Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.mft
File: wuP6h-sxaafS3XRFMoMCGicDx2k.mft (raw, json)
Hash identifier: FGrvi6QGGmD/EMdCbVfyLJYd/DZpSylFsXg1GfVjyaM=
Subject key identifier: BF:4B:E3:A4:8C:CD:38:2F:CF:22:B1:64:7C:D6:8D:20:21:79:6C:0C
Authority key identifier: C2:E3:FA:87:EB:31:69:A7:D2:DD:74:45:32:83:02:1A:27:03:C7:69
Certificate issuer: /CN=c2e3fa87eb3169a7d2dd74453283021a2703c769
Certificate serial: 0197B820CFD0319459AACFFDCAE4892E3674
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wuP6h-sxaafS3XRFMoMCGicDx2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 20:00:47 +0000
Manifest this update: Sat 28 Jun 2025 20:00:47 +0000
Manifest next update: Sun 29 Jun 2025 20:00:47 +0000
Files and hashes: 1: UQeJyG9BAYXx7MdsdkPbT5nATwI.roa (hash: hKLTaUlMIPTXFfDFectFLlcV0ReJ/iVzU3RYDLItnvI=)
2: wuP6h-sxaafS3XRFMoMCGicDx2k.crl (hash: QCfDVXlHuQ3NVODD2R2vQIJ2FJd3Z5jmVSXRpTvfA1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/wuP6h-sxaafS3XRFMoMCGicDx2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:cf:d0:31:94:59:aa:cf:fd:ca:e4:89:2e:36:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2e3fa87eb3169a7d2dd74453283021a2703c769
Validity
Not Before: Jun 28 20:00:47 2025 GMT
Not After : Jun 29 20:00:47 2025 GMT
Subject: CN=bf4be3a48ccd382fcf22b1647cd68d2021796c0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1b:7d:95:06:61:73:a2:d2:f3:e1:34:17:f1:
53:48:67:e9:89:72:c4:5c:31:d2:a3:e8:82:11:b2:
48:33:30:d5:81:ce:5e:2b:3c:2c:3e:17:cc:61:73:
a2:c1:ff:bb:f0:2c:f3:f1:62:42:e8:54:cf:b8:a7:
0a:65:ce:38:66:1b:bc:ec:97:98:6c:a6:90:05:d6:
37:73:38:f5:eb:68:07:b2:20:31:63:60:9d:b9:c4:
4f:5c:3f:da:ce:c9:2f:0c:53:d2:2d:15:ab:68:56:
b8:56:40:be:2d:db:c0:a2:99:5b:a1:38:0f:f7:6c:
00:a4:e1:2e:ac:02:a6:a1:c8:b6:2e:bc:7c:00:ee:
2a:c7:b5:19:54:e7:b4:40:83:b6:6a:1e:36:96:cf:
98:6d:4f:6e:a0:d1:5a:d2:b1:e5:96:45:7a:14:2d:
ac:45:df:2e:d3:73:d5:10:94:5f:35:39:aa:77:f5:
d3:1a:04:74:97:7c:e8:22:4f:17:0d:f8:d5:4e:4e:
a0:87:02:c4:72:42:d4:f1:a2:8b:71:44:15:1d:e9:
cc:9e:9b:af:fb:7a:ef:f5:d9:90:0f:a5:db:a8:17:
6f:6d:3b:8f:4a:27:4b:e0:b1:5f:0e:63:24:96:66:
ab:51:f6:fc:40:2d:47:e7:95:d0:a2:ae:5c:99:3a:
c1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:4B:E3:A4:8C:CD:38:2F:CF:22:B1:64:7C:D6:8D:20:21:79:6C:0C
X509v3 Authority Key Identifier:
keyid:C2:E3:FA:87:EB:31:69:A7:D2:DD:74:45:32:83:02:1A:27:03:C7:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wuP6h-sxaafS3XRFMoMCGicDx2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:3d:ad:3c:4b:3c:6b:81:bd:8a:45:eb:63:93:90:02:f9:e0:
2c:c9:6e:0f:2e:cd:24:4f:a3:90:c3:8e:b4:8c:69:82:17:97:
ca:ca:98:ab:cd:b8:15:ca:0a:2b:ff:b0:9d:a6:05:95:42:6b:
d8:af:87:0e:10:da:6d:2f:75:c7:7b:16:b6:90:42:34:d6:c2:
af:00:5b:9d:d6:6c:01:7e:ab:dd:95:33:4f:7b:8b:70:a0:09:
6b:82:4a:5d:a4:c4:de:ae:87:46:24:df:6c:63:58:f9:96:6a:
d7:7c:df:0c:b3:77:fe:e1:c2:85:ba:a3:96:63:d5:1b:32:ff:
4a:16:79:46:1b:a3:fa:c9:20:2d:a0:5f:9b:f2:38:5a:8d:c6:
d7:98:11:7b:22:0d:ca:2b:05:74:8a:48:f6:63:13:75:4f:b7:
4a:64:58:73:dc:e9:a3:a4:4d:c7:37:0d:ac:1c:17:90:9c:e2:
8d:41:1c:a1:cd:3c:65:95:1e:74:6d:a1:00:e9:81:f9:56:05:
30:8c:da:89:66:cf:7c:fc:84:dc:ec:02:93:f0:f5:68:1d:3b:
f1:35:ca:df:e5:98:a5:98:05:a6:1b:92:47:d8:cd:ae:4a:03:
03:cf:cf:43:78:26:be:27:af:bc:5c:6c:68:ce:c7:f8:cc:56:
19:a5:82:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:52:19 2025 by rpki-client