Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.mft
File: wxu0Tt4q_gv6nXi6KTJJVff8YJE.mft (raw, json)
Hash identifier: TlGB9yDpyYEyVs04JijpplrMn7Eko4h9Z2EcLV/Ne5Q=
Subject key identifier: D9:2E:5E:F9:DF:93:46:93:2F:2B:2F:9F:A3:C5:34:E2:60:80:14:BC
Authority key identifier: C3:1B:B4:4E:DE:2A:FE:0B:FA:9D:78:BA:29:32:49:55:F7:FC:60:91
Certificate issuer: /CN=c31bb44ede2afe0bfa9d78ba29324955f7fc6091
Certificate serial: 0197D1A9F2E448FAA682A32CD06224DD56E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wxu0Tt4q_gv6nXi6KTJJVff8YJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.mft
Manifest number: 0CA5
Signing time: Thu 03 Jul 2025 19:01:05 +0000
Manifest this update: Thu 03 Jul 2025 19:01:05 +0000
Manifest next update: Fri 04 Jul 2025 19:01:05 +0000
Files and hashes: 1: GzFkstv5wkhfRB-938uIDYh-Wxo.roa (hash: 4jcDDGU9h854aDRD3uRk10AMRg0wkYSddBT/bLLaKOg=)
2: wxu0Tt4q_gv6nXi6KTJJVff8YJE.crl (hash: NFqCUaWJEo7Bb+9xnpNlAjkzy3gTOX066zbsbylqOTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wxu0Tt4q_gv6nXi6KTJJVff8YJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 17:39:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d1:a9:f2:e4:48:fa:a6:82:a3:2c:d0:62:24:dd:56:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c31bb44ede2afe0bfa9d78ba29324955f7fc6091
Validity
Not Before: Jul 3 19:01:05 2025 GMT
Not After : Jul 4 19:01:05 2025 GMT
Subject: CN=d92e5ef9df9346932f2b2f9fa3c534e2608014bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2e:4b:39:74:06:7a:39:ee:37:59:ed:c9:ca:
f3:4b:72:97:76:c3:f3:20:d8:a1:78:b9:ec:52:60:
5b:25:bd:44:ef:5e:bd:90:fb:16:fd:92:21:28:ac:
51:0f:a1:ab:de:ed:3e:a9:43:fc:c7:7c:52:18:42:
be:d5:eb:71:b0:6a:a0:14:5f:8a:91:96:bf:eb:23:
5f:c0:99:c7:84:15:7d:df:58:78:4d:c9:d4:96:da:
9f:eb:4b:bb:01:0b:b8:34:2e:58:09:e1:cc:c2:f7:
c4:42:0c:2d:dd:f7:c9:3c:91:3e:9c:70:72:91:3e:
73:9d:00:44:e6:aa:66:14:ec:d0:71:3a:51:65:ae:
4c:6a:f4:bc:8e:a2:0e:b4:9b:82:4b:38:48:5a:c1:
2a:1f:1f:9a:dc:6a:17:53:bd:36:b5:7c:2a:48:e4:
c6:7a:e4:ce:bc:3e:53:01:37:33:7f:74:44:b0:cb:
db:46:64:1e:34:31:57:b4:be:f6:24:79:c2:2a:15:
f5:3d:6c:d7:7a:c7:de:6b:fd:da:08:c6:02:99:2e:
cb:96:a9:a0:1d:31:67:c4:2f:d3:6d:e7:b4:53:6b:
91:b9:d0:43:1a:a4:8e:a5:e9:07:77:d1:60:fd:21:
ea:72:ce:8b:a8:42:02:f1:67:a3:7a:c5:84:ea:0d:
b3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:2E:5E:F9:DF:93:46:93:2F:2B:2F:9F:A3:C5:34:E2:60:80:14:BC
X509v3 Authority Key Identifier:
keyid:C3:1B:B4:4E:DE:2A:FE:0B:FA:9D:78:BA:29:32:49:55:F7:FC:60:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wxu0Tt4q_gv6nXi6KTJJVff8YJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:93:72:45:a5:25:83:06:4a:4a:bd:43:23:f1:f8:9f:37:16:
36:9c:5e:1f:aa:74:bc:e6:81:c1:6a:99:ab:25:b1:7c:1d:c3:
00:e7:e7:ff:36:9d:d3:95:55:0f:5a:cc:4d:4a:44:82:3b:08:
3d:0c:a1:dc:5a:24:4f:f0:58:82:f9:65:6a:bf:1b:a4:5d:55:
f5:1f:11:46:3a:a1:69:bc:27:2b:cb:b5:50:45:7e:71:1c:37:
24:d5:22:72:23:46:d8:6a:f1:b1:4f:71:5b:21:49:9f:3e:9a:
32:a6:17:5c:de:33:f2:c8:12:42:aa:68:69:11:a4:a8:16:57:
b6:d4:2e:42:38:06:5a:75:06:2c:bd:dd:8e:7c:2a:f9:ee:3c:
d2:52:e3:f0:cb:de:8c:c0:b3:0c:ee:f4:77:ff:57:60:e1:25:
06:cd:89:71:40:dc:e4:9e:9a:00:27:26:3d:34:72:13:ca:19:
38:d3:d8:12:98:2d:06:25:3e:7b:07:76:7d:c5:9e:07:39:d6:
5c:b9:89:d4:08:d7:6e:1c:23:c1:43:fc:d5:ee:75:08:be:00:
c2:88:b1:2d:8d:94:a6:a0:54:a5:d7:3e:9e:ec:32:92:e5:54:
3e:f0:29:48:5e:9c:bc:bc:d0:36:43:3f:39:87:d1:7e:2e:0f:
bd:af:4a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 02:17:19 2025 by rpki-client