Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.mft
File: wzCs3wQbXcx-XsbPj_i9BkjoZww.mft (raw, json)
Hash identifier: NG5Ru5DLC4MD5yr2XptK35Sk+VIMVF9bvB/l3MtcFnI=
Subject key identifier: 33:43:CD:73:2A:70:72:1E:EB:1F:1C:48:EF:CA:18:F2:DE:13:89:7B
Authority key identifier: C3:30:AC:DF:04:1B:5D:CC:7E:5E:C6:CF:8F:F8:BD:06:48:E8:67:0C
Certificate issuer: /CN=c330acdf041b5dcc7e5ec6cf8ff8bd0648e8670c
Certificate serial: 0197B9A1A379156EB4EDECD46E4815DB6530
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wzCs3wQbXcx-XsbPj_i9BkjoZww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.mft
Manifest number: 124F
Signing time: Sun 29 Jun 2025 03:01:07 +0000
Manifest this update: Sun 29 Jun 2025 03:01:07 +0000
Manifest next update: Mon 30 Jun 2025 03:01:07 +0000
Files and hashes: 1: NfY8zpyx6EDpP6DxTuquvNoK9sY.roa (hash: mmbOZfwYelbaWl9riAjIdhT8MqPp3t5vAxerApfLsl0=)
2: wzCs3wQbXcx-XsbPj_i9BkjoZww.crl (hash: /A4jABhGFuZwh/87pZc4ESyWtBEzgsUZxcilICZjW/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.mft
rsync://rpki.ripe.net/repository/DEFAULT/wzCs3wQbXcx-XsbPj_i9BkjoZww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:a3:79:15:6e:b4:ed:ec:d4:6e:48:15:db:65:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c330acdf041b5dcc7e5ec6cf8ff8bd0648e8670c
Validity
Not Before: Jun 29 03:01:07 2025 GMT
Not After : Jun 30 03:01:07 2025 GMT
Subject: CN=3343cd732a70721eeb1f1c48efca18f2de13897b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a0:bf:ae:3f:a0:18:60:3f:35:c9:e6:77:45:
27:9a:13:2a:08:18:5f:54:92:17:c1:8a:72:fb:e0:
cb:2e:85:bb:63:f7:c3:23:d8:90:31:5a:18:f6:50:
9a:65:1d:74:dc:31:76:c3:f3:64:f2:09:7e:c4:f2:
6e:2c:21:32:68:30:e3:13:7c:09:bc:54:98:5a:ea:
14:40:18:69:b1:fb:d9:07:22:8e:71:2f:6c:ea:b4:
0a:08:3d:6c:e8:8a:20:17:e8:5a:ab:39:56:2f:31:
c0:67:aa:7e:2e:ed:09:e5:13:78:ac:9a:f7:67:f2:
a0:bd:6a:84:9a:64:96:2b:7d:5b:59:52:6f:46:0a:
be:1c:87:dc:4b:97:04:f7:bc:fa:75:80:41:f8:24:
cf:a1:5c:e9:ec:c7:29:6d:55:55:b2:dc:bf:db:48:
5d:2a:d3:78:be:df:a5:59:61:1b:58:5d:54:a1:99:
4b:20:47:29:1d:2b:a5:16:4c:80:24:30:73:7a:29:
a0:e4:e0:27:92:fc:98:34:cf:c3:b4:2a:5a:c4:df:
e5:79:59:b3:84:dc:0a:70:fb:79:24:f6:cc:0b:33:
7b:98:98:bd:d3:8c:b2:2d:51:0e:23:19:ca:29:84:
00:a6:e9:7f:5a:d6:94:69:70:0d:a8:d5:c5:ae:36:
ca:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:43:CD:73:2A:70:72:1E:EB:1F:1C:48:EF:CA:18:F2:DE:13:89:7B
X509v3 Authority Key Identifier:
keyid:C3:30:AC:DF:04:1B:5D:CC:7E:5E:C6:CF:8F:F8:BD:06:48:E8:67:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzCs3wQbXcx-XsbPj_i9BkjoZww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:23:cb:87:3a:31:10:04:72:6c:83:03:42:aa:f3:92:ed:8a:
44:65:94:a9:ec:94:c3:6f:d6:4b:0a:0d:9f:fe:b8:d4:ae:ae:
f5:98:8d:52:bb:28:b1:69:f5:2d:a5:ef:e5:b4:2d:5e:95:61:
dc:f1:17:92:77:3c:7d:27:00:67:73:6c:93:66:1d:53:99:bb:
f7:e4:4d:fa:02:bb:74:c2:b2:4d:30:e1:7a:33:4e:a6:dc:af:
dc:5d:d5:a1:25:c6:9b:c8:46:78:63:cc:51:99:4b:b2:fc:17:
78:ec:8f:3c:6b:e8:6f:d1:a8:64:d9:40:70:04:c7:fa:31:2c:
82:70:8f:bf:30:1b:96:d4:10:59:bc:f0:75:8e:5d:81:a2:74:
4a:91:b6:cc:d1:ec:83:dd:71:fd:36:1c:5f:2c:56:95:43:01:
29:7f:eb:30:72:52:d7:8d:46:4d:74:ad:0e:6f:de:43:75:df:
af:a0:8a:4d:6a:1c:43:a2:a0:fc:99:98:39:df:80:29:bc:db:
1f:1a:69:28:22:cb:d2:30:9a:2b:6a:9b:48:10:72:24:28:93:
5d:42:87:56:ba:01:af:56:2a:7b:82:87:60:26:0a:32:47:16:
e1:c7:cf:b1:40:3b:a1:8a:19:5d:be:85:a2:fb:28:aa:8c:3c:
eb:ad:80:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:21:48 2025 by rpki-client