Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.mft
File: wqKcxRgBD3Z2NT_ylmRNm9SjVcs.mft (raw, json)
Hash identifier: oqX0knG8wxUEAaZ6336YNeYBvFhlwbKjieQCBJqDHq8=
Subject key identifier: 48:F0:46:81:AA:B0:92:AB:73:3D:08:E9:84:E2:A1:91:59:5B:B8:DA
Authority key identifier: C2:A2:9C:C5:18:01:0F:76:76:35:3F:F2:96:64:4D:9B:D4:A3:55:CB
Certificate issuer: /CN=c2a29cc518010f7676353ff296644d9bd4a355cb
Certificate serial: 0197B6A0F68489219FA4D619A7297DD63EF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.mft
Manifest number: 05A3
Signing time: Sat 28 Jun 2025 13:01:31 +0000
Manifest this update: Sat 28 Jun 2025 13:01:31 +0000
Manifest next update: Sun 29 Jun 2025 13:01:31 +0000
Files and hashes: 1: ZWfwRz9SdF5HlUEU_xQsfm2pEuc.roa (hash: FPKU4sBZtKV03dopSyyPb4q2mr5BiiBfqidcOPbFyqg=)
2: o4qbcCQCij_4lrM4fuG-GZzDpjs.roa (hash: OQOBy/7xXgD89cYeKeQCwe26Q3oYa0ii7bEbJEXvS2M=)
3: wqKcxRgBD3Z2NT_ylmRNm9SjVcs.crl (hash: +TOhzC7o9qB35s3cTocjvYmqYFvVJWG/PFZ5MKkSlwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:f6:84:89:21:9f:a4:d6:19:a7:29:7d:d6:3e:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2a29cc518010f7676353ff296644d9bd4a355cb
Validity
Not Before: Jun 28 13:01:31 2025 GMT
Not After : Jun 29 13:01:31 2025 GMT
Subject: CN=48f04681aab092ab733d08e984e2a191595bb8da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c5:5e:fb:71:32:1a:60:1b:fb:36:bb:9e:01:
4f:fd:d9:89:4e:b0:dd:56:3a:00:7b:c2:64:48:84:
85:b7:ed:4d:b8:43:4e:57:46:69:57:b9:a1:54:56:
be:6c:2c:b0:5d:29:fb:4b:9f:49:ab:27:9e:36:5f:
ef:88:33:cd:45:4f:be:cb:2c:42:11:fe:55:ed:55:
d7:51:7a:19:a3:31:d1:8c:30:60:ed:69:73:53:71:
eb:3c:f6:53:a6:3f:c1:4c:75:d0:d6:c3:92:bc:63:
0c:0f:00:77:ac:bf:76:38:55:b9:4c:e3:ee:e4:b1:
17:f6:a8:77:16:44:77:61:ef:a4:88:2a:11:ab:16:
de:3c:4f:3b:36:7d:e2:f6:cb:b1:0f:52:13:fe:07:
b1:7b:68:25:08:4d:60:d7:32:7d:ee:04:73:b9:92:
08:c3:b6:40:c9:1e:a3:5d:d3:1e:87:75:59:12:3f:
dd:35:f8:43:cd:b3:9c:5e:5f:41:8b:ef:9c:45:01:
fb:53:d7:c8:a9:65:c0:55:b7:1c:53:cf:00:ec:76:
ce:09:06:3d:64:55:93:e9:34:bf:b5:94:f6:7d:fb:
26:2d:6a:93:ff:f9:92:8b:85:f7:92:b4:8f:73:d7:
d1:ee:e4:58:00:0e:c5:e8:95:b6:87:be:60:39:84:
37:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:F0:46:81:AA:B0:92:AB:73:3D:08:E9:84:E2:A1:91:59:5B:B8:DA
X509v3 Authority Key Identifier:
keyid:C2:A2:9C:C5:18:01:0F:76:76:35:3F:F2:96:64:4D:9B:D4:A3:55:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:da:59:fd:98:0d:ed:fe:e2:09:86:03:17:1d:b8:35:2a:ec:
20:1a:02:0d:fe:a7:48:13:72:9b:c3:0f:45:74:0c:5d:fe:41:
41:cc:f8:44:b5:5d:ef:31:29:ab:f7:fe:46:4a:82:ed:e8:00:
ee:05:db:5f:d1:99:e6:4c:11:31:8a:27:40:f6:31:1f:b4:75:
3d:91:71:64:41:ca:eb:d2:7e:3e:33:bd:39:20:ad:bd:9e:31:
61:60:cb:6b:9c:99:d9:4a:2e:b3:10:c5:1c:8c:46:f7:26:1c:
7e:b7:09:c5:7b:4b:4f:33:44:eb:fd:97:18:30:d2:fd:ef:04:
22:e0:8b:94:87:30:3e:b2:7b:81:06:24:8d:71:49:04:55:03:
df:b8:2b:ae:e5:77:45:6b:5c:2b:62:ff:64:81:a2:40:a9:8d:
34:77:70:d1:02:68:e8:34:f3:b2:87:ef:96:5c:a3:b6:e4:c9:
a3:27:51:7a:dd:78:28:f4:3b:c5:bf:ec:ad:9b:c4:15:63:d5:
0d:e0:8d:a8:7a:bc:2b:05:82:eb:e1:f1:fc:50:20:ba:ca:8e:
c7:4f:f1:f7:08:f7:b5:b3:95:6d:43:c4:52:6a:6e:52:1e:53:
2e:c5:28:97:1b:62:15:d4:76:92:92:6d:5a:97:c9:87:77:18:
fa:e5:42:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:42:28 2025 by rpki-client