Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/WZDBVTdirJr1ffm1jZ3FCvQJxWY.mft
File: WZDBVTdirJr1ffm1jZ3FCvQJxWY.mft (raw, json)
Hash identifier: VhCzulCVtv/bnxDofLUvdvCNquij1HOM5FCDMHT24O0=
Subject key identifier: 6B:95:D4:17:3B:D1:97:1B:25:72:48:2E:61:1A:98:BA:CB:24:E6:8A
Authority key identifier: 59:90:C1:55:37:62:AC:9A:F5:7D:F9:B5:8D:9D:C5:0A:F4:09:C5:66
Certificate issuer: /CN=5990c1553762ac9af57df9b58d9dc50af409c566
Certificate serial: 0197B6A0B607E99E575487776871A0658010
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WZDBVTdirJr1ffm1jZ3FCvQJxWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/WZDBVTdirJr1ffm1jZ3FCvQJxWY.mft
Manifest number: 132F
Signing time: Sat 28 Jun 2025 13:01:15 +0000
Manifest this update: Sat 28 Jun 2025 13:01:15 +0000
Manifest next update: Sun 29 Jun 2025 13:01:15 +0000
Files and hashes: 1: 0G2sdhjp5lZnzYHlHNnybNAXWaA.roa (hash: uK859gUUbnU60gGhJvTBc709jYBTwYoz8yDVwe5ASzQ=)
2: WZDBVTdirJr1ffm1jZ3FCvQJxWY.crl (hash: bY77UXoDSfVkr4GUuo96OXdX6l92ryYA5EZS6C9fdyE=)
3: YgQwuXy4fXHjt8yt23lzdNRUNeE.roa (hash: JYij/MqawhcXCZJhGzOCCeBPBmK0ZpHAFOooBbBrHTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/WZDBVTdirJr1ffm1jZ3FCvQJxWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/WZDBVTdirJr1ffm1jZ3FCvQJxWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/WZDBVTdirJr1ffm1jZ3FCvQJxWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:b6:07:e9:9e:57:54:87:77:68:71:a0:65:80:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5990c1553762ac9af57df9b58d9dc50af409c566
Validity
Not Before: Jun 28 13:01:15 2025 GMT
Not After : Jun 29 13:01:15 2025 GMT
Subject: CN=6b95d4173bd1971b2572482e611a98bacb24e68a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:44:c2:12:73:ec:3b:79:60:cc:0a:e0:30:62:
d8:2f:de:12:25:18:dd:28:a9:c3:f4:21:c7:eb:e0:
ec:46:72:ea:f5:9e:b3:6d:c3:0f:23:5b:86:b9:a8:
12:b1:65:23:e0:0e:9f:bc:fb:dc:aa:a9:b9:d9:48:
ad:16:20:0a:fb:c7:34:29:6a:9a:86:43:a6:df:50:
d1:fa:0e:87:bd:d8:43:7f:61:12:c5:c2:f8:c3:c6:
cc:21:34:fb:b2:52:0e:40:5b:81:55:ff:37:5a:cd:
2e:79:5e:9c:a9:fa:c9:52:97:a1:da:f3:01:18:03:
87:ef:2d:22:e5:27:43:10:43:f7:a5:18:6a:77:f8:
87:90:23:e7:3a:9a:71:66:d7:16:50:2c:68:f3:be:
17:47:cf:50:45:46:02:e8:de:a7:87:3b:37:48:0e:
91:c2:06:50:f9:08:e3:1b:37:ea:e4:43:57:13:17:
40:3b:62:ac:b5:3a:66:a3:38:bb:18:71:be:d6:75:
bb:77:47:2f:05:0a:88:c3:d0:ed:df:f0:90:42:26:
de:73:cf:23:02:40:05:7c:48:6f:24:8a:08:f8:ce:
3f:f5:9e:2f:dd:fd:c0:96:92:86:ba:22:36:f3:6d:
37:24:84:f6:56:bd:8f:e7:b6:13:20:ba:e0:32:17:
ae:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:95:D4:17:3B:D1:97:1B:25:72:48:2E:61:1A:98:BA:CB:24:E6:8A
X509v3 Authority Key Identifier:
keyid:59:90:C1:55:37:62:AC:9A:F5:7D:F9:B5:8D:9D:C5:0A:F4:09:C5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WZDBVTdirJr1ffm1jZ3FCvQJxWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/WZDBVTdirJr1ffm1jZ3FCvQJxWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/WZDBVTdirJr1ffm1jZ3FCvQJxWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:34:d9:85:5a:59:4a:5c:b1:c0:d1:05:a6:59:d0:7f:1a:1b:
73:4f:64:5d:11:94:11:7b:1d:a3:b8:85:ef:11:c7:c0:6a:7c:
5f:22:26:07:27:86:b5:1f:65:40:56:b8:bf:36:c8:9c:3e:d7:
22:2c:5d:c5:bd:15:52:f8:0e:64:a7:9d:b3:1b:2b:4b:9f:0b:
0e:31:12:62:92:b3:3b:c4:c8:15:44:a9:00:60:0f:b2:df:9d:
1d:53:de:22:c2:ee:52:fa:c4:e9:a5:95:39:20:5e:70:c8:33:
48:52:3d:b4:91:52:5c:c3:c3:71:23:84:1a:62:5a:35:31:74:
9c:5b:88:0b:d8:a5:e3:8b:2c:a6:6d:28:30:f8:43:17:05:d8:
cd:13:ef:a7:f5:0f:17:ec:0b:99:04:77:4e:a0:e2:af:9a:1d:
ac:e7:7b:68:e1:f3:da:7c:9b:6c:37:d2:6b:15:1a:4e:4d:35:
0c:93:cf:e1:0d:61:26:1c:55:5d:7c:96:71:b1:b7:e9:a0:e6:
c9:37:7f:b3:bd:c4:cc:b4:d3:85:2a:3c:87:8f:74:07:ac:c8:
63:1b:9f:63:80:b3:a5:eb:3b:44:ff:07:17:03:49:75:15:c1:
2a:34:cf:d3:09:d3:2e:f5:7a:14:9e:b4:13:b3:9e:c4:6b:a8:
a9:e7:73:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:54:08 2025 by rpki-client