Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.mft
File: wc2HDWChpsQgZxWK7rzA4_1t2B8.mft (raw, json)
Hash identifier: Owg2GtFSAaf5YIr7exNHTzgSluSVowR7vlFv43JaPF8=
Subject key identifier: 7A:4A:AB:93:2A:94:06:20:1B:61:00:D0:BC:8F:34:DA:67:24:F9:22
Authority key identifier: C1:CD:87:0D:60:A1:A6:C4:20:67:15:8A:EE:BC:C0:E3:FD:6D:D8:1F
Certificate issuer: /CN=c1cd870d60a1a6c42067158aeebcc0e3fd6dd81f
Certificate serial: 0197B8215B3B5EC11C896A2DDF53DEE03064
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wc2HDWChpsQgZxWK7rzA4_1t2B8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.mft
Manifest number: 0299
Signing time: Sat 28 Jun 2025 20:01:23 +0000
Manifest this update: Sat 28 Jun 2025 20:01:23 +0000
Manifest next update: Sun 29 Jun 2025 20:01:23 +0000
Files and hashes: 1: BqHb_zqnMM3dIgBF_BTfgVY5a5k.roa (hash: uhtJUVXZSGPPQKjYqbLF+Cz5CPTBTCYfz/c5yIRK4Ss=)
2: wc2HDWChpsQgZxWK7rzA4_1t2B8.crl (hash: +zPUXCwn50kFXe77nIJelFBh+6yG0ClWak5dYqqgJmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wc2HDWChpsQgZxWK7rzA4_1t2B8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:5b:3b:5e:c1:1c:89:6a:2d:df:53:de:e0:30:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1cd870d60a1a6c42067158aeebcc0e3fd6dd81f
Validity
Not Before: Jun 28 20:01:23 2025 GMT
Not After : Jun 29 20:01:23 2025 GMT
Subject: CN=7a4aab932a9406201b6100d0bc8f34da6724f922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:dd:74:d5:82:d7:18:af:81:94:49:13:57:d1:
f2:8e:82:6b:69:c0:2d:d9:d3:d5:9e:fc:e3:a5:18:
c9:e2:4c:46:b3:5d:48:e6:72:c4:90:d8:e2:c8:cb:
eb:c6:7c:65:81:b6:d5:ba:2c:b6:af:21:0f:3b:84:
8d:67:0d:18:6c:d7:bb:33:d1:a3:e3:25:91:77:5a:
c1:e7:ad:f4:7a:9d:59:c0:3e:1c:fa:8e:91:34:38:
c5:ea:16:39:4a:1a:5d:88:f9:57:c9:53:ba:f8:42:
70:77:5b:a7:0c:f3:90:c0:18:cc:44:df:2d:a1:7f:
12:e6:94:6c:f6:01:73:e2:9b:90:c7:a6:e4:78:a3:
14:c4:e3:82:f7:56:8a:57:89:26:8f:b6:7e:55:c9:
41:4a:50:3e:ce:32:d5:d8:d0:75:75:93:b5:2c:80:
b1:11:34:59:f5:1a:f3:e4:bc:50:bd:63:80:98:1e:
d2:d4:b1:5f:4f:f7:89:36:73:ab:df:81:e4:e8:05:
9a:67:0d:7b:01:a4:97:28:d4:61:c2:0f:4c:6f:c9:
b9:fd:d9:04:5d:64:56:2b:e1:fb:fe:55:f8:d5:d3:
4e:51:90:08:08:f8:1b:51:ea:a4:9c:db:37:28:68:
70:c4:86:5b:3c:60:1a:09:16:09:56:4a:5b:4b:d2:
99:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:4A:AB:93:2A:94:06:20:1B:61:00:D0:BC:8F:34:DA:67:24:F9:22
X509v3 Authority Key Identifier:
keyid:C1:CD:87:0D:60:A1:A6:C4:20:67:15:8A:EE:BC:C0:E3:FD:6D:D8:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wc2HDWChpsQgZxWK7rzA4_1t2B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:fc:8c:c3:94:f3:35:20:35:c2:84:cb:9d:5c:ed:07:8d:8f:
ba:69:76:7c:22:8a:03:49:b1:e9:41:d5:f3:81:cc:84:d9:26:
e1:c9:72:cd:71:03:24:72:5e:3b:a8:fa:13:a8:ba:32:f0:38:
8f:ba:80:81:cf:cb:7c:bc:61:7a:e9:70:90:f2:7e:8b:4f:0f:
da:0e:ad:8b:66:fc:df:3b:0d:d3:79:aa:db:38:0f:26:87:9e:
27:b0:a5:5a:c8:bf:f0:64:8f:d8:4e:88:de:00:8c:f3:2b:7a:
e7:79:c3:06:a8:83:b0:0c:0e:a9:16:a2:8d:ce:e9:f2:aa:12:
ca:b1:e8:c1:af:a4:de:a4:6d:4c:47:4e:26:4b:3d:0e:93:58:
55:d8:32:ee:4d:7c:a1:2c:a6:01:27:f6:67:75:e5:30:a1:2e:
22:13:86:f0:66:fe:71:70:e6:06:8d:7e:7f:49:71:44:5d:de:
dd:61:76:f2:43:9f:d8:5b:a5:e1:b0:7c:0a:e9:08:15:ec:8c:
53:22:e1:72:ea:d1:69:34:42:9c:01:b0:b4:54:35:e3:48:2c:
05:e9:18:19:65:83:6f:bb:03:02:49:cb:b0:5a:f6:ad:6b:bf:
29:88:10:b8:18:0a:a7:b9:a2:42:8b:82:2a:e8:3e:2c:5f:ef:
50:d4:a8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:50:25 2025 by rpki-client