Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft
File: wQmKGQW70zgVM4KPa3_SJxcEMe8.mft (raw, json)
Hash identifier: ozdagbycKvoIkVJdtn9leN7k7/giwy6Cn1lGNpIn4og=
Subject key identifier: BC:C8:49:F5:81:17:B5:EB:C4:77:83:23:D3:E5:2C:03:E5:32:A8:13
Authority key identifier: C1:09:8A:19:05:BB:D3:38:15:33:82:8F:6B:7F:D2:27:17:04:31:EF
Certificate issuer: /CN=c1098a1905bbd3381533828f6b7fd227170431ef
Certificate serial: 0197B89016BE9802B8D88D5469EE6EF95BF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft
Manifest number: 15D7
Signing time: Sat 28 Jun 2025 22:02:19 +0000
Manifest this update: Sat 28 Jun 2025 22:02:19 +0000
Manifest next update: Sun 29 Jun 2025 22:02:19 +0000
Files and hashes: 1: 4D3wEAaKaO-VNYMegevp2dIDiZA.roa (hash: Pboeq/VEw/fEiNcfqVmPGeRB5EfnZp8myD9JUVRtoS4=)
2: 9YIKds84pmkqqSUhkc6fWWyFF_U.roa (hash: Zl/u5pK0GcTZlUuMm3FsQSFvKxX3ghw5NC/1Sio1XdQ=)
3: Ak9XK5YFlXI4AoNUomQD5SJWMTQ.roa (hash: 8frbczP/WVHp6KYWn7u+vpW6oUS+dkfZt+1mfqWJkiA=)
4: DaFBPQjNIt89bZ-zjtkqkYfP25s.roa (hash: pp9Ceedlj+qqJJCfZTMjKuHvEOYjJEHNhnFxlngbiSQ=)
5: F7VtIEmMZmsdWkt0VCX4cwPSD3I.roa (hash: pt6vMx0dEwVx2sHh/Y99xQxE2icOOT8mwZQHp5NGxZY=)
6: HQ5pk500M9r_ovoVxF0QEcohnog.roa (hash: ww8oMO4jWUVQ6/eBdnQNu3m8JDu+2hsoI9UHwgt7uPk=)
7: cdYJonDxjk5U7tPV78g4h2hSLZo.roa (hash: WtYQS9yTDEW6OANZ+f6hcNrUBMmPvrFNaBsMzLB79qc=)
8: kJ6H7AmIyUvdxMRQ4aBB5sxRD_U.roa (hash: QA88mloj+h/kCAIWi5WNjJl3VlB1DBIdl1O6jQwCD1U=)
9: wQmKGQW70zgVM4KPa3_SJxcEMe8.crl (hash: iljlknNKsN+ccABb6k8SlDnnIzUShwDKgbdl3CuLa1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:16:be:98:02:b8:d8:8d:54:69:ee:6e:f9:5b:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1098a1905bbd3381533828f6b7fd227170431ef
Validity
Not Before: Jun 28 22:02:19 2025 GMT
Not After : Jun 29 22:02:19 2025 GMT
Subject: CN=bcc849f58117b5ebc4778323d3e52c03e532a813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8c:9d:71:1b:d1:fb:4c:c0:08:83:84:78:00:
c9:04:23:75:9e:1b:d9:fc:60:9e:b7:25:c6:ba:18:
36:22:0a:84:d0:78:7c:c6:91:f8:da:f0:02:2a:b0:
1d:71:b2:b9:37:a0:2c:f3:c4:2a:53:66:97:fc:56:
e3:d8:88:0b:8f:99:2b:d1:36:3e:a7:e0:6a:84:8d:
ab:81:37:53:67:6d:78:bd:e2:92:0d:fb:19:51:95:
e3:5f:e9:0f:e7:12:a1:ff:bd:49:45:94:c3:ed:1e:
3c:73:45:9c:f0:62:52:b8:0a:78:8e:8c:4d:44:3f:
7e:c5:00:ce:19:c7:4e:39:0b:13:6d:c3:7e:3c:4d:
31:44:58:c6:cc:f2:5c:6d:98:56:06:7a:70:a4:41:
9b:c7:87:00:5e:96:8f:ba:52:4d:d2:4d:fa:72:8a:
57:77:4d:8f:ea:8a:4d:45:3d:1c:7d:0c:f5:7a:c4:
d0:36:04:bc:02:e8:45:13:a0:7a:ab:19:66:f1:fb:
25:08:44:bb:f6:d5:aa:69:91:e0:22:39:50:10:da:
62:42:d7:6c:2c:54:4e:b5:4d:e5:5b:89:d2:54:63:
c8:76:31:09:89:cb:14:0b:33:72:10:bf:7c:9e:92:
67:83:da:b1:bd:8f:fd:35:04:36:aa:dc:bd:4a:a3:
cb:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C8:49:F5:81:17:B5:EB:C4:77:83:23:D3:E5:2C:03:E5:32:A8:13
X509v3 Authority Key Identifier:
keyid:C1:09:8A:19:05:BB:D3:38:15:33:82:8F:6B:7F:D2:27:17:04:31:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:86:06:d8:f3:32:19:72:e9:53:37:0a:55:2d:ae:9d:18:53:
bd:10:d7:9c:d8:53:6c:4d:ca:2b:29:a5:f1:d1:dd:27:82:b7:
0e:83:37:40:f3:64:74:91:bd:f6:82:4e:04:67:2e:bf:a5:ef:
4b:a5:88:f6:1d:05:0e:c8:83:84:38:e7:12:2d:3e:b4:4d:ab:
b3:95:b1:ea:f5:f4:ce:01:72:e0:e3:4c:d1:6f:ab:dd:22:49:
58:75:8e:04:6b:a2:92:f4:b7:69:38:cd:7c:79:97:16:4f:91:
d9:63:e3:5f:8b:4d:21:0c:ff:2d:d5:e3:46:49:6c:84:83:aa:
be:93:4a:c5:d2:46:cb:b7:3a:f1:24:0c:a2:e7:d8:82:16:6b:
59:cc:c0:dd:67:de:f9:1e:49:dd:0d:a7:82:ce:d9:84:d2:39:
70:1b:2e:0d:c1:5f:cc:7c:73:89:54:f5:02:58:c4:7a:20:88:
9a:6f:52:03:17:01:79:c4:24:9e:b5:89:be:20:1d:16:9b:65:
40:d9:a5:9f:b9:cc:da:64:db:3a:6b:d3:87:47:53:27:44:34:
44:e8:a0:32:19:e9:6d:5a:b0:db:b9:73:6f:ec:a7:38:95:90:
e9:8f:20:e8:26:f8:01:8b:c1:e1:8a:8b:50:df:b5:a6:01:71:
fa:e2:a4:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:21:12 2025 by rpki-client