Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft
File: wznRHn1JkvmvswQx42BCqv3eXAo.mft (raw, json)
Hash identifier: /mHItW/T69Am8xzHcN6XgP49p1qe3RFstEWLrY1UPkA=
Subject key identifier: 60:EC:09:83:C3:63:03:25:1A:F2:9E:E1:48:DE:E1:A5:E2:80:D4:15
Authority key identifier: C3:39:D1:1E:7D:49:92:F9:AF:B3:04:31:E3:60:42:AA:FD:DE:5C:0A
Certificate issuer: /CN=c339d11e7d4992f9afb30431e36042aafdde5c0a
Certificate serial: 0197C7267E976FB1B64F241B466EABFC2B5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wznRHn1JkvmvswQx42BCqv3eXAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft
Manifest number: 056C
Signing time: Tue 01 Jul 2025 18:01:18 +0000
Manifest this update: Tue 01 Jul 2025 18:01:18 +0000
Manifest next update: Wed 02 Jul 2025 18:01:18 +0000
Files and hashes: 1: Ye0egtqoH6uMAlA-InFGtPoYhOI.roa (hash: zCIyCUBIV+P7SfqRZSH5RkFwyM3/tcMjHBwHN8QTJs8=)
2: wznRHn1JkvmvswQx42BCqv3eXAo.crl (hash: hIAViSxxaPd1G/NjlVHkGjWtRAte28fpc+jQs8/07PU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/wznRHn1JkvmvswQx42BCqv3eXAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c7:26:7e:97:6f:b1:b6:4f:24:1b:46:6e:ab:fc:2b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c339d11e7d4992f9afb30431e36042aafdde5c0a
Validity
Not Before: Jul 1 18:01:18 2025 GMT
Not After : Jul 2 18:01:18 2025 GMT
Subject: CN=60ec0983c36303251af29ee148dee1a5e280d415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4d:42:15:9f:50:b1:c6:9c:37:3c:77:fb:0c:
c8:3d:ee:6a:f2:ed:8b:63:85:1a:4b:07:6a:22:c5:
1e:1d:25:aa:3a:2a:6c:8c:87:10:8b:6f:8f:9b:a2:
2a:b1:7a:9a:ea:61:57:d0:6d:cc:dd:10:e5:1c:03:
fd:a1:11:93:c1:d2:5f:44:06:d5:43:9c:63:3c:18:
25:b2:23:91:c7:91:00:a0:3e:14:54:3c:80:26:a2:
ba:09:17:de:16:d9:e4:97:76:45:07:7f:31:8b:fa:
00:3b:ae:44:e6:31:9e:7c:58:41:e8:a2:c8:7b:83:
9e:25:1d:09:0f:12:08:d9:20:19:db:5b:ad:3a:54:
70:a0:f2:0c:f3:a7:09:49:21:a2:24:62:9d:ad:ff:
a1:a0:e5:c2:7f:d6:79:4d:28:35:1e:1b:de:7f:77:
70:36:5c:c6:e3:c3:af:3d:8f:05:ac:e7:92:64:6f:
a7:6c:8c:0d:c7:16:fd:8b:10:cb:98:9b:9b:54:a8:
c2:98:58:ab:35:f2:2a:be:72:b5:28:bb:13:25:45:
c5:68:53:89:28:a6:51:bc:15:f6:8a:22:ca:0e:a7:
6b:cf:3d:81:2f:45:06:4b:07:18:e7:60:e6:98:77:
73:10:bd:5b:1d:62:ca:29:ad:bc:6e:6b:6a:66:aa:
1a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:EC:09:83:C3:63:03:25:1A:F2:9E:E1:48:DE:E1:A5:E2:80:D4:15
X509v3 Authority Key Identifier:
keyid:C3:39:D1:1E:7D:49:92:F9:AF:B3:04:31:E3:60:42:AA:FD:DE:5C:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wznRHn1JkvmvswQx42BCqv3eXAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:bc:52:1e:6c:3e:5d:e0:2b:06:10:ce:82:96:b0:8f:c0:4f:
20:da:90:aa:7d:93:55:49:0b:7b:d9:c8:2a:17:8c:10:49:8c:
2e:fe:ce:4f:6e:cf:49:b6:65:3d:32:d0:a3:ee:56:c8:41:34:
35:a5:23:ed:ad:40:bc:7f:fb:9a:5b:cd:d2:3e:d7:1b:00:98:
28:00:f0:1b:ed:01:1d:64:eb:71:1c:d9:d1:d2:5a:48:a2:82:
cc:42:40:43:8a:1c:57:78:e2:a8:02:a2:ca:c5:a2:1f:42:a1:
c7:aa:de:6f:5d:b9:50:ac:c4:70:ad:15:0b:fc:e2:91:3b:f9:
c1:69:ef:4c:63:90:85:5f:a9:f6:42:cd:94:2e:a1:0c:ed:a1:
2b:09:91:4e:46:70:e1:35:a2:8c:cc:d5:25:29:6e:6b:c8:62:
5a:ed:4a:b0:70:74:e9:ce:50:be:ef:60:9c:64:60:3a:da:86:
60:20:a4:fd:63:99:8e:b3:bc:9c:85:ce:da:e0:03:59:08:9c:
b0:4e:94:ba:b4:11:19:e3:fa:05:cb:74:f1:f8:6a:24:23:77:
eb:8d:29:81:23:04:4f:c4:fd:d0:b8:33:3d:30:98:95:fc:29:
79:10:e3:ba:68:9a:90:57:ef:6e:a3:a2:f9:71:97:8f:fb:c2:
c1:01:e7:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 02:04:48 2025 by rpki-client