Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
File: wiEliXTujgVFYMcXb4NH1DVbmoc.mft (raw, json)
Hash identifier: cE6T2ScSgnwzJecqEfgMApjDDXYxcTvl5aoqIy46sHc=
Subject key identifier: 22:BE:C0:73:76:DA:60:D2:F3:24:B4:20:E1:80:49:C9:31:48:62:7F
Authority key identifier: C2:21:25:89:74:EE:8E:05:45:60:C7:17:6F:83:47:D4:35:5B:9A:87
Certificate issuer: /CN=c221258974ee8e054560c7176f8347d4355b9a87
Certificate serial: 0197B9D8BD56EDD499A998EB7A1EC21B2356
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
Manifest number: 07F1
Signing time: Sun 29 Jun 2025 04:01:18 +0000
Manifest this update: Sun 29 Jun 2025 04:01:18 +0000
Manifest next update: Mon 30 Jun 2025 04:01:18 +0000
Files and hashes: 1: oXdvfaAw2HX5k9hgoYRskK2gnZ0.roa (hash: RsMteruai2QKgImCyNPBir6yRcbFaU5c9mP5yO+ruyE=)
2: wiEliXTujgVFYMcXb4NH1DVbmoc.crl (hash: 9yD0XY+L3bE3LoLoG/xJE/JgKZYvRzcrDVCvlgC9v0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:d8:bd:56:ed:d4:99:a9:98:eb:7a:1e:c2:1b:23:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c221258974ee8e054560c7176f8347d4355b9a87
Validity
Not Before: Jun 29 04:01:18 2025 GMT
Not After : Jun 30 04:01:18 2025 GMT
Subject: CN=22bec07376da60d2f324b420e18049c93148627f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b0:29:6d:1b:7c:05:c2:dd:c4:74:d0:36:33:
54:46:4e:d3:11:31:ae:ba:d3:a4:30:fd:e3:68:d2:
bf:a8:68:1f:97:0a:26:3d:84:38:8a:89:6a:b7:9f:
1e:28:4b:f0:70:70:91:14:7b:34:fb:4f:6a:1d:bb:
ef:45:f3:c7:ee:1a:93:27:4a:6c:59:dd:16:3c:c9:
b4:ad:cc:8f:b7:39:db:36:23:4c:5f:63:b4:6e:fe:
d7:5c:e4:5c:04:25:4b:1e:ca:e5:74:a2:e8:37:3b:
c5:b8:54:4d:35:d6:78:e9:fd:c6:92:52:93:64:6c:
ce:57:01:3c:19:fd:c6:3d:3f:94:f6:c7:e0:0f:2f:
d3:a9:5c:81:27:e8:6e:5b:b3:ea:67:28:f6:ff:2e:
87:20:bf:df:6b:66:f9:51:71:3f:5c:b1:e8:45:6a:
2b:1d:20:b1:88:97:0a:07:0a:9a:10:a7:51:07:49:
8c:72:f9:18:35:35:d7:36:7f:92:24:66:56:ce:8f:
67:4b:17:25:77:cd:f9:9d:30:a6:6b:df:52:c7:a1:
28:7d:0c:cf:ac:83:d0:84:e0:d2:92:57:96:28:be:
3c:ac:60:bb:3d:52:b8:ea:37:ee:37:bf:e4:9e:85:
44:1d:42:25:3b:3a:2f:d8:0d:c5:83:7b:15:db:b0:
db:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:BE:C0:73:76:DA:60:D2:F3:24:B4:20:E1:80:49:C9:31:48:62:7F
X509v3 Authority Key Identifier:
keyid:C2:21:25:89:74:EE:8E:05:45:60:C7:17:6F:83:47:D4:35:5B:9A:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:36:19:fc:5e:3b:0c:89:43:8d:d0:61:8a:c2:53:4b:1a:be:
ba:ac:3d:bd:72:01:b9:2e:54:11:cc:04:9b:0a:44:1a:3e:a0:
95:79:dd:0c:ee:23:67:68:aa:ee:76:75:ff:81:36:8e:c9:ec:
b9:79:ae:44:42:50:c7:7c:70:b5:af:93:75:37:07:03:d9:aa:
c4:b6:e5:72:a8:f0:7a:e3:9c:6d:b2:e8:46:25:ed:e0:71:ec:
7a:03:aa:a0:e3:74:51:67:8d:01:f2:f0:af:07:8b:5c:f6:f5:
de:e2:6d:80:03:f5:e8:ca:45:10:48:5b:10:17:76:06:3c:db:
8d:e8:f2:f1:ea:ea:b9:14:ae:16:24:76:84:e3:f5:3d:e6:48:
0c:9f:ef:83:c0:b1:8c:c7:fb:1f:40:9c:33:55:8c:79:c9:71:
d2:19:aa:bd:9a:83:5c:8a:91:5a:45:ff:58:5e:77:b1:9c:e8:
36:25:e9:f3:4c:6b:7a:7a:5e:fd:1c:8b:00:6c:44:9f:43:78:
12:d7:58:5b:5d:f4:f9:4b:81:60:30:30:4c:ba:6d:aa:c4:c3:
b9:eb:42:16:3f:64:47:61:4d:3a:23:f4:15:86:01:a5:4a:1a:
e5:b9:14:1a:61:8c:b1:40:d8:c6:7b:6b:78:f6:85:09:77:7d:
11:19:19:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 12:00:34 2025 by rpki-client