Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft
File: wv0sdK1vri3dD26cOf3oMYk65vk.mft (raw, json)
Hash identifier: GgfcRpMlRLdWSR3mPnwmxr1YVNeDCT9zJPwR4Y/kNM8=
Subject key identifier: F2:17:20:C3:E5:90:9F:CC:55:51:4D:5D:A0:51:F5:4A:CC:49:3E:CA
Authority key identifier: C2:FD:2C:74:AD:6F:AE:2D:DD:0F:6E:9C:39:FD:E8:31:89:3A:E6:F9
Certificate issuer: /CN=c2fd2c74ad6fae2ddd0f6e9c39fde831893ae6f9
Certificate serial: 0197B6D77740AF8CDBD6A85FE9E051B2767C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wv0sdK1vri3dD26cOf3oMYk65vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft
Manifest number: 0BB9
Signing time: Sat 28 Jun 2025 14:01:03 +0000
Manifest this update: Sat 28 Jun 2025 14:01:03 +0000
Manifest next update: Sun 29 Jun 2025 14:01:03 +0000
Files and hashes: 1: g0tJ6HAhOEXfRw9hpwjv9qGtrPM.roa (hash: zh4s24WsuFFY5gPWDTRufukEWHpAkIbH1s15tmhjBvk=)
2: vJU7TYTNdrKazsGkyXHeqona0Pg.roa (hash: iL9E8+h90/3EbQ79KJw98Dj0cUBdo61gLVaVCxN/WHk=)
3: wv0sdK1vri3dD26cOf3oMYk65vk.crl (hash: 6cVzRj2lPERs2gjWj0dFEu8qFPT3NNs2/t40FLNOw2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wv0sdK1vri3dD26cOf3oMYk65vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:77:40:af:8c:db:d6:a8:5f:e9:e0:51:b2:76:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2fd2c74ad6fae2ddd0f6e9c39fde831893ae6f9
Validity
Not Before: Jun 28 14:01:03 2025 GMT
Not After : Jun 29 14:01:03 2025 GMT
Subject: CN=f21720c3e5909fcc55514d5da051f54acc493eca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:af:fd:bf:de:8d:af:87:0b:3b:23:56:d1:73:
7a:c7:83:e0:09:62:60:c2:e6:61:f7:57:50:7d:92:
6d:9d:d3:39:48:aa:71:db:2d:be:ca:46:38:3c:1a:
cb:79:96:67:29:9e:81:ac:43:40:65:a6:f9:18:b3:
eb:28:ad:a9:15:f4:3f:84:77:53:46:54:2a:c3:6c:
4e:a4:01:7a:30:b3:f3:e7:b9:0c:b5:64:af:64:39:
a4:5e:ec:74:5d:4f:2d:35:77:ff:21:1c:a1:2f:4d:
f4:00:67:bf:88:97:1d:64:df:ee:32:10:d4:cc:fb:
5a:c1:3d:82:31:2d:7a:fc:22:0b:e6:b0:7f:75:f9:
05:2f:8d:3c:6c:3e:01:d1:0d:cf:e7:e4:fe:0f:c1:
c1:24:c7:f6:bf:a3:14:01:68:cf:ad:55:93:08:94:
47:2d:e4:c6:3c:51:d8:44:34:3b:b1:df:18:9f:46:
a1:3e:ed:3f:73:09:1b:93:62:f8:a0:44:cf:62:62:
d6:31:b8:6c:31:e9:f1:b2:b0:6f:84:a9:f5:96:69:
bd:07:1c:81:cf:ab:0e:e7:7a:f4:72:e4:43:1d:9b:
58:bf:12:e7:32:ad:d5:c2:cd:a8:45:7c:8a:88:af:
df:a2:00:dd:8e:be:52:a5:37:4e:ec:06:13:94:1b:
a6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:17:20:C3:E5:90:9F:CC:55:51:4D:5D:A0:51:F5:4A:CC:49:3E:CA
X509v3 Authority Key Identifier:
keyid:C2:FD:2C:74:AD:6F:AE:2D:DD:0F:6E:9C:39:FD:E8:31:89:3A:E6:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wv0sdK1vri3dD26cOf3oMYk65vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:a8:e0:64:38:8b:2f:da:22:fc:c7:a8:f5:1a:7f:07:4a:70:
95:b1:64:99:e3:1e:43:62:84:ab:3f:f0:75:3b:03:1c:45:97:
a6:36:2b:f3:24:d3:22:87:a7:5f:71:46:f7:2d:c4:da:13:29:
ef:6e:92:e8:02:c6:81:2d:c7:a3:40:bf:d9:22:61:08:b3:59:
3f:70:31:a4:de:9b:13:69:cf:90:28:5c:f9:a6:dc:a2:84:dc:
d1:46:ef:4b:40:77:73:9f:b3:aa:69:26:bf:77:7e:60:a5:77:
c5:01:28:77:67:f6:93:79:05:96:c3:c1:8c:a9:6a:4f:44:e7:
26:6d:59:0c:af:5e:3a:10:1c:94:15:3e:d3:49:25:f4:64:1a:
70:b3:e9:54:ec:16:a8:5d:54:0a:0d:8f:13:4b:81:c1:d4:69:
f5:c5:e9:91:50:ee:de:20:21:22:27:ea:33:fa:88:10:d8:fb:
66:3d:14:bd:9b:e0:8c:50:60:50:80:ef:33:27:5d:93:fa:7e:
6e:b3:50:74:32:c3:ed:9c:11:b5:59:54:9d:06:0a:5e:49:ec:
37:e5:87:9d:d1:99:fc:88:2a:4f:36:76:90:03:dd:f4:68:11:
7e:e5:f6:da:16:21:03:81:94:8b:d6:e5:d4:38:15:9e:3a:70:
41:a7:fb:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:15:46 2025 by rpki-client