Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft
File: wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft (raw, json)
Hash identifier: wkmlWoF6FjQ57V/4bgliEQ0sanMRbFXsrr02JxmHli4=
Subject key identifier: 83:94:2F:42:A2:D0:51:2B:E2:5B:0B:74:7C:08:FC:E6:22:AC:C3:5A
Authority key identifier: C1:1C:58:33:7C:D4:D7:4C:D9:21:9D:87:78:DE:E5:B2:9F:08:A4:61
Certificate issuer: /CN=c11c58337cd4d74cd9219d8778dee5b29f08a461
Certificate serial: 0197B77C1590320E9AB44D61FC3FC1DCEDC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wRxYM3zU10zZIZ2HeN7lsp8IpGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 17:00:51 +0000
Manifest this update: Sat 28 Jun 2025 17:00:51 +0000
Manifest next update: Sun 29 Jun 2025 17:00:51 +0000
Files and hashes: 1: E0oPYTANwX4SVfmo4G4Bb_Ffflc.roa (hash: POCopGH4Sf5gshG/ai7EpgPCh9X9MivwqlQ7wpM8V2Q=)
2: wRxYM3zU10zZIZ2HeN7lsp8IpGE.crl (hash: P/lYwTyo3KZbZ9pN86I3GeVm+4PraugAgXeTm0UEmZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wRxYM3zU10zZIZ2HeN7lsp8IpGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:15:90:32:0e:9a:b4:4d:61:fc:3f:c1:dc:ed:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c11c58337cd4d74cd9219d8778dee5b29f08a461
Validity
Not Before: Jun 28 17:00:51 2025 GMT
Not After : Jun 29 17:00:51 2025 GMT
Subject: CN=83942f42a2d0512be25b0b747c08fce622acc35a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:38:e6:13:a1:55:2b:cd:56:db:ac:8c:1d:63:
e5:97:35:82:03:ad:ff:be:18:ed:84:ff:9f:72:03:
bb:3a:72:2b:7f:3c:a9:ee:cb:90:7b:5e:0e:fa:a0:
11:21:a4:dd:59:ff:1b:24:aa:80:bb:48:bf:f3:ee:
66:78:d5:12:99:08:04:9e:ee:02:4c:07:37:49:68:
18:b4:13:79:a9:0e:91:36:b1:e0:3b:ff:1b:e7:fc:
91:3e:a4:69:6d:98:a2:80:60:b3:fa:5c:24:a9:27:
f8:d6:90:1b:7a:dc:52:96:61:1e:11:e8:ad:61:a2:
b0:24:26:96:1b:65:bf:95:a0:a3:54:12:d8:aa:9c:
12:f8:71:1d:5a:16:fb:89:1c:ef:ba:22:10:d6:45:
6f:a7:54:42:86:27:11:44:09:a3:75:23:40:f6:51:
b8:f8:6d:7c:9f:34:63:91:a1:70:fa:46:3b:ef:1c:
76:bf:d3:ff:d2:7f:4e:33:25:de:45:39:5a:c6:71:
89:d2:08:04:b8:e7:10:ea:82:f1:a4:c6:24:d6:83:
e9:50:48:00:29:f8:29:4e:23:ad:53:29:08:0a:5f:
f2:cc:96:d8:ce:f3:45:31:27:df:d8:61:a2:ab:61:
bb:a4:78:3b:e4:71:9a:3b:1c:19:f7:84:24:b3:d4:
bb:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:94:2F:42:A2:D0:51:2B:E2:5B:0B:74:7C:08:FC:E6:22:AC:C3:5A
X509v3 Authority Key Identifier:
keyid:C1:1C:58:33:7C:D4:D7:4C:D9:21:9D:87:78:DE:E5:B2:9F:08:A4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRxYM3zU10zZIZ2HeN7lsp8IpGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:1a:8c:b2:83:61:07:4e:4b:1d:59:1f:67:3b:a4:e0:f4:98:
4d:d0:d4:ed:e1:48:fb:c5:a0:01:4d:53:59:56:11:27:fe:04:
93:1a:4c:0e:16:65:1b:6e:e6:01:c6:2d:9a:2a:43:5a:7d:43:
64:ad:b8:7a:7e:a7:fa:cb:de:35:89:0e:59:20:89:c9:b7:d2:
80:bd:9a:4a:f1:a7:04:15:09:64:a8:f7:ef:bb:17:25:94:ac:
fe:fa:4a:db:8b:04:1d:84:9e:96:0f:0f:79:43:c4:3c:eb:43:
d2:2a:a6:25:4d:e9:11:38:5f:61:66:22:95:bb:77:96:91:b2:
a7:07:1a:9b:6f:07:64:00:60:db:01:aa:6f:16:09:a4:e9:1e:
58:a8:b6:35:f3:7e:a1:26:34:93:bc:a7:36:f7:24:22:62:f2:
29:98:39:59:a5:3a:4a:ff:43:d8:36:f6:3e:70:aa:28:7d:93:
6e:37:68:4b:55:a2:24:d5:51:8e:37:9b:05:9f:60:0c:07:f5:
e2:3c:a5:63:3f:f3:01:23:b4:32:2a:f7:e5:63:83:7b:4e:ea:
5d:0a:09:32:b4:82:3d:26:5c:97:07:df:bc:a1:24:6c:96:6e:
1c:78:a5:1e:25:7c:01:db:87:33:73:38:bf:65:a8:12:c3:b3:
37:e6:00:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:49:35 2025 by rpki-client