Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.mft
File: wYXXJDrphs3khBTmrYHyIpwKV9g.mft (raw, json)
Hash identifier: tdP2C9vbFgrU0caaoCx/gdaaIRfyFcDsommZwGTQtQQ=
Subject key identifier: 68:13:A8:D1:06:8E:4F:30:BD:0C:90:34:1A:EF:02:90:7E:AD:9F:BE
Authority key identifier: C1:85:D7:24:3A:E9:86:CD:E4:84:14:E6:AD:81:F2:22:9C:0A:57:D8
Certificate issuer: /CN=c185d7243ae986cde48414e6ad81f2229c0a57d8
Certificate serial: 0197B6A1359155F63A361AD9D44E01773E92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wYXXJDrphs3khBTmrYHyIpwKV9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.mft
Manifest number: 150B
Signing time: Sat 28 Jun 2025 13:01:47 +0000
Manifest this update: Sat 28 Jun 2025 13:01:47 +0000
Manifest next update: Sun 29 Jun 2025 13:01:47 +0000
Files and hashes: 1: W8cSUwyXIXnz6M1NsyKlwsJXzJ4.roa (hash: rZPkwf4eFRkmaVkGU+tJg15LkBGz0xTeLhl3l0qmLag=)
2: wYXXJDrphs3khBTmrYHyIpwKV9g.crl (hash: AY+hb0N6qxSI6HY/PK67uKEUTH2yghHAttAbuclObAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/wYXXJDrphs3khBTmrYHyIpwKV9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:35:91:55:f6:3a:36:1a:d9:d4:4e:01:77:3e:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c185d7243ae986cde48414e6ad81f2229c0a57d8
Validity
Not Before: Jun 28 13:01:47 2025 GMT
Not After : Jun 29 13:01:47 2025 GMT
Subject: CN=6813a8d1068e4f30bd0c90341aef02907ead9fbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c2:b1:76:ad:af:51:25:db:08:f7:de:f3:29:
ec:83:9b:9e:e9:bf:32:7c:0f:97:87:1d:60:3f:a3:
77:bf:27:19:79:aa:3f:d1:6a:1d:00:c0:05:21:1d:
70:c6:e7:39:9e:ca:3c:f4:8f:71:0e:fe:2e:57:b6:
35:35:33:60:05:af:cc:a0:3c:a7:c8:02:bd:d7:cc:
a3:fd:09:54:40:2e:70:3e:48:40:00:fb:70:1f:b6:
7c:96:f6:e6:27:4a:4a:98:a4:b7:b9:9b:07:f1:a3:
09:bf:c7:37:6d:9b:00:7f:8a:57:20:6c:20:22:73:
68:83:8e:7c:4f:4e:4c:0b:29:90:eb:67:5e:84:57:
c0:01:26:79:72:e0:6f:b1:67:13:3a:31:89:f1:2a:
d9:36:87:95:64:cb:7c:89:d6:de:9d:63:31:1e:09:
d0:28:de:a3:8f:b6:5d:9b:04:b8:48:17:5a:5a:bd:
80:98:ac:7f:a1:ed:fa:09:e7:b2:66:89:f1:43:a8:
97:ed:70:21:f8:ad:8b:95:81:95:ed:06:8d:8f:7d:
2b:1f:ed:67:cb:ff:9e:8f:77:0f:79:1a:7e:7b:1c:
39:25:ac:79:01:e2:94:17:9f:4e:38:67:dc:4e:f1:
dc:f1:6c:f8:d4:9a:fe:5b:e4:38:46:65:62:a5:dc:
8e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:13:A8:D1:06:8E:4F:30:BD:0C:90:34:1A:EF:02:90:7E:AD:9F:BE
X509v3 Authority Key Identifier:
keyid:C1:85:D7:24:3A:E9:86:CD:E4:84:14:E6:AD:81:F2:22:9C:0A:57:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wYXXJDrphs3khBTmrYHyIpwKV9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:58:71:de:98:54:65:0a:c0:0a:7d:74:5a:93:0d:29:64:95:
50:cf:4d:c5:ac:73:d3:3a:74:26:13:30:d4:29:30:55:e1:f3:
af:d7:f2:7c:82:f4:16:28:2e:45:66:db:7d:7f:76:8e:55:d3:
b9:d0:f8:de:49:f8:c6:06:08:25:2c:3a:dd:7f:ca:13:38:37:
5c:1b:f8:76:73:63:65:29:79:73:f0:ae:21:c2:58:15:ef:36:
f8:1e:e3:bc:14:a0:c9:cb:9b:9a:93:1e:59:6c:67:da:10:71:
92:cd:71:3c:67:ce:a5:45:d8:b6:38:76:88:96:b9:d1:22:6d:
da:11:4c:63:15:82:ed:6e:c2:08:99:94:05:03:b4:4e:f1:50:
b6:e1:60:5a:f9:b4:13:b2:60:70:83:a0:32:47:cb:b0:58:da:
44:0f:c4:93:50:be:bd:79:25:56:8c:ba:c2:94:63:4b:20:74:
a7:8d:f5:97:1d:01:82:e2:4b:4c:e1:57:e2:9e:a0:d8:25:dc:
bf:b4:38:b9:ba:c5:f6:59:77:bd:97:c9:91:60:39:c9:9c:20:
1b:0e:5e:04:31:0c:ca:8c:7d:d2:88:89:ac:47:35:3b:35:50:
1d:c6:35:55:9e:3c:66:09:93:68:1c:fc:90:6b:e7:4d:0a:fc:
ff:95:0a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:58:05 2025 by rpki-client