Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft
File: wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft (raw, json)
Hash identifier: lw+rTS0ty2qRqRQXI4xkOr1Xixa9XsXgi9RvTSqbo2g=
Subject key identifier: 10:48:00:B6:39:5F:E8:24:76:BA:09:C5:9D:FD:13:16:06:55:6E:8E
Authority key identifier: C0:77:50:B8:31:11:D4:17:1B:BF:55:CA:02:32:2C:1A:0D:C0:AC:32
Certificate issuer: /CN=c07750b83111d4171bbf55ca02322c1a0dc0ac32
Certificate serial: 0197B77CA59EE568450B4AD38F4FE9481B5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wHdQuDER1Bcbv1XKAjIsGg3ArDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft
Manifest number: 0E89
Signing time: Sat 28 Jun 2025 17:01:28 +0000
Manifest this update: Sat 28 Jun 2025 17:01:28 +0000
Manifest next update: Sun 29 Jun 2025 17:01:28 +0000
Files and hashes: 1: T_9TOa_stF5E9eIWRjxCGlAnn6k.roa (hash: 4V/y6Lec10YacV5wmtQBGvh+cufcrshrFw6PyKn/laI=)
2: wHdQuDER1Bcbv1XKAjIsGg3ArDI.crl (hash: Sr9rbfRjvyuSZPgDO6GH0YVVFthVFhlIsOg2sJjCTx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wHdQuDER1Bcbv1XKAjIsGg3ArDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:a5:9e:e5:68:45:0b:4a:d3:8f:4f:e9:48:1b:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c07750b83111d4171bbf55ca02322c1a0dc0ac32
Validity
Not Before: Jun 28 17:01:28 2025 GMT
Not After : Jun 29 17:01:28 2025 GMT
Subject: CN=104800b6395fe82476ba09c59dfd131606556e8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:39:77:02:8e:ca:02:ac:56:a3:93:fa:76:b1:
7c:a7:c2:4d:1c:97:f8:ed:b4:b5:e5:88:37:0f:99:
c9:92:a4:89:b1:14:b7:49:61:be:17:19:64:9b:26:
cb:e6:1f:b7:02:2c:90:e8:7b:6f:29:92:c4:0a:e6:
1a:b1:eb:a3:fc:00:ba:00:3d:99:41:b4:45:12:da:
1a:ef:4c:1b:ac:9a:3d:71:57:65:d8:55:00:6b:82:
7c:bc:08:fd:d2:80:cd:c4:75:d3:20:bb:33:33:5e:
7c:d7:f0:54:ba:e5:a0:8f:b9:f8:1f:2f:e3:19:d4:
71:8e:97:13:cb:df:54:c5:23:9c:f8:21:be:7d:b1:
9d:d4:75:43:b6:8a:1f:9b:a1:72:a1:4e:49:5e:2b:
3b:83:c4:d5:0a:37:a2:b5:cf:e8:c6:dd:ef:ea:4a:
88:da:76:c5:3e:c9:1e:08:c5:c7:11:ed:13:ec:4f:
42:87:51:77:8c:7e:b8:17:88:1f:6d:27:93:ee:fa:
ff:74:22:6e:e3:5b:24:d1:d6:c8:32:95:db:90:7a:
e5:ec:98:5b:b7:40:c2:29:99:9f:95:f0:19:02:ad:
8e:39:4d:dd:c4:d5:82:b2:76:35:5d:32:d2:c3:2f:
24:6f:0c:0b:c3:79:41:4c:cc:99:27:90:30:25:f1:
31:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:48:00:B6:39:5F:E8:24:76:BA:09:C5:9D:FD:13:16:06:55:6E:8E
X509v3 Authority Key Identifier:
keyid:C0:77:50:B8:31:11:D4:17:1B:BF:55:CA:02:32:2C:1A:0D:C0:AC:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHdQuDER1Bcbv1XKAjIsGg3ArDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:b8:13:d7:14:88:ef:f3:43:ad:a0:79:9d:30:c2:89:3a:a5:
f9:91:0c:76:0f:a1:03:61:88:d1:3a:1a:cf:88:4f:08:86:77:
fd:bc:1c:ec:54:18:fc:66:2d:78:db:cd:03:d3:86:a7:c2:d6:
99:77:a7:0e:f9:da:8e:87:16:43:97:b2:be:24:00:a8:87:1a:
78:90:9e:73:2a:fb:96:3d:ef:3d:b5:7a:56:8d:c9:a3:8a:ca:
55:8f:f3:ab:cf:78:d2:26:8c:ad:21:9f:34:6f:e9:37:1a:d5:
1d:a7:0e:1d:ca:65:34:8c:53:03:5c:31:75:00:04:d5:c4:33:
01:86:56:c6:57:68:61:05:68:f6:9b:b1:2c:c8:c4:bc:05:00:
ac:40:f5:0b:f9:ce:fa:63:cf:c9:b3:f1:4b:2a:f4:bb:70:58:
92:03:98:b5:85:ab:6f:c9:07:47:b7:cd:6f:3f:f1:61:ee:58:
f6:be:fc:8b:b6:50:49:82:a9:71:82:39:d0:55:be:b9:96:60:
9b:bd:43:7c:5a:4c:7f:35:6c:72:51:16:6e:c1:dd:78:ef:0c:
da:40:fc:8c:a9:98:f7:94:0f:58:ce:9e:d2:e4:2b:48:e0:cd:
7d:d9:23:98:09:0a:18:82:d4:95:fe:04:a4:f5:19:74:d1:b1:
0f:bc:66:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:51:58 2025 by rpki-client