Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/e88f71-2382-4413-b562-197178ff18f2/1/wtJUnY0AZ6NyMjzHbY7gECt02DM.mft
File: wtJUnY0AZ6NyMjzHbY7gECt02DM.mft (raw, json)
Hash identifier: c8Omt7ycth++WoQVJhcIDsI6gRdg5I+TzL97xQFTY0o=
Subject key identifier: 2E:28:1F:28:1F:AD:12:81:C7:F5:41:04:E6:EF:0D:19:A6:E4:14:72
Authority key identifier: C2:D2:54:9D:8D:00:67:A3:72:32:3C:C7:6D:8E:E0:10:2B:74:D8:33
Certificate issuer: /CN=c2d2549d8d0067a372323cc76d8ee0102b74d833
Certificate serial: 0197C1924D482D5B299F0F3743B7D2286049
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtJUnY0AZ6NyMjzHbY7gECt02DM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/e88f71-2382-4413-b562-197178ff18f2/1/wtJUnY0AZ6NyMjzHbY7gECt02DM.mft
Manifest number: 15BC
Signing time: Mon 30 Jun 2025 16:01:19 +0000
Manifest this update: Mon 30 Jun 2025 16:01:19 +0000
Manifest next update: Tue 01 Jul 2025 16:01:19 +0000
Files and hashes: 1: 1XPduftMWiA3mhDReUc68s4JF-M.roa (hash: BCW8W7hox85l+EvIIJN43p7alSsxdX+eLTmQrODF5v4=)
2: wtJUnY0AZ6NyMjzHbY7gECt02DM.crl (hash: ECFQjrIzNjulztlunI+JtHKZcWS2C4f13rJEI8XCbG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/e88f71-2382-4413-b562-197178ff18f2/1/wtJUnY0AZ6NyMjzHbY7gECt02DM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/e88f71-2382-4413-b562-197178ff18f2/1/wtJUnY0AZ6NyMjzHbY7gECt02DM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wtJUnY0AZ6NyMjzHbY7gECt02DM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c1:92:4d:48:2d:5b:29:9f:0f:37:43:b7:d2:28:60:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d2549d8d0067a372323cc76d8ee0102b74d833
Validity
Not Before: Jun 30 16:01:19 2025 GMT
Not After : Jul 1 16:01:19 2025 GMT
Subject: CN=2e281f281fad1281c7f54104e6ef0d19a6e41472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:20:e4:dd:bc:fd:6b:cf:30:4e:4d:c8:9c:9c:
af:51:ef:fe:aa:71:9d:e2:62:8c:70:23:f0:77:c4:
ae:dc:19:33:70:8b:c7:28:76:0b:35:e6:48:fa:f4:
ee:a3:45:87:1e:ec:3b:02:b5:81:ad:e6:8d:18:82:
31:c3:28:0d:78:29:86:b9:c6:fa:c0:4b:84:7e:e1:
05:da:8b:18:3e:ff:a6:40:2e:6f:c2:05:59:48:7b:
bd:02:57:6c:ce:99:02:90:fb:1c:37:d7:5a:ec:55:
0e:f2:71:d5:7d:ed:43:26:ca:9a:b5:52:c7:b4:f8:
ad:c1:af:4c:99:96:be:2e:39:43:88:84:61:65:cc:
26:4b:5a:eb:53:7f:cf:d2:10:89:e1:d3:df:a5:fc:
84:a4:6f:b5:d9:90:37:28:49:89:71:dc:fd:a6:63:
05:47:ee:6a:77:46:62:e9:46:90:8f:7b:25:96:0d:
d3:9c:44:6a:33:0e:b3:44:b9:d0:fb:11:7b:df:62:
d1:a5:e6:2d:32:53:68:ec:f1:de:ae:40:3f:f8:11:
f5:e5:05:1a:f8:db:e5:35:01:74:5f:fe:13:66:d3:
cc:b8:85:ea:2a:ab:02:24:34:6a:2f:46:eb:d0:56:
e2:a8:ac:f0:f6:77:3f:d0:46:0d:d7:a3:11:9e:43:
43:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:28:1F:28:1F:AD:12:81:C7:F5:41:04:E6:EF:0D:19:A6:E4:14:72
X509v3 Authority Key Identifier:
keyid:C2:D2:54:9D:8D:00:67:A3:72:32:3C:C7:6D:8E:E0:10:2B:74:D8:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtJUnY0AZ6NyMjzHbY7gECt02DM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e88f71-2382-4413-b562-197178ff18f2/1/wtJUnY0AZ6NyMjzHbY7gECt02DM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e88f71-2382-4413-b562-197178ff18f2/1/wtJUnY0AZ6NyMjzHbY7gECt02DM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:90:e2:9a:3b:ba:0e:97:36:67:00:da:a7:2c:e6:b5:c2:da:
1e:be:d7:16:b9:5d:2e:3f:18:62:d5:2a:3b:c3:87:3b:63:f2:
45:51:38:c1:fb:41:91:b6:9e:c7:45:28:ef:03:02:74:a3:59:
e6:d6:55:df:0d:1b:72:06:38:87:2e:d4:53:79:c3:e6:27:d8:
ca:52:35:64:9d:ca:4e:b6:28:e9:04:15:ea:31:3b:e1:34:7a:
03:05:0c:14:f1:b3:08:67:23:35:2d:ea:03:25:dd:66:fb:32:
ea:21:3e:38:cd:b9:cf:89:e1:0f:21:b5:96:60:29:d9:37:b0:
a6:16:4d:52:8d:8e:cd:ed:9c:93:56:65:b3:c7:11:d8:31:87:
9f:c7:b7:77:84:40:72:25:f7:47:29:27:88:06:2f:1a:3a:50:
e5:63:d0:07:ef:e8:98:f4:b0:8a:c3:cb:2e:52:e1:9f:a8:4b:
b4:f8:1a:b4:c4:b1:11:76:36:b9:58:ef:26:e4:ab:fd:cd:67:
b6:87:c4:91:bb:5b:94:34:8d:dd:67:2c:6f:ba:3e:ce:3c:b4:
b1:67:f7:44:3d:57:fa:49:06:55:40:f7:2f:e6:c4:70:fd:91:
d2:4d:4b:5d:16:25:12:55:66:71:43:50:ba:41:8d:d1:23:57:
44:e9:a9:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 21:42:01 2025 by rpki-client