Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.mft
File: wwrvOWOU6llQ3HlWqxv0kTZGIqQ.mft (raw, json)
Hash identifier: hhxYChMpsAD1dVep7EZ2mYFHCEPphn1/IbufrmAa+8I=
Subject key identifier: F6:7B:0D:64:BF:AF:CE:F6:7B:0E:41:CE:08:60:59:6D:32:2E:0E:62
Authority key identifier: C3:0A:EF:39:63:94:EA:59:50:DC:79:56:AB:1B:F4:91:36:46:22:A4
Certificate issuer: /CN=c30aef396394ea5950dc7956ab1bf491364622a4
Certificate serial: 0197B6D7C2CE9FD2A1450F99BD020B63C816
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.mft
Manifest number: 150F
Signing time: Sat 28 Jun 2025 14:01:22 +0000
Manifest this update: Sat 28 Jun 2025 14:01:22 +0000
Manifest next update: Sun 29 Jun 2025 14:01:22 +0000
Files and hashes: 1: rZbNK2xJ4XhKao8afy4CimeXVSk.roa (hash: DH234KafhTlCh4Rrjfu8Y3PnZSWa2Wt2QfsLpMy42vQ=)
2: wwrvOWOU6llQ3HlWqxv0kTZGIqQ.crl (hash: 3pbz8L0VeIUPhwdaauPU/L+p2gUsf8iiSvsZpp/Wpt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:c2:ce:9f:d2:a1:45:0f:99:bd:02:0b:63:c8:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c30aef396394ea5950dc7956ab1bf491364622a4
Validity
Not Before: Jun 28 14:01:22 2025 GMT
Not After : Jun 29 14:01:22 2025 GMT
Subject: CN=f67b0d64bfafcef67b0e41ce0860596d322e0e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:22:ba:04:d5:a2:12:6d:57:1e:5a:de:f5:c2:
27:fb:1b:40:7f:af:b2:93:c4:ec:f0:f0:19:39:4d:
56:5e:3e:dc:39:fc:73:e4:b9:31:18:dd:22:d6:6d:
17:bf:e7:0b:44:1e:33:82:bc:d4:fb:cd:b4:1c:0c:
59:aa:ea:b6:4b:6e:ce:1f:d3:fd:f7:fd:5f:ef:aa:
62:e7:cf:09:d8:18:81:00:bc:c1:53:d9:77:17:4f:
4c:f7:80:66:01:ce:c3:23:b9:bf:98:45:d6:ff:b0:
61:c9:f5:6b:9d:bf:71:62:c9:ce:c8:36:e6:5a:38:
18:e6:f6:43:bb:3a:33:f6:07:a1:6b:a6:e4:48:b1:
45:83:33:cc:9a:6b:b1:b1:24:a5:96:39:62:06:61:
02:dd:7f:91:8b:e5:0e:7f:52:2a:92:67:3d:33:2a:
7b:ee:79:b4:44:73:2a:b7:9d:be:b6:21:0b:20:fc:
59:63:00:77:76:0a:92:f2:09:4e:4a:43:4d:51:0b:
b9:1c:46:50:a9:ec:30:17:37:46:1e:2b:3f:10:34:
04:28:98:64:48:ab:94:e5:1a:26:11:51:91:ef:8a:
de:c2:8a:78:3f:80:79:e7:10:8a:90:ef:ee:c2:af:
4d:0e:29:c2:d9:f7:c9:c2:dc:7e:ae:71:d1:80:68:
02:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:7B:0D:64:BF:AF:CE:F6:7B:0E:41:CE:08:60:59:6D:32:2E:0E:62
X509v3 Authority Key Identifier:
keyid:C3:0A:EF:39:63:94:EA:59:50:DC:79:56:AB:1B:F4:91:36:46:22:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:dd:6a:13:63:d2:4a:a9:ad:bf:2d:e5:85:47:8d:bd:87:90:
fa:37:24:9b:bd:79:f5:e2:e9:7b:2f:37:3f:77:3d:65:49:58:
cc:68:e0:98:26:c7:8f:82:67:68:2c:00:f8:57:ff:1e:a7:fb:
37:a9:0b:a5:7b:5b:15:08:8b:ad:24:d3:20:93:d8:1c:7a:be:
30:71:04:ab:60:eb:d8:b0:c6:e1:14:b3:87:ad:0e:4a:56:8a:
d6:22:a9:9b:b6:01:b2:00:6c:0e:87:75:01:0f:cf:c0:e4:3d:
4d:f6:42:75:f7:d0:66:1f:6f:00:d7:20:20:29:76:07:f7:9d:
b8:a5:24:35:f8:32:4b:f7:72:43:5f:0c:03:9b:6d:7a:89:f5:
72:42:65:b7:bb:a0:93:d8:8f:b2:21:83:6b:73:84:81:16:0a:
af:30:4e:49:3d:c4:a9:ca:70:6c:bd:34:08:3e:aa:53:48:7c:
0e:2a:8c:59:31:48:19:ae:b3:88:9d:2e:72:f8:1c:ad:cb:dc:
9d:3c:98:09:35:be:d9:58:25:49:a0:d6:85:a0:3b:07:25:1b:
24:44:2e:91:50:dc:e8:a8:7e:1f:6d:27:6f:59:da:e6:2b:c1:
9b:13:4d:87:9c:b2:a2:5b:3a:80:f4:56:39:42:52:ff:bf:c7:
04:10:70:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:07:04 2025 by rpki-client