 28 17:01:04 2025 GMT
Not After : Jun 29 17:01:04 2025 GMT
Subject: CN=bdb9c71bbd6a291dc5832e17859ef0d7aa42c8f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:7f:62:6c:ff:cc:f2:99:5d:6a:8c:be:8d:d9:
df:70:cf:c2:aa:37:fb:42:9c:c8:fb:ca:63:73:5e:
a6:ad:8a:4b:a0:cd:f5:19:d8:72:8a:8d:02:39:38:
a3:d6:5e:a4:09:f3:2a:02:5f:0f:a9:65:e4:6e:49:
02:d3:ce:dc:b9:a8:84:25:23:1c:b4:14:4f:1c:9d:
ac:8e:88:d7:16:41:b6:b2:e3:7a:fb:cc:12:a7:ad:
3f:46:5f:41:9e:5d:66:4c:d0:e0:95:7f:2e:ca:75:
3f:1f:4c:18:27:2f:59:e4:33:d3:58:25:c5:d5:d5:
16:6d:34:e2:70:6f:54:59:f5:6a:63:45:12:67:9b:
36:47:f0:41:15:9a:f5:1f:ca:9e:6a:47:20:89:7e:
74:50:0e:d8:f9:f4:31:95:18:ae:a7:96:39:b9:a1:
e3:be:8e:71:08:70:dc:20:ab:a1:cc:5b:54:71:91:
31:e4:04:10:4e:cd:7d:6c:e9:19:5d:62:8c:ff:90:
e7:ee:d9:60:09:f7:56:8d:ac:95:32:70:48:c4:2d:
43:ed:6d:76:6b:3d:8c:7b:56:3f:a1:44:26:87:0d:
af:4d:6c:f4:0a:08:16:c0:0b:60:dd:4c:2b:2d:ea:
cb:10:ac:3c:f3:e6:92:35:ca:8e:9e:e5:14:21:c1:
4e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B9:C7:1B:BD:6A:29:1D:C5:83:2E:17:85:9E:F0:D7:AA:42:C8:F1
X509v3 Authority Key Identifier:
keyid:FF:07:32:A4:23:28:07:47:01:14:22:21:E3:D4:6A:29:F2:96:C2:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_wcypCMoB0cBFCIh49RqKfKWwpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/_wcypCMoB0cBFCIh49RqKfKWwpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/_wcypCMoB0cBFCIh49RqKfKWwpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:4c:49:f4:d1:d6:15:d1:ca:94:e9:9c:df:57:78:19:ab:59:
87:c4:ec:2c:ae:2c:0f:a3:0f:00:55:c0:b9:ce:15:cc:91:73:
ea:1d:93:a2:42:80:3f:45:06:46:86:ca:17:93:3d:d6:e0:c3:
f4:c5:3e:e6:f9:17:96:e7:e6:9c:6b:30:b6:fd:9a:d3:75:4b:
0d:6d:45:45:14:a5:82:43:9f:25:65:76:81:8e:15:8b:5f:b4:
f2:7a:cd:40:2b:26:79:02:d9:43:16:d9:0d:1f:b0:0f:26:32:
d2:91:0a:37:b6:95:42:22:5f:e7:4e:97:3d:81:89:3a:1a:63:
b6:79:1b:73:2c:19:72:11:fc:ff:07:30:65:1a:c3:7d:a5:57:
97:35:29:a7:03:05:29:72:38:13:3b:34:c7:d9:d1:df:b8:ca:
ab:1c:e5:f5:9a:c7:ac:63:e3:99:a5:e4:7b:72:26:2e:a1:7e:
e4:02:80:28:f9:ab:d4:f8:79:92:68:67:c3:98:5f:2b:ad:bf:
7d:98:69:31:3e:a8:1e:c7:7c:2d:71:05:eb:20:97:bb:da:20:
4b:32:d7:ec:15:9a:47:49:a8:5c:d5:17:1b:95:43:78:f3:16:
3c:69:76:48:80:1a:41:29:6f:bf:39:10:94:04:67:42:09:36:
d4:d9:42:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:24:56 2025 by rpki-client