Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.mft
File: wg8AjBzMpi5vw1bWNCBVpifcbPI.mft (raw, json)
Hash identifier: dgoI0PaM95d5r5TdHPzOnavwgn9DuaQ3/Id3o3iwt8A=
Subject key identifier: 98:C6:8F:C8:E7:3E:67:85:CE:D7:E6:25:6B:64:DD:3F:32:52:8A:67
Authority key identifier: C2:0F:00:8C:1C:CC:A6:2E:6F:C3:56:D6:34:20:55:A6:27:DC:6C:F2
Certificate issuer: /CN=c20f008c1ccca62e6fc356d6342055a627dc6cf2
Certificate serial: 0197B820FB6AFA3A16979109D15428FDD341
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wg8AjBzMpi5vw1bWNCBVpifcbPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.mft
Manifest number: 03A7
Signing time: Sat 28 Jun 2025 20:00:58 +0000
Manifest this update: Sat 28 Jun 2025 20:00:58 +0000
Manifest next update: Sun 29 Jun 2025 20:00:58 +0000
Files and hashes: 1: CGLcLVB_nqLd9iNoes6GRQjCoVY.roa (hash: PUaaifTKcP0kb/F/TYWEggzMP0VnUab0IhVecDySCrE=)
2: wg8AjBzMpi5vw1bWNCBVpifcbPI.crl (hash: FFLEY9+GQ+8xRDH6b6/cEmr8C6PyVvvQ14kj0okvLFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wg8AjBzMpi5vw1bWNCBVpifcbPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:fb:6a:fa:3a:16:97:91:09:d1:54:28:fd:d3:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c20f008c1ccca62e6fc356d6342055a627dc6cf2
Validity
Not Before: Jun 28 20:00:58 2025 GMT
Not After : Jun 29 20:00:58 2025 GMT
Subject: CN=98c68fc8e73e6785ced7e6256b64dd3f32528a67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c4:b3:dd:13:e5:d8:aa:33:29:1b:6a:70:e1:
4a:5c:cf:4b:a9:08:fa:b0:6e:76:8a:2e:2d:ea:40:
b4:ab:15:8e:7e:46:84:b2:6b:62:0f:6e:01:05:b9:
6e:6c:ec:aa:f1:81:3b:60:1c:9b:e8:0b:06:dc:75:
5c:9c:32:b4:8a:1d:d3:17:20:80:0e:d1:94:37:e2:
7c:a6:4e:1e:e7:bb:b8:67:6c:f2:61:15:0f:ae:62:
bb:20:04:c3:4e:4f:fd:07:8c:83:99:00:12:11:53:
55:00:6e:54:2c:dc:c9:1c:32:fa:37:f9:70:17:ac:
a1:27:17:8b:0d:70:e3:4c:71:fd:7c:94:b5:b8:40:
e6:af:5b:19:33:70:ac:a3:b0:fd:d2:64:4d:1d:61:
b3:4b:5a:12:0b:47:9a:01:47:d6:05:56:53:99:50:
48:af:a5:b5:13:29:6d:d2:cf:50:ad:e0:c5:41:c7:
26:0c:58:eb:16:72:e1:c0:67:aa:91:2a:6e:00:d5:
2c:70:d8:f2:74:a3:13:65:7b:af:65:14:78:d8:7c:
04:f8:a0:e5:8b:55:14:76:07:a3:9c:eb:03:cd:ae:
ca:5d:6b:1a:5d:64:2d:b7:a5:51:6d:b5:94:55:7e:
7e:ab:47:6d:8e:6f:5f:5b:9c:6f:9e:85:b6:6e:80:
a4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:C6:8F:C8:E7:3E:67:85:CE:D7:E6:25:6B:64:DD:3F:32:52:8A:67
X509v3 Authority Key Identifier:
keyid:C2:0F:00:8C:1C:CC:A6:2E:6F:C3:56:D6:34:20:55:A6:27:DC:6C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wg8AjBzMpi5vw1bWNCBVpifcbPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:cb:7b:f0:38:60:3a:5c:15:ee:72:8b:19:22:1e:21:84:53:
f1:c1:be:06:0a:58:79:c7:71:20:2d:c2:eb:b0:7b:7b:35:bc:
5f:80:08:92:18:26:7a:a7:07:c3:28:5e:b0:e6:66:85:80:ab:
15:e7:cd:7b:a4:e2:77:ff:1c:02:e8:9b:af:96:59:76:20:03:
50:2f:42:bc:81:59:07:fb:1c:70:59:9b:cf:90:6f:4f:e6:d7:
93:65:5e:24:f3:3c:1c:ba:7e:3e:ff:86:68:99:e3:33:e6:d8:
84:f5:ed:96:4b:3c:20:7a:b4:b7:b4:4c:38:68:c4:05:36:e1:
35:f7:a9:cb:3b:80:c2:e1:54:9a:78:62:8e:6e:82:32:32:7a:
7d:dd:74:bf:83:36:f3:f0:3c:7b:1e:82:da:e0:26:89:49:11:
0b:f3:37:18:8b:7c:05:7b:b6:28:95:e6:fb:6b:b5:db:df:7a:
91:0d:aa:91:0a:be:90:74:3f:ec:b2:4c:a9:dd:be:8a:01:fa:
de:57:29:11:77:5e:bb:52:98:68:d9:e6:c1:6c:e7:d5:5a:fd:
26:53:de:d6:81:ca:06:3b:39:0f:91:4e:47:79:49:ac:7c:63:
16:6d:45:77:91:af:5d:e0:c8:dc:b1:8b:06:53:df:43:df:e8:
88:3e:1d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:18:46 2025 by rpki-client