Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.mft
File: WgqpaCxoOpwblc6WdtUbINOf0q4.mft (raw, json)
Hash identifier: e5j8nf84qnV2Ldh8RdPsQ34PvrGo3R3FK7rTV1yLvE4=
Subject key identifier: FF:9E:FA:A9:E1:B9:BB:0B:1F:0E:3C:2C:A9:17:97:21:D3:A6:62:AF
Authority key identifier: 5A:0A:A9:68:2C:68:3A:9C:1B:95:CE:96:76:D5:1B:20:D3:9F:D2:AE
Certificate issuer: /CN=5a0aa9682c683a9c1b95ce9676d51b20d39fd2ae
Certificate serial: 0197C5013467653D99E7F8F4404C0882994F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WgqpaCxoOpwblc6WdtUbINOf0q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.mft
Manifest number: 0E2B
Signing time: Tue 01 Jul 2025 08:01:19 +0000
Manifest this update: Tue 01 Jul 2025 08:01:19 +0000
Manifest next update: Wed 02 Jul 2025 08:01:19 +0000
Files and hashes: 1: D9VtpqQ5QcOE8_3AAGv6AbSncPk.roa (hash: 45VJpPEdefwyDmmpbMXwZdBXiJtpSM2szrEhn6hGnnw=)
2: WgqpaCxoOpwblc6WdtUbINOf0q4.crl (hash: YMIK2ez6d4p8YSSFpZBuYWezsZI97Xsh1/oR0JnA81k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WgqpaCxoOpwblc6WdtUbINOf0q4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:01:34:67:65:3d:99:e7:f8:f4:40:4c:08:82:99:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a0aa9682c683a9c1b95ce9676d51b20d39fd2ae
Validity
Not Before: Jul 1 08:01:19 2025 GMT
Not After : Jul 2 08:01:19 2025 GMT
Subject: CN=ff9efaa9e1b9bb0b1f0e3c2ca9179721d3a662af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ea:cc:2a:2c:da:d3:c7:a5:15:34:08:d2:74:
80:29:51:1a:02:36:19:df:85:ad:d8:2d:7a:0f:d8:
08:fa:4e:85:ea:98:4b:72:4c:97:49:6a:bb:fe:c1:
0d:7c:bb:c1:56:3a:ff:93:b4:47:a4:3a:e1:5f:81:
88:1e:d3:f0:ba:b4:f5:1b:84:2f:5d:78:84:af:70:
39:cb:b3:78:e2:8a:dd:47:73:dd:e0:83:26:62:b2:
9f:c9:f2:c9:39:90:a6:d1:10:8e:6c:eb:f1:b4:68:
87:24:10:a1:86:27:f3:c6:18:c1:50:c7:13:ff:7c:
65:bd:66:16:83:10:dc:88:20:83:52:97:92:06:b3:
2c:41:46:64:1b:42:e6:17:ff:85:45:79:b8:a1:66:
db:f3:86:04:69:a5:bf:a6:c5:fb:88:4a:76:9c:e3:
44:5b:dd:72:df:31:aa:5c:07:7f:72:fe:cd:6b:d7:
e9:22:e2:90:5b:c5:aa:a8:2b:21:a3:5d:63:71:d7:
27:6e:d5:e9:3d:b0:ab:49:b3:5c:9f:ee:89:47:3a:
18:d4:15:61:b8:f4:11:5c:66:c3:cc:33:e7:2b:1c:
da:9f:d9:87:be:1d:fc:21:8a:cb:a5:4f:e6:39:83:
39:ba:d6:ee:14:e9:28:6b:57:00:37:40:5d:90:fd:
4f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:9E:FA:A9:E1:B9:BB:0B:1F:0E:3C:2C:A9:17:97:21:D3:A6:62:AF
X509v3 Authority Key Identifier:
keyid:5A:0A:A9:68:2C:68:3A:9C:1B:95:CE:96:76:D5:1B:20:D3:9F:D2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgqpaCxoOpwblc6WdtUbINOf0q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:03:48:a6:26:1a:67:89:58:0e:47:2e:bc:0e:fa:e0:8f:4d:
e8:74:b7:0f:51:09:0e:70:bd:76:aa:50:48:15:6d:7c:ea:7c:
86:49:e9:b2:27:ca:93:9a:1a:c9:dc:b2:d4:f3:b9:43:93:e5:
75:e3:3f:71:43:62:59:a8:c5:78:1c:0a:a1:ab:95:3c:01:eb:
6b:9d:a4:00:f7:39:29:a2:8c:97:55:17:40:0b:ff:08:6d:0b:
8a:ef:41:5c:34:39:61:5e:ca:ce:0c:cf:4a:84:9e:7a:cf:16:
5f:cd:1a:92:59:e3:a7:ad:d0:f8:96:52:fe:81:5c:83:5c:6e:
98:db:fd:32:e7:f2:36:06:73:b0:82:ef:e2:9a:cb:b1:80:fb:
da:4b:05:a4:84:6e:7c:9a:ea:92:e7:bb:a0:29:59:6d:6d:ba:
83:c6:ff:6c:3e:be:9c:55:06:39:99:9b:7c:63:23:6a:ef:9f:
25:0f:e0:69:c9:f1:d8:5e:fd:62:4f:0b:9b:2e:b2:26:9a:f5:
c2:17:52:2e:1c:ed:d6:c4:af:b3:a1:a0:b0:3a:04:2e:3c:97:
99:1b:79:47:fb:6a:df:c5:68:f8:0a:6a:2e:db:8e:8b:7b:e8:
ff:8b:02:84:d5:e9:08:20:10:2a:79:65:eb:91:f1:ea:a5:c9:
9d:83:17:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 13:15:55 2025 by rpki-client