Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.mft
File: WF2Wj1vhzmceINWDHBcAAfNy090.mft (raw, json)
Hash identifier: K9Kmj62aOuTDt9XLsRQpW2XO+88HBKHG7QiqNleOy8E=
Subject key identifier: 25:BF:49:10:85:9F:51:4A:5C:3E:42:47:34:C6:64:10:15:22:51:FA
Authority key identifier: 58:5D:96:8F:5B:E1:CE:67:1E:20:D5:83:1C:17:00:01:F3:72:D3:DD
Certificate issuer: /CN=585d968f5be1ce671e20d5831c170001f372d3dd
Certificate serial: 0197B77C4A7CB3E3A244788E20960648FDAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WF2Wj1vhzmceINWDHBcAAfNy090.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.mft
Manifest number: 1564
Signing time: Sat 28 Jun 2025 17:01:05 +0000
Manifest this update: Sat 28 Jun 2025 17:01:05 +0000
Manifest next update: Sun 29 Jun 2025 17:01:05 +0000
Files and hashes: 1: WF2Wj1vhzmceINWDHBcAAfNy090.crl (hash: UKwixic78TuBNPJkft5jW4E7qeXSF3Cd2O9lMdt2Qqo=)
2: kMkaJavkPA06Y44CWRSY630HVLw.roa (hash: T85LjnoIHLJZIbJyI8O+ldJqpb1UlV1mAtOahfZHzpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.mft
rsync://rpki.ripe.net/repository/DEFAULT/WF2Wj1vhzmceINWDHBcAAfNy090.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:4a:7c:b3:e3:a2:44:78:8e:20:96:06:48:fd:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=585d968f5be1ce671e20d5831c170001f372d3dd
Validity
Not Before: Jun 28 17:01:05 2025 GMT
Not After : Jun 29 17:01:05 2025 GMT
Subject: CN=25bf4910859f514a5c3e424734c66410152251fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ae:b0:35:ff:21:69:e0:f1:9a:2f:c4:8d:cf:
03:c8:df:e3:8f:2d:f2:e8:97:a6:f3:0e:81:c9:ef:
fb:4e:79:87:1a:21:62:03:a8:a3:12:f4:52:6f:de:
16:d9:70:b8:34:00:04:11:7d:d6:66:6d:59:e9:4d:
ad:a8:c2:89:f3:0a:9b:1e:c0:4f:30:66:d9:de:6f:
8a:1b:d2:7e:49:07:de:01:f1:15:b3:30:2f:b3:cf:
f5:e0:0f:5b:7b:ce:e3:18:7b:99:77:15:ad:b1:47:
74:3d:b8:1e:41:98:67:a6:80:a0:29:fc:83:74:d8:
51:40:9d:c5:98:94:dd:ca:3b:79:32:81:68:3a:7c:
d5:9a:68:f0:20:f6:79:26:ac:bb:6c:af:f9:53:59:
25:8e:e9:5d:56:ab:3b:86:ce:79:c8:e2:6f:91:3c:
18:17:a6:63:ba:01:27:be:45:91:2b:ed:d1:d7:a4:
90:81:f9:ab:1a:50:ac:b0:03:22:68:47:87:4b:97:
b0:f7:66:9a:79:6e:96:a9:b5:e6:e7:da:4b:4c:c9:
f0:30:0d:08:aa:7f:e1:32:77:b3:e1:73:9b:4b:6d:
59:28:0f:a0:93:1b:af:cb:65:b5:b9:bd:28:87:64:
dd:20:82:c7:70:3c:4d:ad:4d:71:ae:f9:c6:43:72:
08:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:BF:49:10:85:9F:51:4A:5C:3E:42:47:34:C6:64:10:15:22:51:FA
X509v3 Authority Key Identifier:
keyid:58:5D:96:8F:5B:E1:CE:67:1E:20:D5:83:1C:17:00:01:F3:72:D3:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WF2Wj1vhzmceINWDHBcAAfNy090.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:c5:d3:71:d0:b9:f1:9e:36:a4:3d:c1:02:29:b6:ae:e2:6a:
06:57:ac:07:52:93:f8:3e:f5:54:58:54:8c:dc:1e:d9:7d:be:
df:12:d3:8a:51:93:73:b3:2f:e5:39:ca:97:02:59:f7:95:1f:
ff:5f:16:e6:53:a7:b3:b7:ba:66:7d:0a:87:c2:26:9c:41:59:
3f:74:a2:d8:72:17:b0:14:86:2d:12:7d:19:77:48:b4:87:0a:
64:1c:bd:fb:16:ee:1c:55:d1:7a:25:85:67:c2:8f:31:e5:de:
51:68:0a:d6:29:f0:3d:d3:85:b9:31:77:6e:1d:eb:9d:7d:20:
ea:ab:cb:ef:26:fa:d7:93:b4:22:d5:4c:e6:9e:c1:42:15:45:
83:86:02:32:1c:dc:37:58:4f:1d:7a:0e:56:71:74:04:a4:e6:
95:b7:5c:c7:cf:31:37:c4:f7:21:08:03:82:40:26:90:4d:82:
b2:ae:73:48:5b:dc:6b:32:bc:74:e2:38:7a:c1:e3:82:6d:a0:
cd:40:3e:58:84:5c:4f:13:ef:32:e7:1c:cb:8d:43:cf:4d:90:
88:9f:c0:92:32:d4:be:f5:aa:7a:b7:11:7c:50:d2:84:bf:8a:
2b:72:d3:d1:9d:a4:1f:6a:2c:7f:61:b5:ca:ea:eb:e9:b3:0d:
ff:41:35:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:37:03 2025 by rpki-client