Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/1f8cb4-1712-4e53-8d24-c91bf50104b9/1/wgiXwdvWBpKRN-ZyutDB9n5jfRY.mft
File: wgiXwdvWBpKRN-ZyutDB9n5jfRY.mft (raw, json)
Hash identifier: 21Frmwx6gCi2HGXwYp5Bo74YGi0G9Pkeq36F6jLeFOw=
Subject key identifier: 67:24:70:2C:82:F9:34:BD:EE:4E:F5:02:8E:26:AB:37:40:5E:F4:A5
Authority key identifier: C2:08:97:C1:DB:D6:06:92:91:37:E6:72:BA:D0:C1:F6:7E:63:7D:16
Certificate issuer: /CN=c20897c1dbd606929137e672bad0c1f67e637d16
Certificate serial: 0197C8DDD3099D59D8A7B5A9AC0D0C5D072A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wgiXwdvWBpKRN-ZyutDB9n5jfRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/1f8cb4-1712-4e53-8d24-c91bf50104b9/1/wgiXwdvWBpKRN-ZyutDB9n5jfRY.mft
Manifest number: 11E1
Signing time: Wed 02 Jul 2025 02:01:10 +0000
Manifest this update: Wed 02 Jul 2025 02:01:10 +0000
Manifest next update: Thu 03 Jul 2025 02:01:10 +0000
Files and hashes: 1: Fbynj4C6zdRgu6gIq2-WxH6T_LA.roa (hash: 1G7T6CHRBzMTi8lz6sG9TXAsvyynmWFubPkkTd5+Xfk=)
2: wgiXwdvWBpKRN-ZyutDB9n5jfRY.crl (hash: 0jyqkWQSv/vtCn9ZW1Z9ExoY2DbWJBq2MPxvkqR9osg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/1f8cb4-1712-4e53-8d24-c91bf50104b9/1/wgiXwdvWBpKRN-ZyutDB9n5jfRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/1f8cb4-1712-4e53-8d24-c91bf50104b9/1/wgiXwdvWBpKRN-ZyutDB9n5jfRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wgiXwdvWBpKRN-ZyutDB9n5jfRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 01:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c8:dd:d3:09:9d:59:d8:a7:b5:a9:ac:0d:0c:5d:07:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c20897c1dbd606929137e672bad0c1f67e637d16
Validity
Not Before: Jul 2 02:01:10 2025 GMT
Not After : Jul 3 02:01:10 2025 GMT
Subject: CN=6724702c82f934bdee4ef5028e26ab37405ef4a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:78:6e:a7:8b:4c:5f:1b:66:bf:a2:01:0c:d5:
de:34:10:15:24:91:7f:22:0b:cf:00:fa:de:94:d2:
a2:60:78:3f:4c:1c:a4:e4:31:64:6a:8c:14:09:92:
23:7c:74:aa:45:45:b8:f6:21:5a:e0:3d:93:a6:c4:
e8:8d:24:be:a7:0a:9e:8e:1b:9e:79:4d:6a:62:5a:
f7:0d:da:4a:06:18:94:21:8e:4d:e2:53:b1:f7:5f:
1d:bf:f8:8b:90:a1:ea:04:f3:6f:a9:06:7a:49:8b:
a6:98:79:a5:67:c0:8d:46:79:5d:17:28:f4:8e:1e:
e9:0f:2b:90:ab:4d:33:23:67:f6:07:10:2a:e6:7d:
a4:cd:15:4f:cf:95:2e:8e:31:b4:06:ef:cc:2d:bb:
3f:4c:05:b0:a1:f3:03:c4:02:a9:81:57:8c:b8:0f:
f5:c4:52:13:44:a3:07:8f:e0:0d:76:85:59:a4:96:
f0:ef:68:65:c6:28:70:95:3b:17:f7:8a:02:b4:fb:
f8:ed:2b:68:18:38:55:00:f4:90:b7:7b:30:49:fe:
9d:d0:75:d4:cf:46:87:57:18:8d:bb:60:d3:d2:39:
dc:29:8b:aa:e5:42:67:a1:64:33:68:8d:c8:e0:45:
9e:7b:3c:22:ae:b8:2e:91:35:bd:3d:29:4b:02:bc:
6c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:24:70:2C:82:F9:34:BD:EE:4E:F5:02:8E:26:AB:37:40:5E:F4:A5
X509v3 Authority Key Identifier:
keyid:C2:08:97:C1:DB:D6:06:92:91:37:E6:72:BA:D0:C1:F6:7E:63:7D:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wgiXwdvWBpKRN-ZyutDB9n5jfRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/1f8cb4-1712-4e53-8d24-c91bf50104b9/1/wgiXwdvWBpKRN-ZyutDB9n5jfRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/1f8cb4-1712-4e53-8d24-c91bf50104b9/1/wgiXwdvWBpKRN-ZyutDB9n5jfRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:2c:92:6d:94:dd:c4:6d:70:e5:e5:2f:f0:a3:a6:7a:12:5f:
36:a2:94:49:60:ec:e6:cb:9c:1f:9f:bd:61:a0:d8:ca:8a:00:
e0:aa:a3:47:3a:a4:9c:c9:93:4a:33:97:52:a6:b5:58:93:77:
12:74:c0:ab:37:3b:f6:bf:23:89:18:2e:6d:da:5a:cb:5c:4d:
ea:a1:44:84:2f:f0:cf:32:6f:79:80:13:2b:16:82:da:65:2d:
34:ad:41:33:e4:04:e5:78:7d:a3:a1:15:f6:45:01:80:98:fa:
68:8e:a2:ad:3b:42:77:1f:58:c0:a2:9b:7e:ad:91:b7:4a:7b:
98:a7:71:6d:59:d3:a2:82:85:c8:18:77:7b:43:e0:72:ea:68:
45:64:83:ef:dc:d8:af:49:65:88:4c:d2:fa:d1:39:45:ee:4b:
93:7f:da:a2:dc:01:b3:54:36:00:cc:68:54:aa:4d:fe:23:21:
8e:ba:f1:c5:1f:6a:67:9b:4b:82:c7:f9:bb:3a:10:a5:d7:cf:
4f:fc:f9:f7:e3:ed:c0:43:d7:6e:8f:c7:7b:df:54:8a:0d:9c:
67:78:7f:0f:05:67:fb:8c:a0:05:78:99:40:7d:0b:da:14:a2:
77:9e:14:85:3e:e1:2d:59:6b:af:b7:9e:6a:1f:d0:7a:4a:7e:
cf:c9:42:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 05:17:44 2025 by rpki-client