
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/aaed6b-1434-47c6-a74d-1df1eccddc87/1/wC4yPxvhY8TX-LiKrY2q--AQbW8.mft
File: wC4yPxvhY8TX-LiKrY2q--AQbW8.mft (raw, json)
Hash identifier: nkY/tZHzCu5mKPkAYeVLdHroyLyU5cIHy+9lp8fW3Xo=
Subject key identifier: C9:76:8F:27:6D:C6:E9:00:B7:AE:C6:2A:11:F1:CD:CA:66:C2:F7:39
Authority key identifier: C0:2E:32:3F:1B:E1:63:C4:D7:F8:B8:8A:AD:8D:AA:FB:E0:10:6D:6F
Certificate issuer: /CN=c02e323f1be163c4d7f8b88aad8daafbe0106d6f
Certificate serial: 0197B6A1C401CC3D68697BD2DCDA4BE87B16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wC4yPxvhY8TX-LiKrY2q--AQbW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/aaed6b-1434-47c6-a74d-1df1eccddc87/1/wC4yPxvhY8TX-LiKrY2q--AQbW8.mft
Manifest number: D3
Signing time: Sat 28 Jun 2025 13:02:24 +0000
Manifest this update: Sat 28 Jun 2025 13:02:24 +0000
Manifest next update: Sun 29 Jun 2025 13:02:24 +0000
Files and hashes: 1: wC4yPxvhY8TX-LiKrY2q--AQbW8.crl (hash: 5e6HAe45UM/0bgfTxF1xyowkolWWjwzi13EZjIVAqi8=)
2: z4hyHniAgsjhip0WWSLXoanCOdQ.roa (hash: M3AlMbZsNGFOvYnoOV0xvC8E+XBvcvrqkI0jCnJgG2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/aaed6b-1434-47c6-a74d-1df1eccddc87/1/wC4yPxvhY8TX-LiKrY2q--AQbW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/aaed6b-1434-47c6-a74d-1df1eccddc87/1/wC4yPxvhY8TX-LiKrY2q--AQbW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wC4yPxvhY8TX-LiKrY2q--AQbW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:c4:01:cc:3d:68:69:7b:d2:dc:da:4b:e8:7b:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c02e323f1be163c4d7f8b88aad8daafbe0106d6f
Validity
Not Before: Jun 28 13:02:24 2025 GMT
Not After : Jun 29 13:02:24 2025 GMT
Subject: CN=c9768f276dc6e900b7aec62a11f1cdca66c2f739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:15:6f:8b:b2:5a:8c:b6:0c:c9:d4:f0:68:49:
d8:4f:05:8e:88:8d:a1:34:dd:cb:56:53:29:97:90:
29:b2:fe:b6:71:1e:f2:54:48:e0:b1:f0:d7:60:82:
cd:9a:9c:f1:ff:bb:74:75:47:8c:d3:e4:1d:b4:f9:
09:52:2d:27:da:ed:11:69:73:1e:eb:74:65:fb:fb:
30:38:e5:53:fb:ff:cf:00:36:1c:e3:da:ff:3e:1e:
2c:7f:28:77:d7:cb:72:0c:a8:68:70:99:e0:be:6c:
93:08:57:62:ee:24:ec:4c:91:7c:eb:28:7e:a4:02:
63:de:90:cc:f2:66:c6:4a:87:6a:ef:13:3a:e1:22:
08:43:cf:7a:6e:a2:c0:6b:02:83:06:a2:fd:8d:64:
a1:67:85:f1:9d:db:00:86:1b:c3:09:ad:03:9b:9d:
7c:c6:bb:c7:16:c6:4d:d3:c7:0d:3f:c0:85:a1:90:
0e:54:f0:fa:e6:fa:28:d7:55:93:e2:ae:de:72:c1:
c5:0b:33:33:15:23:cc:34:3c:14:1e:48:f1:fa:2b:
33:13:92:f7:54:3b:88:98:74:51:a6:e6:7c:c1:3f:
48:d5:dc:39:c4:6d:02:4b:56:58:b8:a3:5e:4e:ee:
05:fd:66:7f:b6:41:dc:87:6b:0a:ae:53:30:55:01:
79:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:76:8F:27:6D:C6:E9:00:B7:AE:C6:2A:11:F1:CD:CA:66:C2:F7:39
X509v3 Authority Key Identifier:
keyid:C0:2E:32:3F:1B:E1:63:C4:D7:F8:B8:8A:AD:8D:AA:FB:E0:10:6D:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wC4yPxvhY8TX-LiKrY2q--AQbW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/aaed6b-1434-47c6-a74d-1df1eccddc87/1/wC4yPxvhY8TX-LiKrY2q--AQbW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/aaed6b-1434-47c6-a74d-1df1eccddc87/1/wC4yPxvhY8TX-LiKrY2q--AQbW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:de:4c:9d:d4:6a:80:71:94:fe:01:c5:69:06:0c:c6:63:fd:
4e:41:3f:26:20:49:0b:9e:ea:98:3d:58:e0:a8:e0:53:73:a8:
da:5f:49:f7:bd:56:8e:db:32:54:a3:3e:4a:1f:bb:57:45:38:
f8:fc:ab:0e:6c:36:a1:ca:f8:8d:d1:71:b7:17:b5:6f:84:c7:
1d:da:3f:b9:af:0e:4f:f7:16:32:8e:10:8d:f8:0d:dd:85:4f:
f9:79:75:01:a7:d5:a3:b2:7f:28:eb:d7:f6:9a:67:e8:ac:38:
ab:cb:70:d3:af:f0:04:77:74:d4:f9:a5:11:1c:b7:18:90:eb:
ae:31:00:af:f7:80:c3:b0:27:7a:6e:73:7d:db:33:c5:10:3f:
08:a5:50:a1:5f:38:7f:a1:b8:60:c8:9a:ee:9c:b1:b5:56:50:
c1:64:bf:de:4b:7d:34:66:f3:06:f8:8c:74:6b:ff:ce:a9:49:
6e:f3:a4:54:4a:06:19:73:5e:7d:a5:aa:f9:ad:8a:8f:ef:dd:
fc:24:00:12:cd:96:7e:ba:cf:ea:e5:33:45:7c:67:6a:f6:0e:
42:c0:4f:c3:14:cc:39:79:4d:4d:af:3b:e6:e9:11:10:74:e8:
e0:14:ee:2a:3a:00:89:fb:ae:6a:5c:7f:05:2c:a0:f4:a3:1b:
d1:ff:99:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:48:48 2025 by rpki-client