Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.mft
File: wcIPvEj6WafY3qV5CPNQobl0Wd8.mft (raw, json)
Hash identifier: G2t38psp2KO86zpUuv64S24pWUv9XVg66JloToBxWvU=
Subject key identifier: AE:53:B3:75:7C:B6:B2:A8:F1:4F:6D:F2:8E:33:B6:1B:11:93:FB:C8
Authority key identifier: C1:C2:0F:BC:48:FA:59:A7:D8:DE:A5:79:08:F3:50:A1:B9:74:59:DF
Certificate issuer: /CN=c1c20fbc48fa59a7d8dea57908f350a1b97459df
Certificate serial: 0197B6D798DC4A17F70798467256FFCE2FEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wcIPvEj6WafY3qV5CPNQobl0Wd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.mft
Manifest number: 13CF
Signing time: Sat 28 Jun 2025 14:01:12 +0000
Manifest this update: Sat 28 Jun 2025 14:01:12 +0000
Manifest next update: Sun 29 Jun 2025 14:01:12 +0000
Files and hashes: 1: 1FW1XbyYUs66xbKImXHkiZU-xAA.roa (hash: DA26l55wpmFxpEPwr1TEVKDAhIdZwBFIGz/j/ljF/kM=)
2: rQGBYURhHxIS2gUjxgxhWlf8G-M.roa (hash: d90EC3mny7b2jkfAqHp6/1/Pw4XbnGm5shftI7zAdH4=)
3: wcIPvEj6WafY3qV5CPNQobl0Wd8.crl (hash: eia9Trh5ZAyUr69dAolLefE6wUaDCFJ5xptsEeZjC9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wcIPvEj6WafY3qV5CPNQobl0Wd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:98:dc:4a:17:f7:07:98:46:72:56:ff:ce:2f:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c20fbc48fa59a7d8dea57908f350a1b97459df
Validity
Not Before: Jun 28 14:01:12 2025 GMT
Not After : Jun 29 14:01:12 2025 GMT
Subject: CN=ae53b3757cb6b2a8f14f6df28e33b61b1193fbc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:56:a7:28:e9:5b:c7:26:c9:f8:73:25:2f:64:
b5:9d:44:51:0e:cf:dc:fc:dc:d9:53:4c:17:7a:75:
9d:69:bc:dd:68:e8:d6:1e:50:58:cb:e2:58:e1:44:
51:c5:f7:ca:7f:eb:8d:bb:32:19:2f:e5:32:5e:0a:
77:ab:5c:64:1b:2e:94:ec:9e:c2:52:b2:dd:08:3f:
bf:4f:12:73:2e:c0:03:09:0a:ca:f4:f1:f1:e5:71:
2e:9d:86:f2:a7:06:18:b4:15:10:ee:57:fd:47:fc:
27:bf:88:c5:10:92:e0:c9:31:1c:e9:f8:fd:e0:a8:
df:9e:78:15:57:87:58:44:78:aa:50:de:4d:df:66:
8c:20:7d:68:41:0f:18:5f:e6:c5:44:3c:97:77:13:
5f:32:33:4d:80:72:c4:b0:32:e6:1f:5f:a2:c2:9e:
94:79:7b:5f:38:7d:c7:d4:a4:15:68:94:20:e0:a4:
eb:bd:c8:05:d7:2b:c6:bb:d1:97:39:25:9f:51:0e:
f1:f7:37:93:27:77:b7:95:9f:e3:e3:11:00:d5:6d:
a1:c8:e1:9c:aa:c3:d9:c1:24:c9:92:b5:30:41:e1:
49:3b:1a:25:60:88:e8:40:7d:8a:17:c7:e0:d3:a7:
ea:ca:dc:5c:bb:90:ee:ac:38:5b:bf:4d:42:99:60:
ef:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:53:B3:75:7C:B6:B2:A8:F1:4F:6D:F2:8E:33:B6:1B:11:93:FB:C8
X509v3 Authority Key Identifier:
keyid:C1:C2:0F:BC:48:FA:59:A7:D8:DE:A5:79:08:F3:50:A1:B9:74:59:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wcIPvEj6WafY3qV5CPNQobl0Wd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:ad:f3:80:3d:50:88:1d:66:22:61:37:cf:e1:c0:1b:31:18:
59:0f:93:e5:e2:ae:7f:14:0f:c3:29:60:f1:01:cc:ed:57:e5:
e5:84:f1:64:d2:05:41:33:05:77:6d:f9:c9:ca:ac:be:25:ac:
93:04:f5:f1:73:49:1c:16:43:35:43:3d:75:6a:f5:0b:d2:99:
ad:7e:72:67:69:04:2c:aa:e7:13:01:d8:53:37:0e:7d:d8:0a:
21:37:f3:d2:ed:35:bf:2a:55:14:53:a4:ed:3b:8a:fe:45:dd:
a7:ab:5b:88:09:ac:73:3c:b2:18:91:6c:98:e1:aa:d7:87:72:
a8:c4:b6:40:8f:07:b8:36:28:7a:b0:cc:83:87:9a:54:a9:ba:
aa:bf:ec:9b:00:5b:a8:c8:dc:0e:d8:ad:5b:f7:8e:65:8b:c9:
f2:34:eb:9c:1b:09:91:44:61:70:d5:41:25:d0:7c:36:a4:97:
dd:1d:3f:ed:14:da:b7:28:97:e9:99:fe:04:d7:57:17:a3:b1:
3d:3a:3c:a1:a5:a8:26:7b:2c:38:11:af:91:4e:6a:c3:e3:02:
1c:5c:17:f3:fc:bb:ec:f5:14:82:7e:8f:82:6b:78:8a:5c:f7:
95:2d:be:c3:60:a0:d1:2d:d4:78:5b:ef:70:15:53:ef:56:8f:
54:5f:7d:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe215jcShf3B5hGclb/zi/qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxYzIwZmJjNDhmYTU5YTdkOGRlYTU3OTA4ZjM1MGExYjk3
NDU5ZGYwHhcNMjUwNjI4MTQwMTEyWhcNMjUwNjI5MTQwMTEyWjAzMTEwLwYDVQQD
EyhhZTUzYjM3NTdjYjZiMmE4ZjE0ZjZkZjI4ZTMzYjYxYjExOTNmYmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslanKOlbxybJ+HMlL2S1nURRDs/c
/NzZU0wXenWdabzdaOjWHlBYy+JY4URRxffKf+uNuzIZL+UyXgp3q1xkGy6U7J7C
UrLdCD+/TxJzLsADCQrK9PHx5XEunYbypwYYtBUQ7lf9R/wnv4jFEJLgyTEc6fj9
4KjfnngVV4dYRHiqUN5N32aMIH1oQQ8YX+bFRDyXdxNfMjNNgHLEsDLmH1+iwp6U
eXtfOH3H1KQVaJQg4KTrvcgF1yvGu9GXOSWfUQ7x9zeTJ3e3lZ/j4xEA1W2hyOGc
qsPZwSTJkrUwQeFJOxolYIjoQH2KF8fg06fqytxcu5DurDhbv01CmWDv9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK5Ts3V8trKo8U9t8o4zthsRk/vIMB8GA1UdIwQY
MBaAFMHCD7xI+lmn2N6leQjzUKG5dFnfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2NJUHZFajZXYWZZM3FWNUNQTlFvYmwwV2Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82Yzc4ZGEtYmRlZC00MWE5LWI1MDgt
MzAyY2UxYmM5OWMwLzEvd2NJUHZFajZXYWZZM3FWNUNQTlFvYmwwV2Q4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi82Yzc4ZGEtYmRlZC00MWE5LWI1MDgtMzAyY2UxYmM5OWMw
LzEvd2NJUHZFajZXYWZZM3FWNUNQTlFvYmwwV2Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHq3zgD1Q
iB1mImE3z+HAGzEYWQ+T5eKufxQPwylg8QHM7Vfl5YTxZNIFQTMFd235ycqsviWs
kwT18XNJHBZDNUM9dWr1C9KZrX5yZ2kELKrnEwHYUzcOfdgKITfz0u01vypVFFOk
7TuK/kXdp6tbiAmsczyyGJFsmOGq14dyqMS2QI8HuDYoerDMg4eaVKm6qr/smwBb
qMjcDtitW/eOZYvJ8jTrnBsJkURhcNVBJdB8NqSX3R0/7RTatyiX6Zn+BNdXF6Ox
PTo8oaWoJnssOBGvkU5qw+MCHFwX8/y77PUUgn6Pgmt4ilz3lS2+w2Cg0S3UeFvv
cBVT71aPVF99IQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:34:00 2025 by rpki-client