Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/387f21-101b-487e-8a0f-0b838a599662/1/waGQUEttntnBgJaEBCWxHXsi3_Q.mft
File: waGQUEttntnBgJaEBCWxHXsi3_Q.mft (raw, json)
Hash identifier: ff+SgjgajUEtMd7oXljhgUgt7xS3s4XUciZMDCd+XGA=
Subject key identifier: E4:E4:26:83:B4:F8:B8:9B:82:DF:65:A7:FC:4E:42:7C:D7:82:7F:94
Authority key identifier: C1:A1:90:50:4B:6D:9E:D9:C1:80:96:84:04:25:B1:1D:7B:22:DF:F4
Certificate issuer: /CN=c1a190504b6d9ed9c18096840425b11d7b22dff4
Certificate serial: 0197B8903924B74918C3388684BF23E2E573
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/waGQUEttntnBgJaEBCWxHXsi3_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/387f21-101b-487e-8a0f-0b838a599662/1/waGQUEttntnBgJaEBCWxHXsi3_Q.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 22:02:28 +0000
Manifest this update: Sat 28 Jun 2025 22:02:28 +0000
Manifest next update: Sun 29 Jun 2025 22:02:28 +0000
Files and hashes: 1: A9fopaXO-fVQpKdJ8LHIGXii_SU.roa (hash: 8zkX8M3Fk6VQlJpwJIcZtNmfIBhTghba03PireQiTxw=)
2: waGQUEttntnBgJaEBCWxHXsi3_Q.crl (hash: SX8r7FkcofwL9t4FSCvZsdhth93WjtmjAaY4sBJMwyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/387f21-101b-487e-8a0f-0b838a599662/1/waGQUEttntnBgJaEBCWxHXsi3_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/387f21-101b-487e-8a0f-0b838a599662/1/waGQUEttntnBgJaEBCWxHXsi3_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/waGQUEttntnBgJaEBCWxHXsi3_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:39:24:b7:49:18:c3:38:86:84:bf:23:e2:e5:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1a190504b6d9ed9c18096840425b11d7b22dff4
Validity
Not Before: Jun 28 22:02:28 2025 GMT
Not After : Jun 29 22:02:28 2025 GMT
Subject: CN=e4e42683b4f8b89b82df65a7fc4e427cd7827f94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1b:fe:19:d6:56:6c:11:c1:7b:17:6d:46:e2:
71:4c:08:4a:a2:02:60:dc:5f:cb:db:bd:b4:ed:cd:
99:5c:bc:87:b4:85:f0:fb:8e:df:91:7b:16:74:05:
87:ec:cf:cf:d7:af:60:99:bc:9c:d3:84:e3:8b:99:
78:aa:e6:6c:a2:ac:5f:c0:e6:b1:8b:4d:ce:3e:54:
d6:70:96:b4:59:33:86:cf:f0:40:b1:58:1f:e5:8f:
43:f3:43:f2:a8:9b:13:37:8b:08:a3:cb:46:c9:46:
89:6c:ac:81:8b:b7:dd:5a:e5:a6:4f:a9:30:3d:61:
e2:c5:76:75:79:28:74:27:08:bb:71:d6:60:71:0e:
f1:57:a2:ec:7f:d8:6f:5b:4a:41:f9:04:e5:03:d3:
68:0a:50:7c:83:cf:7a:1d:b3:01:7a:80:18:45:cb:
4a:d3:04:e4:35:89:1c:e7:47:65:34:4f:d1:b6:c1:
0c:94:25:41:ac:b2:c6:3d:12:5d:c2:7a:42:fa:76:
b9:35:c7:6b:e6:45:9a:8c:48:41:24:83:99:85:7e:
61:53:71:09:d1:ec:70:3c:fc:99:37:5b:64:2b:f0:
11:33:2f:ca:99:40:01:bc:4b:89:93:f7:4b:e1:37:
84:a7:73:74:c6:38:db:52:78:9e:e9:82:b6:93:06:
85:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E4:26:83:B4:F8:B8:9B:82:DF:65:A7:FC:4E:42:7C:D7:82:7F:94
X509v3 Authority Key Identifier:
keyid:C1:A1:90:50:4B:6D:9E:D9:C1:80:96:84:04:25:B1:1D:7B:22:DF:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/waGQUEttntnBgJaEBCWxHXsi3_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/387f21-101b-487e-8a0f-0b838a599662/1/waGQUEttntnBgJaEBCWxHXsi3_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/387f21-101b-487e-8a0f-0b838a599662/1/waGQUEttntnBgJaEBCWxHXsi3_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:4c:60:95:74:1f:f7:c0:32:eb:da:36:d0:9a:bd:c0:a3:ce:
15:41:38:1b:32:68:ca:d2:56:79:41:27:0b:a6:16:18:54:33:
49:1d:dd:c9:df:32:c4:2f:11:8d:bb:90:af:25:f3:54:cb:25:
90:7d:98:b7:6e:55:f6:ec:e1:ff:d4:00:41:7e:5f:e9:76:ed:
d8:b3:a5:fe:8e:b3:80:54:13:26:c8:e7:05:5a:fb:e0:65:6a:
1e:55:5e:34:fa:ee:51:32:f2:7a:26:d0:e7:e6:3c:e4:fe:29:
78:33:4d:2e:e8:e8:66:fb:7b:28:2e:2e:29:68:2d:92:f5:3b:
75:4b:47:8d:b3:b7:18:ae:b4:fe:ab:eb:fa:ab:ac:02:b6:ab:
fb:aa:4f:d2:de:8d:8c:0e:a1:9e:0c:5f:22:4c:ef:49:0a:a4:
df:4d:34:46:a3:a0:15:8c:fc:08:b1:15:58:ba:21:6c:a4:3c:
4f:7f:84:6a:05:c2:1b:46:e5:00:e0:08:14:48:20:36:0d:1d:
a8:3f:2f:04:f1:a7:8b:66:ab:3c:1d:d8:1b:67:97:24:0e:c4:
a2:05:fa:21:43:14:f0:19:31:09:b9:a7:a5:2e:35:24:de:73:
73:49:c7:d8:ca:12:e3:46:94:f1:62:dc:c4:f1:0e:ba:8f:94:
3c:8f:cc:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:35:04 2025 by rpki-client