
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.mft
File: wlEKilJdybHsCxVg0JCmQmjULsQ.mft (raw, json)
Hash identifier: jFo21zawmBvtHX8lSzyZa/6nSKFDbMo/uEwVpOl0fCs=
Subject key identifier: 21:4D:68:6E:FB:27:85:FD:AB:9E:99:C9:92:9B:9E:DF:2B:C9:97:E8
Authority key identifier: C2:51:0A:8A:52:5D:C9:B1:EC:0B:15:60:D0:90:A6:42:68:D4:2E:C4
Certificate issuer: /CN=c2510a8a525dc9b1ec0b1560d090a64268d42ec4
Certificate serial: 0197C56F3AB6129CAEBA82F714DDC4214D1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wlEKilJdybHsCxVg0JCmQmjULsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.mft
Manifest number: 1567
Signing time: Tue 01 Jul 2025 10:01:30 +0000
Manifest this update: Tue 01 Jul 2025 10:01:30 +0000
Manifest next update: Wed 02 Jul 2025 10:01:30 +0000
Files and hashes: 1: FaPK4dABXX1JUG-DgodpiiYFyXk.roa (hash: 8EnGZIA4ScfpCaGufhHcnmIDRY1lMTTgXZqEJ9E7v2g=)
2: bYeYVYEdCXCzK3hGWezO0ZNHveg.roa (hash: UaiyZMeOYv/TRvUCkbZ9PcMP5ygVyQhx0p+DkQtZkYA=)
3: wlEKilJdybHsCxVg0JCmQmjULsQ.crl (hash: orF46ixClT1BWC8RypjWJcWpond9LCL9+PEZFCz3JsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wlEKilJdybHsCxVg0JCmQmjULsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:6f:3a:b6:12:9c:ae:ba:82:f7:14:dd:c4:21:4d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2510a8a525dc9b1ec0b1560d090a64268d42ec4
Validity
Not Before: Jul 1 10:01:30 2025 GMT
Not After : Jul 2 10:01:30 2025 GMT
Subject: CN=214d686efb2785fdab9e99c9929b9edf2bc997e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:95:cf:75:fd:07:3c:45:7e:11:6e:a2:5a:a2:
78:db:5b:4f:fa:e9:2a:60:0d:f4:f4:8a:74:6c:33:
c7:2f:65:b7:76:35:43:b5:ba:cd:82:f0:3b:16:b5:
72:dd:7e:d6:d9:f4:04:a0:3c:10:58:34:5f:34:ed:
1c:28:bc:1e:11:2c:77:c8:7b:78:b5:5d:64:bf:ce:
35:89:5e:b9:ce:e8:42:be:95:42:ce:6a:07:41:14:
d9:0a:89:b0:c8:3f:45:93:db:7b:cc:02:e2:ce:98:
d1:ff:55:8f:cb:86:45:87:ef:3c:96:30:57:f1:59:
8c:56:f9:1b:c3:14:0a:68:0b:55:b6:a1:a6:f1:eb:
0f:f1:c2:c0:d6:1f:62:69:f5:b4:38:a3:8d:dc:bf:
e4:29:74:9b:c2:dc:a7:e5:85:2d:e8:26:2b:ea:05:
ec:f1:fd:1c:b5:f5:61:54:78:dd:a9:a5:7a:be:5a:
80:bb:04:ff:98:b2:9f:48:53:f8:b3:d5:bc:7b:94:
bb:69:14:50:4a:12:38:42:ff:b8:6e:fc:d0:f2:aa:
16:c8:9a:a3:f5:4f:7c:a8:64:55:85:01:b0:2e:4c:
22:b0:bc:66:a4:06:4b:da:0f:ce:e3:05:50:ea:bc:
87:3a:e8:fe:e9:61:1c:f6:24:a8:b5:b3:78:53:87:
ea:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:4D:68:6E:FB:27:85:FD:AB:9E:99:C9:92:9B:9E:DF:2B:C9:97:E8
X509v3 Authority Key Identifier:
keyid:C2:51:0A:8A:52:5D:C9:B1:EC:0B:15:60:D0:90:A6:42:68:D4:2E:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wlEKilJdybHsCxVg0JCmQmjULsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:9c:61:2c:6e:e3:09:4a:f5:80:16:8b:16:60:dc:b9:5e:4b:
2c:fd:cf:2b:8e:a0:97:20:b8:8e:41:73:2f:79:dc:e2:eb:5f:
bf:e5:6d:04:80:50:98:29:c4:1f:93:7a:f6:87:a6:bc:5d:b6:
fe:b9:94:b2:cc:70:35:76:09:df:b4:9b:77:23:8a:1c:d0:ec:
a8:c3:53:a2:f6:8b:6b:af:6d:b5:c7:10:e9:60:1c:7b:29:11:
94:64:70:53:2f:56:73:78:18:f2:ef:34:b5:e2:14:e3:e3:bd:
9a:47:52:03:4b:16:a4:04:2a:7f:37:27:e3:92:3d:0f:8f:b3:
0f:39:15:17:50:f3:e3:77:4f:2d:a4:df:13:d7:4c:45:a4:69:
41:69:da:68:0d:14:43:9c:fa:4f:8d:05:35:d8:6e:27:6f:ab:
d6:00:d1:7b:cb:00:94:88:09:c3:b2:eb:78:e5:6c:fd:fa:cb:
9c:87:07:97:b3:08:58:0c:98:ca:27:ba:e6:a5:ae:3e:0b:54:
8e:9b:57:ae:93:75:2e:1c:a0:a1:b2:c9:06:f3:28:56:cf:f3:
d7:7c:ec:06:d1:1b:44:ee:f4:db:28:83:25:97:36:47:79:5e:
55:80:b0:f2:cd:09:44:ab:15:7d:2f:6c:6e:fd:cb:c9:5b:05:
3e:8f:9d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 18:37:31 2025 by rpki-client