Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.mft
File: wpGTNK0q1TYWw0_s6WzikjD4Y0k.mft (raw, json)
Hash identifier: LYFwzxbEVRbfx4yWuh7OT5V5bMXls07vsZ5RmO+RIRE=
Subject key identifier: C9:5B:97:90:90:6B:B6:12:F5:B6:8D:F0:4B:13:D2:E3:42:20:0F:78
Authority key identifier: C2:91:93:34:AD:2A:D5:36:16:C3:4F:EC:E9:6C:E2:92:30:F8:63:49
Certificate issuer: /CN=c2919334ad2ad53616c34fece96ce29230f86349
Certificate serial: 0197B745ACB5702CE8F0DC2937C1BC844AD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wpGTNK0q1TYWw0_s6WzikjD4Y0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.mft
Manifest number: 0585
Signing time: Sat 28 Jun 2025 16:01:26 +0000
Manifest this update: Sat 28 Jun 2025 16:01:26 +0000
Manifest next update: Sun 29 Jun 2025 16:01:26 +0000
Files and hashes: 1: GeXsXGYacgDo76JSLUvujh0bfdU.roa (hash: fLfZrJRRlaHjAC3DtGoIdZbflJwGMzqPeY1ONg3jVPk=)
2: b800M8UQE_ndSkfHQhV3cPUcjPM.roa (hash: MbkUQn3Ix8UmF2oKyZjDZOrZVxkNdqgLjfIY0GRvAPU=)
3: wpGTNK0q1TYWw0_s6WzikjD4Y0k.crl (hash: E1aht32hg+j+itZcOFuEbi0/lwNztYdEbTAzsoLjzrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/wpGTNK0q1TYWw0_s6WzikjD4Y0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:ac:b5:70:2c:e8:f0:dc:29:37:c1:bc:84:4a:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2919334ad2ad53616c34fece96ce29230f86349
Validity
Not Before: Jun 28 16:01:26 2025 GMT
Not After : Jun 29 16:01:26 2025 GMT
Subject: CN=c95b9790906bb612f5b68df04b13d2e342200f78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:70:ab:10:1f:9a:8c:f4:a5:d9:7d:9a:bf:49:
ca:18:8f:4b:4a:04:2c:22:7b:82:47:03:22:96:61:
59:d9:c8:e4:70:6b:0b:32:b1:b1:9b:fd:ff:0a:e0:
1c:2f:57:31:3a:65:da:40:22:d4:86:87:af:4d:23:
95:34:45:5c:6e:f9:66:e8:3e:5b:c6:b9:22:63:e2:
a7:32:28:ad:8f:09:3a:68:6d:45:d5:c5:89:a0:bd:
63:1b:c9:f0:a6:9c:76:ce:bc:dd:cf:73:ab:a0:bc:
e9:9f:1f:fc:66:40:b2:7d:2e:3a:ff:06:9b:48:bd:
f1:96:8a:28:08:8a:6a:20:a0:94:fe:c1:44:b1:0c:
40:e8:27:3b:60:89:0f:cd:7a:27:40:40:52:47:36:
ca:74:86:58:73:ae:85:28:0a:e9:59:bc:45:ed:7e:
cf:c1:a5:08:0a:3a:00:07:c9:94:67:19:c4:66:dd:
6b:02:6a:cc:15:dc:5d:df:4a:59:88:16:b8:5e:b1:
b1:d5:33:5a:95:95:2e:57:d5:0b:5e:12:31:df:3e:
b1:19:6a:cf:d1:0d:ce:55:2d:0e:b8:34:ca:70:13:
5a:84:aa:ad:e1:a7:c6:5a:d8:33:01:a4:4b:0f:e7:
dd:da:94:81:50:6f:ca:e5:a1:3a:4b:3e:e9:50:44:
d1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:5B:97:90:90:6B:B6:12:F5:B6:8D:F0:4B:13:D2:E3:42:20:0F:78
X509v3 Authority Key Identifier:
keyid:C2:91:93:34:AD:2A:D5:36:16:C3:4F:EC:E9:6C:E2:92:30:F8:63:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wpGTNK0q1TYWw0_s6WzikjD4Y0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:36:df:9d:cc:78:ab:b8:bb:22:d7:39:73:38:14:a8:b8:21:
0e:e6:93:65:48:af:84:22:bb:4b:a5:17:19:58:e5:d4:02:06:
59:55:98:32:fb:13:5a:b4:d9:27:3c:53:e8:fe:b1:66:0f:cc:
06:bd:56:65:7c:6e:fe:b9:b5:ff:c5:10:d9:1c:9d:a3:eb:a1:
2e:0c:c0:c1:6b:5b:eb:21:9e:9e:47:41:9d:d7:4e:b4:f0:55:
b4:df:8a:53:fa:a1:18:dc:d6:cc:9b:26:fe:2a:62:a9:af:dd:
50:34:61:88:ac:2f:0c:de:b3:f9:e5:05:77:b2:03:de:78:e1:
51:a7:03:d7:0d:35:0b:ef:85:9c:c7:e1:36:06:1f:47:26:32:
6b:6b:07:21:a5:1f:70:78:5a:bb:72:39:e7:7d:89:b4:e2:7a:
c5:2d:9c:65:84:76:fb:3e:f7:7a:9e:6c:f8:9d:57:2d:ef:b2:
b5:c8:d3:09:c6:e1:19:99:42:ed:4c:da:3e:43:28:0c:ad:1a:
03:72:3c:fb:c2:52:0a:5c:f0:4d:45:06:2c:9d:48:e9:ca:d8:
0e:6b:63:5a:7c:7a:1a:03:6f:11:e2:ab:2f:91:a4:4c:57:da:
d6:37:8e:26:c4:9e:1f:44:5f:93:c3:78:22:9f:47:93:47:ff:
c1:5a:d3:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:27:43 2025 by rpki-client