Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/59e107-704f-4480-b69e-f06a761c9a20/1/wd13fOfXCSaMDFWlnADGrqWyGb0.mft
File: wd13fOfXCSaMDFWlnADGrqWyGb0.mft (raw, json)
Hash identifier: 9R4PMvreU2FWAYJ0pKWpaf30NCJpOWQ1Q7sI1wnmj6Q=
Subject key identifier: 01:B6:00:FB:24:20:C3:FB:69:3E:40:F1:A3:DC:E9:39:94:46:34:87
Authority key identifier: C1:DD:77:7C:E7:D7:09:26:8C:0C:55:A5:9C:00:C6:AE:A5:B2:19:BD
Certificate issuer: /CN=c1dd777ce7d709268c0c55a59c00c6aea5b219bd
Certificate serial: 0197B745745FC49BDF03C4A3D8C25631B5A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wd13fOfXCSaMDFWlnADGrqWyGb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/59e107-704f-4480-b69e-f06a761c9a20/1/wd13fOfXCSaMDFWlnADGrqWyGb0.mft
Manifest number: 10A3
Signing time: Sat 28 Jun 2025 16:01:11 +0000
Manifest this update: Sat 28 Jun 2025 16:01:11 +0000
Manifest next update: Sun 29 Jun 2025 16:01:11 +0000
Files and hashes: 1: Ex-cB_4h1wPjXU2C6qgnvAowG6s.roa (hash: Pfofg8M1L5a51wZ24aPVDYrdbmmkhLSc6VaiAue9C68=)
2: wd13fOfXCSaMDFWlnADGrqWyGb0.crl (hash: QhhmT6WjbiT/DixlZutqt56G/YJhDIiBGAHodmcG+FI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/59e107-704f-4480-b69e-f06a761c9a20/1/wd13fOfXCSaMDFWlnADGrqWyGb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/59e107-704f-4480-b69e-f06a761c9a20/1/wd13fOfXCSaMDFWlnADGrqWyGb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wd13fOfXCSaMDFWlnADGrqWyGb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:74:5f:c4:9b:df:03:c4:a3:d8:c2:56:31:b5:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1dd777ce7d709268c0c55a59c00c6aea5b219bd
Validity
Not Before: Jun 28 16:01:11 2025 GMT
Not After : Jun 29 16:01:11 2025 GMT
Subject: CN=01b600fb2420c3fb693e40f1a3dce93994463487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ea:c0:c7:7d:5e:3f:a6:35:5b:7e:7a:ca:75:
43:56:bb:49:ba:eb:b2:7d:00:66:76:fa:ed:4c:56:
ce:2f:be:b7:27:5e:12:5e:f9:aa:7d:00:e8:37:a2:
d1:17:e6:8a:8f:a8:59:c6:ca:c3:3c:24:cd:dd:5a:
ea:00:a2:4b:c4:9e:b3:38:6c:86:34:d6:c8:ee:2c:
7a:fd:3b:ef:7b:a1:91:ea:92:a7:dd:c4:4f:4c:c7:
e4:d1:d5:b9:2a:19:14:2d:a8:2d:b9:39:92:ff:30:
83:5d:6d:20:8f:53:c9:c5:7c:e8:38:e9:00:48:55:
e5:8e:fe:6c:b4:0e:e9:c5:fb:e6:d0:cd:4e:af:77:
70:e9:4c:43:04:3b:73:1a:96:c9:31:a3:34:7e:2c:
f3:93:77:dc:97:28:ab:a6:b6:d7:44:c2:40:44:a9:
8c:9c:d0:54:7e:2a:b0:b3:64:e7:ba:64:e9:23:48:
99:9e:83:cf:5f:fa:0a:7e:d2:98:ec:86:30:e5:d3:
df:3d:1c:bb:fc:b9:3c:99:81:5c:e8:61:e5:a8:9c:
fc:76:ec:c9:27:4d:2a:48:9b:53:0b:52:ae:72:19:
80:39:a2:27:b7:59:29:0d:e3:97:44:a5:a6:63:c1:
19:9f:72:31:0a:22:a2:74:27:cb:24:f9:8f:ac:59:
d2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B6:00:FB:24:20:C3:FB:69:3E:40:F1:A3:DC:E9:39:94:46:34:87
X509v3 Authority Key Identifier:
keyid:C1:DD:77:7C:E7:D7:09:26:8C:0C:55:A5:9C:00:C6:AE:A5:B2:19:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wd13fOfXCSaMDFWlnADGrqWyGb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/59e107-704f-4480-b69e-f06a761c9a20/1/wd13fOfXCSaMDFWlnADGrqWyGb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/59e107-704f-4480-b69e-f06a761c9a20/1/wd13fOfXCSaMDFWlnADGrqWyGb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:3a:54:b0:90:53:a2:a9:b6:d9:11:a9:5f:46:cb:7b:08:9a:
59:e1:e1:f1:89:c6:29:7f:d2:84:83:f5:95:99:3a:3b:77:22:
3c:bc:ec:54:4b:26:9f:00:10:a7:49:c4:ef:5a:00:8f:7e:b2:
ea:c3:c1:38:fe:69:ad:e9:56:22:71:5b:3b:92:c6:fb:5e:01:
a9:16:d4:dc:91:3f:e9:0d:8f:b4:41:c7:3a:ef:10:09:24:13:
ec:ae:89:dd:e1:5f:4c:cd:7d:0e:a6:15:a4:3e:93:9c:cd:13:
65:69:3b:6f:be:5e:76:56:2e:1e:31:e5:c0:d6:12:ff:2f:fe:
cd:67:67:5d:e4:7c:92:c4:db:b0:2b:c2:3b:e5:ca:9b:55:52:
eb:23:46:64:5b:3c:b7:80:c5:62:d1:25:a2:68:23:2b:4b:72:
45:41:b1:2f:6f:87:5e:df:b7:8e:ad:f9:be:c1:89:1d:76:95:
c7:3c:57:e4:0b:30:e4:5b:3c:4d:02:16:7d:18:0e:09:e5:6a:
47:4f:6d:3e:48:74:8b:8e:7e:cb:83:8a:81:de:2b:3f:ee:9f:
db:4a:6e:98:0a:a7:03:1f:64:71:9d:a2:23:b4:11:9d:e6:8c:
53:cc:32:70:e7:43:fb:d3:f0:44:c2:73:18:ac:6b:b9:c5:df:
0a:8e:da:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:29:34 2025 by rpki-client