Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/cc9b6f-3e1f-434c-9323-c2ce178df1c4/1/Wd0FdG-aKIdWwwr6jEWZW3dQVfg.mft
File: Wd0FdG-aKIdWwwr6jEWZW3dQVfg.mft (raw, json)
Hash identifier: Q90Gw0DQWvGhhi8dp8e48a864gtwayksMBJf+rBt4Fs=
Subject key identifier: B6:DA:27:A6:DA:9D:72:3B:07:B2:CE:17:95:39:56:C5:45:08:3A:DA
Authority key identifier: 59:DD:05:74:6F:9A:28:87:56:C3:0A:FA:8C:45:99:5B:77:50:55:F8
Certificate issuer: /CN=59dd05746f9a288756c30afa8c45995b775055f8
Certificate serial: 0197B7459EC6CCB8BE3443E550EB0106A42D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd0FdG-aKIdWwwr6jEWZW3dQVfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/cc9b6f-3e1f-434c-9323-c2ce178df1c4/1/Wd0FdG-aKIdWwwr6jEWZW3dQVfg.mft
Manifest number: 17
Signing time: Sat 28 Jun 2025 16:01:22 +0000
Manifest this update: Sat 28 Jun 2025 16:01:22 +0000
Manifest next update: Sun 29 Jun 2025 16:01:22 +0000
Files and hashes: 1: Wd0FdG-aKIdWwwr6jEWZW3dQVfg.crl (hash: CJyKMF7vxsAgPSxP8+PJI2dfrFEeBI952GmckFq3qac=)
2: od-eaeRv-_TtiWVxF1AsQmL-p6M.roa (hash: xxM+CC0rClETGMS9YhA+QBIZ3skgkCaIksfRH7MZZ+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/cc9b6f-3e1f-434c-9323-c2ce178df1c4/1/Wd0FdG-aKIdWwwr6jEWZW3dQVfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/cc9b6f-3e1f-434c-9323-c2ce178df1c4/1/Wd0FdG-aKIdWwwr6jEWZW3dQVfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wd0FdG-aKIdWwwr6jEWZW3dQVfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:9e:c6:cc:b8:be:34:43:e5:50:eb:01:06:a4:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dd05746f9a288756c30afa8c45995b775055f8
Validity
Not Before: Jun 28 16:01:22 2025 GMT
Not After : Jun 29 16:01:22 2025 GMT
Subject: CN=b6da27a6da9d723b07b2ce17953956c545083ada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:b6:82:4d:83:58:11:5f:a4:93:45:c1:02:4d:
99:87:1b:65:0e:2e:d2:a1:73:49:99:5c:a2:f5:05:
dd:d3:e7:b3:bc:e3:e7:e1:10:83:01:bb:74:40:da:
bd:e5:cd:a2:0c:a9:da:0d:34:73:bb:32:e3:69:ec:
38:04:c3:ff:2e:37:4e:a3:3e:7b:86:49:7a:f8:ce:
39:62:8f:7c:b4:c0:29:9f:b3:de:21:fd:84:ef:35:
92:cd:d6:d4:c3:d9:19:43:58:a7:d3:53:bc:14:8d:
b0:4b:96:94:36:7c:d0:31:9b:1c:ee:df:fd:ff:8b:
81:39:7e:d1:c3:83:d2:26:30:67:14:77:ac:4a:09:
ac:f7:dc:85:f7:b4:76:36:15:ed:2d:3d:e9:8d:3f:
d2:d5:6c:58:9d:fa:19:7d:27:4c:4d:6c:f9:e4:4d:
b6:b2:3d:58:c3:ec:b6:b5:f5:af:a8:c8:3b:21:46:
27:ef:b4:ec:d7:b4:29:19:e5:da:f4:7e:b3:42:3e:
aa:6d:5c:1b:e9:51:96:3d:c9:e2:70:32:76:18:91:
76:53:68:40:52:8f:2e:74:6f:9d:6e:a6:29:43:db:
58:41:e0:f2:13:c9:1f:dd:ac:76:34:d0:e5:57:c1:
8a:d5:16:23:fc:3f:3d:3b:6b:8e:b5:3d:3b:f6:69:
40:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:DA:27:A6:DA:9D:72:3B:07:B2:CE:17:95:39:56:C5:45:08:3A:DA
X509v3 Authority Key Identifier:
keyid:59:DD:05:74:6F:9A:28:87:56:C3:0A:FA:8C:45:99:5B:77:50:55:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd0FdG-aKIdWwwr6jEWZW3dQVfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/cc9b6f-3e1f-434c-9323-c2ce178df1c4/1/Wd0FdG-aKIdWwwr6jEWZW3dQVfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/cc9b6f-3e1f-434c-9323-c2ce178df1c4/1/Wd0FdG-aKIdWwwr6jEWZW3dQVfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:ff:aa:df:0d:02:2d:ad:ec:42:33:4c:bd:17:4b:38:c9:56:
4e:ae:7e:a3:ab:38:aa:dd:f4:5b:bf:c9:54:f0:7d:9b:c1:2e:
97:b7:aa:32:0a:f8:cb:df:ee:a1:5e:66:61:37:fe:c0:81:8e:
53:57:a0:8a:61:7e:4a:76:c5:95:a5:6e:3c:4f:f9:bc:81:63:
a1:fb:e3:5b:42:1d:0d:2f:5f:f1:08:fc:ba:37:ed:eb:e1:f2:
69:70:e4:07:5f:84:2f:59:09:8b:c7:84:7f:3c:68:5c:ff:30:
29:67:74:bc:1e:71:fb:75:d5:37:96:05:38:1e:8d:70:14:30:
b3:d5:3b:ad:68:ab:ed:c9:b4:6d:28:ac:b5:a8:a7:39:1d:70:
fa:94:a1:b2:b5:f3:cd:fe:46:9a:99:44:23:7a:7c:31:6a:6b:
26:dc:2c:7f:ee:30:c3:59:9e:c0:72:82:87:61:4c:bd:b0:42:
9f:d6:ea:f0:3a:d7:05:8c:26:79:9a:4f:57:20:38:02:f3:66:
6a:6a:54:f0:6d:f0:61:a7:70:d0:c1:27:02:c8:86:a4:36:e6:
42:38:e3:43:59:9f:85:d0:37:ca:26:bb:91:7d:fe:e3:e9:42:
b1:15:28:a0:60:3b:c0:a0:48:7e:38:7f:ec:fc:cc:59:bb:0a:
d3:32:42:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:58:30 2025 by rpki-client