Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.mft
File: ws4IFBZ-qoGJ_YTTkCcOrfKUgss.mft (raw, json)
Hash identifier: 8/fFyEoX3XTpMjZ2ICI4GToToU53xN3vdSaWwspqT2U=
Subject key identifier: 08:23:E6:38:68:DC:D4:2F:D0:F0:7C:7D:A8:C0:8F:33:94:19:7B:02
Authority key identifier: C2:CE:08:14:16:7E:AA:81:89:FD:84:D3:90:27:0E:AD:F2:94:82:CB
Certificate issuer: /CN=c2ce0814167eaa8189fd84d390270eadf29482cb
Certificate serial: 0197B6A1FBA7BA252620311DE03D38104AB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.mft
Manifest number: 0A35
Signing time: Sat 28 Jun 2025 13:02:38 +0000
Manifest this update: Sat 28 Jun 2025 13:02:38 +0000
Manifest next update: Sun 29 Jun 2025 13:02:38 +0000
Files and hashes: 1: R1gidcfPTDL9l_CbPS671EyX5iY.roa (hash: c4a4L7/lsOBY0SjW+Je19dj12ru5NWUKEP164tb+S4Q=)
2: Re7xjUICEpcefdPF_f0YtM8qXn4.roa (hash: ekIH5kxgf0bGVz6q5zIjK4NfDPuAaNIY8i0OtjeIH9w=)
3: ws4IFBZ-qoGJ_YTTkCcOrfKUgss.crl (hash: 2DkJ8tjUOk8WKi/Ulbf8MT9NNdVEZVUbNy4VG3xvmRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.mft
rsync://rpki.ripe.net/repository/DEFAULT/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:fb:a7:ba:25:26:20:31:1d:e0:3d:38:10:4a:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ce0814167eaa8189fd84d390270eadf29482cb
Validity
Not Before: Jun 28 13:02:38 2025 GMT
Not After : Jun 29 13:02:38 2025 GMT
Subject: CN=0823e63868dcd42fd0f07c7da8c08f3394197b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:38:14:e7:80:61:c3:56:27:7d:c7:67:f8:71:
f9:c7:57:f3:f4:0f:d3:2c:49:7d:8a:47:6a:a6:92:
71:ba:a9:b6:0b:da:75:db:9f:25:6c:0f:83:23:57:
f4:2b:8f:37:ce:19:2f:04:1d:8c:88:dc:61:2a:ec:
f3:a1:11:e9:d4:64:29:ab:a6:3c:1f:04:83:f5:db:
ac:d5:b6:5a:11:8b:f3:9c:45:45:dd:57:e1:01:59:
0e:68:c8:29:b7:62:cb:6f:9e:25:c4:9b:f7:da:dd:
9b:b2:42:d1:6f:ca:10:20:92:d8:25:d4:a5:78:4c:
e4:49:20:82:8e:ab:b2:fa:04:6f:6a:a2:e0:9a:28:
eb:66:1d:5b:45:d1:c8:4e:ed:ba:10:fb:8f:e0:ca:
50:a9:31:ff:f5:66:cf:ac:93:db:f2:46:58:fa:11:
5e:1e:16:9e:3e:3b:37:5b:cc:5d:3e:8c:68:c5:39:
d7:c7:47:39:b7:32:60:44:75:83:66:28:6e:68:8b:
df:45:3b:af:45:6b:8f:95:d6:01:50:8a:1a:1a:51:
7e:72:58:c0:8e:0e:3c:dc:e8:e8:41:2d:4e:62:aa:
81:3f:2f:15:d4:76:d6:61:c4:57:55:66:c9:72:64:
c0:5f:e2:7e:ca:0e:20:8a:fd:11:fb:81:a9:aa:f7:
55:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:23:E6:38:68:DC:D4:2F:D0:F0:7C:7D:A8:C0:8F:33:94:19:7B:02
X509v3 Authority Key Identifier:
keyid:C2:CE:08:14:16:7E:AA:81:89:FD:84:D3:90:27:0E:AD:F2:94:82:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:30:59:3a:48:0d:2f:a6:92:f3:17:57:63:eb:4f:38:9d:34:
37:49:ef:fb:d2:51:83:1a:18:5e:22:c3:a7:5f:d6:c9:f4:07:
93:ac:a3:fb:98:ee:97:7f:97:37:b9:3f:3c:ad:31:62:d6:14:
68:fa:af:26:f5:96:c6:59:b9:82:4c:51:ea:12:fa:18:d7:72:
46:81:74:65:97:cd:56:29:91:cc:1d:a5:4a:ce:72:37:94:3c:
b8:9b:9d:eb:ae:83:4c:32:eb:4b:d7:7c:4e:d0:6c:ae:ea:3f:
f2:47:a8:54:9f:27:1b:ef:17:33:68:d6:4e:31:0a:3d:ee:1b:
54:4c:df:4b:ba:60:f4:7c:c3:91:aa:c2:f6:35:d4:1c:8a:63:
a1:f3:1a:91:39:b9:31:3f:3c:16:5f:5a:18:88:c4:9f:ad:07:
3f:66:b1:f2:33:52:15:5c:00:32:ac:98:a8:25:c7:43:8e:28:
5a:7f:55:dd:14:6d:9d:5b:b1:01:b0:98:00:41:5f:1f:3a:64:
51:ec:18:77:60:fb:8c:a2:90:54:0b:26:af:00:fc:9a:6f:61:
03:3d:78:3f:84:d1:5c:69:89:01:ce:06:bf:da:8b:92:90:c0:
41:db:95:b5:a0:70:f4:b7:f7:bc:81:84:23:24:2c:45:66:47:
19:7e:6b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:31:31 2025 by rpki-client