Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/wKqzltZQgmAnwr2KBiByEJIQnik.mft
File: wKqzltZQgmAnwr2KBiByEJIQnik.mft (raw, json)
Hash identifier: noNrFS5OJroylRKrfDBEUcfq3uYjBrWcvRf6yMiBB0s=
Subject key identifier: A2:62:9D:31:54:73:23:BE:65:40:F8:7C:F7:64:E5:4B:9F:A0:FA:47
Authority key identifier: C0:AA:B3:96:D6:50:82:60:27:C2:BD:8A:06:20:72:10:92:10:9E:29
Certificate issuer: /CN=c0aab396d650826027c2bd8a0620721092109e29
Certificate serial: 0197C914D2E6D0AE86526862212A61366083
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wKqzltZQgmAnwr2KBiByEJIQnik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/wKqzltZQgmAnwr2KBiByEJIQnik.mft
Manifest number: 74
Signing time: Wed 02 Jul 2025 03:01:14 +0000
Manifest this update: Wed 02 Jul 2025 03:01:14 +0000
Manifest next update: Thu 03 Jul 2025 03:01:14 +0000
Files and hashes: 1: FQ0Z9CjauF1-N_C29EdkHs_XYtQ.roa (hash: +snXzR2/FfWDx0T5r9Nyn9CPDVn/IvcZNIPrKP0aONw=)
2: wKqzltZQgmAnwr2KBiByEJIQnik.crl (hash: JaUNN+jjCk2f3zgKfuj/9oFOrUPSFVZQCn957D+m+xs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/wKqzltZQgmAnwr2KBiByEJIQnik.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/wKqzltZQgmAnwr2KBiByEJIQnik.mft
rsync://rpki.ripe.net/repository/DEFAULT/wKqzltZQgmAnwr2KBiByEJIQnik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 01:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:14:d2:e6:d0:ae:86:52:68:62:21:2a:61:36:60:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0aab396d650826027c2bd8a0620721092109e29
Validity
Not Before: Jul 2 03:01:14 2025 GMT
Not After : Jul 3 03:01:14 2025 GMT
Subject: CN=a2629d31547323be6540f87cf764e54b9fa0fa47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:dc:3d:ff:48:f6:ff:db:58:ba:30:dc:a2:0b:
60:9d:eb:10:54:25:38:b6:4f:36:72:a8:6f:7d:9c:
ea:1d:24:84:86:97:22:fb:a9:a8:b3:34:de:52:bd:
36:78:83:a6:ac:87:7b:a2:dd:c1:58:0a:2c:a8:da:
05:dc:3b:de:8c:cd:3d:7e:6d:6a:e5:4d:6f:e5:51:
08:23:f8:15:bc:50:b6:b8:bd:d1:f7:3b:f9:8b:2e:
68:e6:41:38:3b:ee:c6:80:d4:07:a3:49:5b:6f:22:
97:72:0f:82:07:be:7b:24:90:47:cc:71:19:8a:89:
52:a9:5f:fe:32:67:d7:f0:e3:1e:cb:93:42:62:33:
99:a3:7b:70:f6:13:36:19:33:4e:56:d3:49:25:dc:
df:29:b1:cb:38:0f:96:83:fc:87:07:cf:20:57:1b:
2b:ea:67:a8:4c:af:4d:a5:10:33:4f:c6:c0:12:7c:
d3:80:0e:00:32:cc:6f:14:91:c6:1c:85:3e:b8:14:
ef:b0:82:0f:8a:14:2e:41:61:a2:a2:2a:dd:df:15:
fd:eb:b9:bd:08:4b:10:64:19:40:de:0c:17:5e:99:
7b:7a:4d:26:1b:29:a2:bc:35:c1:1b:14:ce:de:80:
6e:8c:87:8f:fd:41:6c:af:47:fc:3e:bf:01:c0:80:
cd:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:62:9D:31:54:73:23:BE:65:40:F8:7C:F7:64:E5:4B:9F:A0:FA:47
X509v3 Authority Key Identifier:
keyid:C0:AA:B3:96:D6:50:82:60:27:C2:BD:8A:06:20:72:10:92:10:9E:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKqzltZQgmAnwr2KBiByEJIQnik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/wKqzltZQgmAnwr2KBiByEJIQnik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/wKqzltZQgmAnwr2KBiByEJIQnik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ac:7e:0a:03:31:95:e1:0f:54:0f:fd:6a:68:43:30:0a:2e:
0b:c8:4e:33:f6:df:fa:1c:56:61:c8:74:13:a1:80:2a:a1:cb:
58:7a:33:ec:11:34:36:4f:b1:74:ff:df:97:97:d1:a3:ea:02:
20:b7:a4:dd:44:6f:d3:97:cf:b2:79:12:cf:ff:09:59:c7:d2:
5e:33:10:58:88:58:47:d5:c7:ad:b2:a8:73:1a:9d:22:20:e1:
86:59:6e:89:a7:81:94:f1:c1:05:29:5c:ee:40:75:c1:78:c0:
4f:d9:2c:0b:2d:c7:b0:31:42:5e:6f:53:f2:bd:b3:a8:f7:3a:
a9:b6:53:84:4c:0b:5c:77:4a:27:b6:18:6d:e0:c9:48:70:31:
73:bf:ad:2b:71:ba:8f:01:8b:c7:ce:03:ce:06:dc:43:59:73:
da:f2:da:e7:f0:91:a3:18:ad:43:b3:45:ca:25:94:c9:34:19:
8c:aa:64:87:11:89:96:7f:21:d9:b4:98:7c:b1:d0:18:33:72:
b9:23:a5:92:06:46:12:c2:3c:e7:56:17:88:25:d5:0b:d1:2c:
65:43:7c:98:2f:41:ab:b9:9e:5d:49:cc:c2:8d:d3:62:4e:56:
c8:e1:42:5d:41:12:10:ba:2b:50:ca:58:e2:2c:d0:8e:6c:61:
1e:c7:40:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 07:38:32 2025 by rpki-client