Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.mft
File: wN3S1PAw-jY4wEvmNu-T0oknFlI.mft (raw, json)
Hash identifier: 8fOImAeYNBR1wsPA0zxmbDakpzRuAexHukFeDLDg6Hc=
Subject key identifier: 0B:54:02:68:E7:E7:5C:83:CE:15:88:1F:85:7C:B5:D3:AB:32:49:51
Authority key identifier: C0:DD:D2:D4:F0:30:FA:36:38:C0:4B:E6:36:EF:93:D2:89:27:16:52
Certificate issuer: /CN=c0ddd2d4f030fa3638c04be636ef93d289271652
Certificate serial: 0197CFBBB1EDEB997EF161CA18FE95A4DE7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wN3S1PAw-jY4wEvmNu-T0oknFlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.mft
Manifest number: 0403
Signing time: Thu 03 Jul 2025 10:01:13 +0000
Manifest this update: Thu 03 Jul 2025 10:01:13 +0000
Manifest next update: Fri 04 Jul 2025 10:01:13 +0000
Files and hashes: 1: 7XfhLun6Ve5uRxXwPsgdrE6D-fI.roa (hash: b8AATSifx7/LvpsKfDCuwWcrOC9fgkYZg2ZM6+VpEfM=)
2: iuHoct3zHKPAQY0zJWbgQODPfEo.roa (hash: Un9DAj/KSTfz3PzRpucfMK4GqYVgsTE2tiPdLJ964Po=)
3: wN3S1PAw-jY4wEvmNu-T0oknFlI.crl (hash: x4tA/IUtGOPLI6deKQgK7KoEZQ6QdVD1xObkUe1s1Yc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wN3S1PAw-jY4wEvmNu-T0oknFlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 10:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cf:bb:b1:ed:eb:99:7e:f1:61:ca:18:fe:95:a4:de:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0ddd2d4f030fa3638c04be636ef93d289271652
Validity
Not Before: Jul 3 10:01:13 2025 GMT
Not After : Jul 4 10:01:13 2025 GMT
Subject: CN=0b540268e7e75c83ce15881f857cb5d3ab324951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:00:0b:e5:28:65:01:61:52:9b:09:ec:5f:95:
ba:4e:3d:ce:6e:db:a9:99:28:95:1d:9a:f1:70:a2:
76:fe:e1:ae:4b:e1:52:bb:d0:77:60:7c:74:b3:8e:
39:a4:90:bb:50:f3:21:22:33:f1:99:81:b7:6d:5e:
07:e5:3c:2c:02:0b:e6:55:29:4f:d3:32:ef:a6:c5:
97:16:2e:8f:e4:1a:23:31:67:3b:ad:1d:7b:1b:29:
b6:7c:c8:cd:89:ee:22:9c:4d:be:4f:f6:13:1f:13:
9b:8e:52:9f:c2:5d:6d:84:3e:b1:18:24:88:51:66:
dc:42:28:14:86:94:f2:0e:22:30:bf:47:64:cf:76:
1a:f5:42:78:36:8f:52:43:7b:8b:e1:81:73:49:09:
46:a6:94:4c:09:61:cc:82:1e:4a:b1:df:cf:c4:35:
bb:96:7b:44:6b:f8:87:10:d7:24:57:76:24:d6:5a:
d1:51:13:54:66:68:e9:59:76:c8:59:32:0d:ec:9d:
66:66:4d:59:cd:02:79:99:a2:85:61:d6:af:0f:19:
0c:dd:16:f6:ba:75:a7:ab:79:96:61:1a:f1:9a:fe:
c6:97:2c:55:66:87:94:a8:75:11:8a:64:27:ee:ef:
df:1d:75:f1:0d:c4:0b:b7:07:1e:60:36:df:35:c1:
23:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:54:02:68:E7:E7:5C:83:CE:15:88:1F:85:7C:B5:D3:AB:32:49:51
X509v3 Authority Key Identifier:
keyid:C0:DD:D2:D4:F0:30:FA:36:38:C0:4B:E6:36:EF:93:D2:89:27:16:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wN3S1PAw-jY4wEvmNu-T0oknFlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:d5:10:ca:0a:f5:8a:d5:26:87:75:74:03:09:54:d2:1f:83:
57:b6:b5:78:08:30:74:64:ef:d3:f1:b7:7f:d8:f0:fd:99:ba:
fc:38:66:00:3e:58:85:cf:4e:e4:b9:eb:12:05:2b:c7:ce:46:
e3:fb:12:2f:10:9d:6e:47:20:87:b1:58:a6:b8:34:64:78:c8:
18:6b:b4:7e:12:ec:7f:95:1b:14:2f:4b:4a:a7:94:d4:7e:fb:
1d:06:64:60:d4:25:b0:3b:a6:10:63:f1:c9:38:1a:fd:66:9c:
44:ad:51:d7:a6:12:bc:63:14:c6:a2:44:ed:97:83:5b:05:5a:
d2:dc:b4:d8:ed:d6:42:06:9d:d9:24:f4:7c:0d:9d:db:40:db:
cb:75:6c:37:ce:ea:e0:b8:f8:2c:3d:04:2a:a1:ac:da:fe:62:
37:f9:b8:fb:4a:c5:a7:f7:d0:46:e1:2b:59:39:fb:bc:e6:c4:
3a:fd:eb:ee:a4:46:b3:6a:eb:92:94:2c:89:37:2e:90:bf:f9:
ef:75:23:3f:ab:79:fc:db:64:4d:cb:5f:08:35:2f:d4:b1:2c:
1b:52:ed:0c:13:f0:e5:55:5b:bd:ff:fd:46:3e:f5:50:63:18:
16:e9:dd:3f:d3:62:d0:da:62:51:a4:f2:d4:56:9a:df:6b:6f:
58:26:76:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 20:04:06 2025 by rpki-client