Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.mft
File: wOG4t6HaZANISTucb06tSW44Yc8.mft (raw, json)
Hash identifier: OtmIGAJz5bMHSH2ZLB/pnzoO4qIJJZ25obbMxAWrAGo=
Subject key identifier: 44:04:7D:5C:0E:5C:F4:15:16:70:A6:14:E5:C5:E6:AF:D0:03:2D:54
Authority key identifier: C0:E1:B8:B7:A1:DA:64:03:48:49:3B:9C:6F:4E:AD:49:6E:38:61:CF
Certificate issuer: /CN=c0e1b8b7a1da640348493b9c6f4ead496e3861cf
Certificate serial: 0197B7459F54A62FCD5E0A4582F8FB0ABB5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOG4t6HaZANISTucb06tSW44Yc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.mft
Manifest number: 2D
Signing time: Sat 28 Jun 2025 16:01:22 +0000
Manifest this update: Sat 28 Jun 2025 16:01:22 +0000
Manifest next update: Sun 29 Jun 2025 16:01:22 +0000
Files and hashes: 1: GqkYahAWuW8CVZC80Y_0nRuyPHU.roa (hash: jfcsYMa+fRQOgfblBRN6UE5BrKJvOwvJrlwzJD4gFuc=)
2: wOG4t6HaZANISTucb06tSW44Yc8.crl (hash: XGudtTYvIIxIrJNXAKju51iMm1cg0TeTbnU6IYi0S+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wOG4t6HaZANISTucb06tSW44Yc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:9f:54:a6:2f:cd:5e:0a:45:82:f8:fb:0a:bb:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0e1b8b7a1da640348493b9c6f4ead496e3861cf
Validity
Not Before: Jun 28 16:01:22 2025 GMT
Not After : Jun 29 16:01:22 2025 GMT
Subject: CN=44047d5c0e5cf4151670a614e5c5e6afd0032d54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:98:ef:b1:b9:77:55:f4:16:3c:4d:b1:2b:39:
c0:c2:2d:3d:17:c3:d2:e7:9a:39:9f:b0:cf:22:df:
61:74:6c:e8:98:58:03:fa:7e:0e:67:07:40:dc:23:
c2:8d:0c:a0:c4:f4:80:18:60:ad:12:d1:5c:50:be:
9c:70:91:bd:6f:04:6c:33:2b:4f:38:08:34:19:41:
93:16:07:05:f3:88:e6:8b:29:d4:3a:f2:d7:9a:98:
0e:bb:e1:40:c7:d6:f3:e1:57:fa:e4:34:4d:42:0e:
82:a2:d3:f8:cf:8c:20:34:cc:c7:a7:64:fa:6c:89:
94:4c:c2:77:9b:3d:9b:60:1e:20:06:9c:38:e9:6a:
9a:9c:84:2b:40:b9:c7:d6:a9:17:c8:66:fd:96:44:
c9:06:38:8d:63:c7:01:fa:a3:9e:2f:df:39:83:01:
6f:71:ee:5a:e4:80:62:c1:71:73:7c:cb:59:de:3e:
52:f5:ec:c8:2c:0e:69:da:ed:32:f4:08:09:3b:55:
0c:d5:b6:d8:fc:e8:83:e4:05:df:c9:8b:55:db:46:
a9:95:29:12:78:86:80:c2:ee:2c:ed:f5:ee:9e:f2:
d6:5d:f7:15:42:fc:a6:69:a6:19:81:b0:d5:06:53:
b9:6f:f4:e1:26:91:16:83:87:ff:6e:a9:22:c7:4c:
e3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:04:7D:5C:0E:5C:F4:15:16:70:A6:14:E5:C5:E6:AF:D0:03:2D:54
X509v3 Authority Key Identifier:
keyid:C0:E1:B8:B7:A1:DA:64:03:48:49:3B:9C:6F:4E:AD:49:6E:38:61:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOG4t6HaZANISTucb06tSW44Yc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:37:80:11:0f:db:85:35:58:fd:b3:68:e6:5e:54:f0:eb:3b:
19:5f:23:7d:2d:2a:cc:ac:72:76:ee:98:69:8c:b2:a2:69:1c:
01:9b:7f:cc:61:40:e9:a0:52:9d:f5:24:e9:5f:63:f4:9b:33:
63:f6:88:15:85:cf:b2:09:e1:09:2c:99:16:2b:f5:88:de:49:
93:23:dc:e8:56:85:c4:82:af:9f:81:7a:32:93:8f:bc:83:06:
11:b0:be:4a:a5:a3:5b:48:5b:69:e0:39:90:74:02:68:10:43:
0c:75:4c:40:31:65:a7:3d:5e:8e:42:1d:96:20:99:6b:2d:24:
c5:2e:50:99:33:03:47:90:41:b9:ba:8f:da:1e:2f:7e:c9:21:
7a:5a:de:04:6b:a6:b7:27:0f:e4:16:11:a0:95:0c:1c:08:b5:
b0:55:5e:0c:a7:de:a3:1f:7f:c0:a3:35:b2:2e:50:7a:40:9a:
7e:b2:51:24:1b:ef:f1:66:06:8f:d6:cb:f3:15:65:16:ee:f3:
80:d1:0f:f3:c7:bb:e4:84:a3:1b:35:fa:6c:bb:8b:43:fc:03:
94:74:fd:41:5d:a4:fc:42:26:d3:45:dd:2d:12:74:a5:76:ef:
9b:23:90:e1:76:bf:4a:2b:0d:47:3f:c8:29:da:09:48:48:d1:
08:dd:fa:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:00:26 2025 by rpki-client