Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.mft
File: wcBezmyQitiIJRPaOiWhYHA7t_Y.mft (raw, json)
Hash identifier: 2yuXktUYA4zy5oNAosfiZIvrdnrORHTyHrOh3FXpPT0=
Subject key identifier: 8C:B1:98:7D:D4:C6:74:52:8E:94:66:39:92:8D:8C:9B:6E:30:86:51
Authority key identifier: C1:C0:5E:CE:6C:90:8A:D8:88:25:13:DA:3A:25:A1:60:70:3B:B7:F6
Certificate issuer: /CN=c1c05ece6c908ad8882513da3a25a160703bb7f6
Certificate serial: 0197D776AD0AEE9D78E0ED13E5408212D7DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wcBezmyQitiIJRPaOiWhYHA7t_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.mft
Manifest number: 15C7
Signing time: Fri 04 Jul 2025 22:02:48 +0000
Manifest this update: Fri 04 Jul 2025 22:02:48 +0000
Manifest next update: Sat 05 Jul 2025 22:02:48 +0000
Files and hashes: 1: L5n__TlZWPdvDvLr4ZFidz4XLKs.roa (hash: joZuWv/Q4EyLrxkijZ/RW681SRLMu9NB8uvDRrrDNHk=)
2: wcBezmyQitiIJRPaOiWhYHA7t_Y.crl (hash: lhPeRFvOydh+cP7GIyDE1thMWKNscEtD9Bbn/kgHxFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/wcBezmyQitiIJRPaOiWhYHA7t_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d7:76:ad:0a:ee:9d:78:e0:ed:13:e5:40:82:12:d7:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c05ece6c908ad8882513da3a25a160703bb7f6
Validity
Not Before: Jul 4 22:02:48 2025 GMT
Not After : Jul 5 22:02:48 2025 GMT
Subject: CN=8cb1987dd4c674528e946639928d8c9b6e308651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:90:8d:b2:b1:72:ac:d5:78:db:72:f2:39:c4:
73:5f:30:29:e5:7c:b8:bf:aa:d2:2d:2f:4e:13:e5:
db:6c:be:6e:91:7c:e3:da:2d:b3:01:e4:25:5b:37:
c9:28:26:00:9b:56:6b:f0:6b:01:66:8f:f4:96:a9:
a8:0e:b4:5e:4a:cf:d9:1b:d2:6b:1c:42:ae:49:55:
b8:2a:c0:a7:60:bc:ed:7f:24:d4:62:41:c7:95:cc:
d6:aa:83:e6:cc:0b:e2:80:db:4f:42:50:be:81:06:
44:60:e3:a4:b1:d4:3d:7d:df:39:f4:11:d5:ef:bf:
95:09:92:a4:e0:bd:d9:e5:4f:b7:49:d9:89:73:a6:
a0:08:78:86:ce:70:b4:52:26:2e:d1:34:bd:70:14:
28:52:96:97:5f:01:d8:3e:52:56:96:a4:28:cb:55:
00:cc:f3:24:d1:44:11:53:d8:08:ca:16:10:37:19:
50:2b:77:32:52:40:0a:f6:06:c2:99:80:54:55:e9:
4e:e9:84:8b:ff:44:3f:9f:60:31:68:8c:ca:ab:03:
37:d6:4a:4d:8d:a0:be:fb:27:68:da:7a:5c:86:b4:
55:7f:1e:26:be:49:cc:1b:c6:98:ae:01:e1:d4:9c:
17:d6:6f:6b:ba:f4:07:60:1e:14:11:e0:90:c8:11:
f1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B1:98:7D:D4:C6:74:52:8E:94:66:39:92:8D:8C:9B:6E:30:86:51
X509v3 Authority Key Identifier:
keyid:C1:C0:5E:CE:6C:90:8A:D8:88:25:13:DA:3A:25:A1:60:70:3B:B7:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wcBezmyQitiIJRPaOiWhYHA7t_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:b5:fe:df:91:4f:b8:55:9b:14:23:6f:be:af:e3:d7:11:0b:
be:d0:73:89:b7:0c:47:92:45:03:8b:b1:88:55:d3:d3:89:2a:
59:df:c4:f5:f7:f9:d8:32:0e:a7:ed:6e:03:75:e4:8e:fb:5b:
c0:3d:29:8c:37:97:54:d5:64:ba:4e:1f:34:21:88:0f:dc:cb:
39:0c:78:9c:54:01:aa:dd:ec:1b:12:c1:3c:98:2e:d9:de:b3:
3e:89:31:a7:96:87:24:26:38:47:fd:6d:c5:6c:e3:3f:9c:48:
cf:9e:cc:62:29:96:13:0a:b9:e1:2f:40:a8:5d:c7:56:44:cb:
aa:f5:02:92:d3:bd:8e:bc:a0:1c:fa:c4:78:81:bd:b9:26:cf:
6f:cd:7b:d1:a6:b6:87:88:eb:fa:74:02:40:6d:b6:5a:64:a9:
b7:59:81:15:27:40:fb:74:cc:9b:4a:7e:13:f5:69:9e:de:38:
ab:67:4d:84:8a:65:3a:48:56:67:17:a7:f2:a5:82:c1:44:6b:
54:47:26:7b:46:bd:db:17:f6:b2:c0:f4:b3:54:71:02:9b:9e:
5f:98:7b:80:29:58:07:f1:de:60:52:84:a8:32:c6:da:75:b5:
68:ad:50:1b:12:01:db:ec:41:ad:18:30:b8:05:d9:45:f4:87:
0e:c9:d4:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 01:29:47 2025 by rpki-client