Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.mft
File: wPklcRCJWHhrZf-iQbHxH20Fi1Y.mft (raw, json)
Hash identifier: NXGaLKk9MMMX4RMzMBI8bke8UufHLOrtiZ2DO35LUgE=
Subject key identifier: 86:60:52:BF:64:35:4E:86:15:4F:76:74:92:2F:E4:B8:E5:15:6C:31
Authority key identifier: C0:F9:25:71:10:89:58:78:6B:65:FF:A2:41:B1:F1:1F:6D:05:8B:56
Certificate issuer: /CN=c0f92571108958786b65ffa241b1f11f6d058b56
Certificate serial: 0197B6D7AF1AF3EA9FBB5B3FF9305D23B0B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPklcRCJWHhrZf-iQbHxH20Fi1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.mft
Manifest number: 0BFA
Signing time: Sat 28 Jun 2025 14:01:17 +0000
Manifest this update: Sat 28 Jun 2025 14:01:17 +0000
Manifest next update: Sun 29 Jun 2025 14:01:17 +0000
Files and hashes: 1: 42TScFyDsL36h4YpEfhHoHfnzjk.roa (hash: PlV9CG6o3L7E63lVcJyc5UxCQesBmENg5els1UMNldc=)
2: GzDEyQPlP7XqkDOXMJVrm-t5quA.roa (hash: yHlRVvenZ9bcsv8W/dTmVIqnz02wrgwCRtxhDUrDoKo=)
3: wPklcRCJWHhrZf-iQbHxH20Fi1Y.crl (hash: QnzkCm8DvkF2UkOtPoBB4WGKeY1WqJAcLOh2LB448+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/wPklcRCJWHhrZf-iQbHxH20Fi1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:af:1a:f3:ea:9f:bb:5b:3f:f9:30:5d:23:b0:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0f92571108958786b65ffa241b1f11f6d058b56
Validity
Not Before: Jun 28 14:01:17 2025 GMT
Not After : Jun 29 14:01:17 2025 GMT
Subject: CN=866052bf64354e86154f7674922fe4b8e5156c31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:98:c0:0f:02:fc:a4:cc:6a:b2:8c:2f:eb:01:
84:38:58:69:34:0d:fc:0c:a0:61:1d:b4:a8:a7:a0:
c7:29:90:a3:a1:9f:a9:eb:5f:2a:12:1e:1e:a5:5a:
2e:0c:ba:26:13:0b:21:85:ef:d5:16:a4:9d:2f:5b:
6a:fc:bc:55:ea:69:0f:31:2a:87:a1:f5:1f:9b:ae:
9e:30:57:bf:ac:88:b1:e9:19:1a:07:30:06:fa:41:
42:c5:9f:12:9a:94:0b:7a:21:58:a5:c4:35:c7:a8:
68:35:76:36:ee:45:e3:af:d4:bd:c0:90:6d:5b:8f:
ba:a2:9c:01:d2:63:f8:80:79:0f:29:b8:3a:c7:ba:
4b:ab:71:b0:bf:52:95:a2:03:ef:98:91:40:1e:4e:
5b:2c:70:9b:e9:dd:a9:ff:9b:8c:1d:38:98:25:0f:
5b:19:42:eb:47:82:9e:57:17:c0:69:3a:f6:fe:5c:
5f:28:49:ff:17:e2:c4:f5:bc:76:c0:12:6b:da:b2:
00:1b:9d:ca:3e:f0:66:e5:0b:ba:8f:96:79:69:f8:
36:bc:9b:f5:96:12:24:09:21:f4:71:ba:78:62:19:
50:8d:e3:a9:f3:9d:d9:c8:04:0a:99:ae:db:0d:16:
26:b2:f4:ee:ac:fd:99:da:e8:cd:94:9b:94:44:6c:
b2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:60:52:BF:64:35:4E:86:15:4F:76:74:92:2F:E4:B8:E5:15:6C:31
X509v3 Authority Key Identifier:
keyid:C0:F9:25:71:10:89:58:78:6B:65:FF:A2:41:B1:F1:1F:6D:05:8B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPklcRCJWHhrZf-iQbHxH20Fi1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:3c:d1:b2:71:c3:80:85:27:05:09:c5:31:0e:8c:69:e9:bd:
40:c3:4b:cc:51:97:57:06:23:fa:6c:f8:7c:4a:35:00:6e:cc:
e0:24:d7:76:6d:c5:c7:2f:81:ff:e4:da:52:7e:bb:c5:fc:26:
56:f4:65:38:18:66:e8:9e:38:8d:92:3a:03:35:7d:57:b2:81:
f0:24:20:ad:28:53:e7:81:ea:5e:68:3f:b7:a7:a7:64:1a:87:
50:46:cd:68:16:15:02:b7:98:d8:0a:b6:69:51:50:8f:13:7a:
4f:66:4e:b5:46:7f:c7:a0:93:3a:a3:84:28:67:6a:ce:ad:71:
f9:4c:b7:e9:f1:f1:2b:13:11:ee:f7:8f:e2:2f:b0:38:bc:4b:
2e:ff:bc:41:86:00:1d:56:ac:47:8d:8f:98:94:ec:0b:9d:fd:
db:32:97:c1:5c:48:10:a9:53:1f:e9:97:73:65:a9:91:2a:09:
df:8d:a7:dc:94:a7:40:3f:db:aa:5c:e5:bd:aa:65:68:a6:b0:
5b:b3:53:45:8e:79:aa:26:20:43:43:40:69:aa:54:96:21:a1:
86:ea:22:06:65:60:4e:be:b9:28:10:8e:03:d0:36:a8:ae:4b:
61:e8:59:33:1b:2d:f9:2e:80:18:d9:26:19:34:19:25:2e:e9:
a6:eb:2d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:49:21 2025 by rpki-client