Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0b8373-0c2c-4b06-bf69-afbf4ecf2b50/1/wWFXjOD_N_BsJjYuosY1e5hjO3A.mft
File: wWFXjOD_N_BsJjYuosY1e5hjO3A.mft (raw, json)
Hash identifier: XaVqDYwRD5/2oD+0C5pjZVO8Bjbivjrw2kzEYUgcFLM=
Subject key identifier: 53:7A:1F:57:73:E6:D8:4E:65:76:EC:DF:64:94:92:BB:E5:66:C9:B0
Authority key identifier: C1:61:57:8C:E0:FF:37:F0:6C:26:36:2E:A2:C6:35:7B:98:63:3B:70
Certificate issuer: /CN=c161578ce0ff37f06c26362ea2c6357b98633b70
Certificate serial: 0197B6A069F26721E629265D3D09AD7ADDA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wWFXjOD_N_BsJjYuosY1e5hjO3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0b8373-0c2c-4b06-bf69-afbf4ecf2b50/1/wWFXjOD_N_BsJjYuosY1e5hjO3A.mft
Manifest number: 0D65
Signing time: Sat 28 Jun 2025 13:00:55 +0000
Manifest this update: Sat 28 Jun 2025 13:00:55 +0000
Manifest next update: Sun 29 Jun 2025 13:00:55 +0000
Files and hashes: 1: VaQFkBkaVYjwzbk-d1HfVSqGj30.roa (hash: mgqfVOInqFPvEjCxJre+1kdiyjEUS8UusvaHKwVL6Uo=)
2: wWFXjOD_N_BsJjYuosY1e5hjO3A.crl (hash: jguakWGIcHYNmYgzRR12IDMjGJjdeGj/LOEBZ1UV+2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0b8373-0c2c-4b06-bf69-afbf4ecf2b50/1/wWFXjOD_N_BsJjYuosY1e5hjO3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/0b8373-0c2c-4b06-bf69-afbf4ecf2b50/1/wWFXjOD_N_BsJjYuosY1e5hjO3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/wWFXjOD_N_BsJjYuosY1e5hjO3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:69:f2:67:21:e6:29:26:5d:3d:09:ad:7a:dd:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c161578ce0ff37f06c26362ea2c6357b98633b70
Validity
Not Before: Jun 28 13:00:55 2025 GMT
Not After : Jun 29 13:00:55 2025 GMT
Subject: CN=537a1f5773e6d84e6576ecdf649492bbe566c9b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d6:f0:b6:84:f8:92:38:dd:9e:6a:90:7d:a7:
40:a1:eb:48:a8:0d:ca:43:83:98:9f:c3:00:e4:78:
62:b2:f5:58:c2:29:21:8e:69:a5:5a:32:5c:03:9a:
eb:63:0f:ad:cb:2b:4d:46:df:35:73:ba:1a:4d:1b:
de:4c:fb:6e:e6:f8:f9:93:dd:1d:b0:95:ab:ac:e4:
04:6c:8f:88:b1:01:64:2f:a1:aa:44:ed:a6:61:2e:
c5:85:c2:73:c9:86:33:3b:2a:79:a2:bf:53:8e:5a:
86:35:2f:1c:f2:c3:c5:9f:62:3f:2a:a3:4c:b7:97:
6c:08:0e:40:b6:27:c1:25:39:e0:ca:97:34:a3:c1:
6b:36:8c:a5:fc:c9:4e:aa:13:57:b5:42:d7:45:4f:
b1:ff:ac:b8:22:90:1c:a4:2d:b1:66:77:17:5b:dd:
90:7c:db:32:a2:ce:55:97:9c:1a:5f:97:fe:cd:b1:
70:ae:e6:0a:a0:36:41:ec:e6:65:f3:8b:65:6e:04:
a4:68:31:99:2d:35:65:3a:2c:cf:be:77:42:fc:77:
a3:38:15:69:2c:f2:de:8a:73:3f:57:c3:dc:57:bd:
f2:25:60:ae:f5:9b:a2:0d:cc:43:79:da:13:33:b5:
50:c9:75:ca:d3:29:3a:b8:2c:cf:88:68:31:02:73:
96:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:7A:1F:57:73:E6:D8:4E:65:76:EC:DF:64:94:92:BB:E5:66:C9:B0
X509v3 Authority Key Identifier:
keyid:C1:61:57:8C:E0:FF:37:F0:6C:26:36:2E:A2:C6:35:7B:98:63:3B:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wWFXjOD_N_BsJjYuosY1e5hjO3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0b8373-0c2c-4b06-bf69-afbf4ecf2b50/1/wWFXjOD_N_BsJjYuosY1e5hjO3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0b8373-0c2c-4b06-bf69-afbf4ecf2b50/1/wWFXjOD_N_BsJjYuosY1e5hjO3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:0f:fe:27:44:c2:9b:a9:ff:1a:46:20:ab:9e:f3:b3:51:eb:
d8:59:c8:1e:cb:39:a2:f1:bd:92:a7:e6:ea:3e:7a:32:ae:21:
86:1c:05:cd:4b:46:bd:84:78:0b:c8:f4:70:1e:bb:fc:27:75:
b8:a2:4f:ff:6f:e4:44:52:3e:ee:a0:b8:23:76:d4:bb:89:6d:
b1:c1:d0:5f:f5:c7:18:88:74:f7:c9:dc:96:50:6c:79:27:38:
bb:5f:b7:02:7e:43:56:6f:da:50:0b:dc:04:40:ff:e0:43:10:
be:28:e0:29:3a:1d:b0:be:da:e4:f5:9c:9b:91:9e:3e:43:74:
ee:b2:34:a7:a4:2c:7b:53:b1:74:0c:ca:fb:ad:3c:ff:39:2f:
55:91:c1:6f:43:12:23:57:61:1f:74:ce:47:fe:63:22:26:bc:
e2:18:1d:5c:0a:54:1b:c7:a3:93:8f:a0:9d:f1:ce:5c:7d:e1:
21:d9:0e:f5:a5:3f:ff:2f:43:1f:a0:87:d5:9a:c4:d2:38:60:
3a:f4:52:40:6f:21:84:21:fa:1e:2b:8c:c5:c0:49:43:12:d3:
75:5b:3f:7a:de:86:c5:8e:ac:92:d7:66:5d:17:b6:1a:34:f5:
50:2c:09:63:35:b0:17:ed:e1:df:e7:48:5f:69:b1:2a:af:c7:
b9:ab:d2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:46:00 2025 by rpki-client