Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/ef046d-f959-4798-96b8-cfe1647ea865/1/WCroA98isFXHTl_o8R2UQIlWDtI.mft
File: WCroA98isFXHTl_o8R2UQIlWDtI.mft (raw, json)
Hash identifier: khuaU4TylTwpZrGzeI385FI1fSTLrCfuEAj31234ZUE=
Subject key identifier: B6:02:B4:C5:77:8D:40:17:64:90:7C:AC:26:01:D8:E6:38:B6:4E:F7
Authority key identifier: 58:2A:E8:03:DF:22:B0:55:C7:4E:5F:E8:F1:1D:94:40:89:56:0E:D2
Certificate issuer: /CN=582ae803df22b055c74e5fe8f11d944089560ed2
Certificate serial: 0197B74560142E396F3E99144AF41B9565A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WCroA98isFXHTl_o8R2UQIlWDtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/ef046d-f959-4798-96b8-cfe1647ea865/1/WCroA98isFXHTl_o8R2UQIlWDtI.mft
Manifest number: 44
Signing time: Sat 28 Jun 2025 16:01:06 +0000
Manifest this update: Sat 28 Jun 2025 16:01:06 +0000
Manifest next update: Sun 29 Jun 2025 16:01:06 +0000
Files and hashes: 1: 5Vle3KGfqnVJEdmvBasCstldoz8.roa (hash: Rl95m9yb5FSNGdnRgF3OQpiAhZ5L8MWgdG8dVfAGWKo=)
2: WCroA98isFXHTl_o8R2UQIlWDtI.crl (hash: OsenEwf9QJTydshW2wnkuz6lBb9isorxV7yfQAWp/cA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/ef046d-f959-4798-96b8-cfe1647ea865/1/WCroA98isFXHTl_o8R2UQIlWDtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/ef046d-f959-4798-96b8-cfe1647ea865/1/WCroA98isFXHTl_o8R2UQIlWDtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WCroA98isFXHTl_o8R2UQIlWDtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:60:14:2e:39:6f:3e:99:14:4a:f4:1b:95:65:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=582ae803df22b055c74e5fe8f11d944089560ed2
Validity
Not Before: Jun 28 16:01:06 2025 GMT
Not After : Jun 29 16:01:06 2025 GMT
Subject: CN=b602b4c5778d401764907cac2601d8e638b64ef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e4:09:d2:8f:e9:ec:4b:40:75:cb:5b:29:74:
8c:b8:19:92:f5:7b:9b:c9:cb:f4:d6:d7:68:af:d8:
f6:1a:53:0f:cc:27:52:fe:47:0e:cd:dd:57:e6:27:
a7:2c:b8:1b:ab:42:6a:1c:07:e0:7a:f0:4a:c3:eb:
88:14:2b:52:ba:d5:38:87:00:06:f3:2e:05:5f:3c:
8c:42:db:86:f3:00:81:28:7d:c1:94:2d:3c:81:8e:
e9:0a:37:7e:5e:55:8d:f1:59:18:7a:25:4a:eb:eb:
f1:d1:47:f5:b5:2f:04:0f:99:a5:8b:82:73:d7:02:
77:84:62:c5:66:8c:5f:c6:0e:5a:d3:7f:63:26:e2:
38:01:57:50:a0:f3:ab:80:47:f7:00:34:22:cb:56:
73:19:fa:a1:ba:f4:cc:dd:10:05:1b:bc:5d:b4:42:
a8:d6:8d:65:78:6d:c4:c7:1b:d8:79:70:1c:47:46:
5c:65:ff:a6:ea:61:5e:04:99:39:9b:99:d0:12:97:
12:94:c9:fb:bf:9d:8a:c4:cc:03:9e:d0:01:e0:15:
51:bb:5d:2f:63:fa:33:ae:2f:20:bd:e5:53:2c:fb:
87:44:0a:d1:b9:a6:69:4e:db:3e:92:f3:be:8e:3f:
8e:03:4e:44:27:9d:df:2f:3c:7d:71:af:a0:16:53:
30:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:02:B4:C5:77:8D:40:17:64:90:7C:AC:26:01:D8:E6:38:B6:4E:F7
X509v3 Authority Key Identifier:
keyid:58:2A:E8:03:DF:22:B0:55:C7:4E:5F:E8:F1:1D:94:40:89:56:0E:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WCroA98isFXHTl_o8R2UQIlWDtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ef046d-f959-4798-96b8-cfe1647ea865/1/WCroA98isFXHTl_o8R2UQIlWDtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ef046d-f959-4798-96b8-cfe1647ea865/1/WCroA98isFXHTl_o8R2UQIlWDtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:a2:27:bf:4c:e5:41:81:ef:1a:d7:24:f5:09:c9:fd:31:c4:
2f:c5:97:f4:52:cd:e9:9b:cc:da:52:ce:d5:12:9c:a6:48:68:
3a:0a:0a:1e:78:12:b7:62:ea:62:88:8f:f9:05:b8:a2:b8:0e:
8d:24:b4:f6:8b:6a:bf:57:a6:b3:9f:31:d7:ac:78:b7:ad:23:
ae:8a:ae:be:10:d3:1b:54:3e:98:bc:de:60:78:38:83:ac:d2:
c0:d3:c9:99:76:3e:f2:c2:40:ec:04:a3:5b:f0:41:e3:65:af:
ba:ec:f9:b3:66:1d:da:b2:23:9a:8d:37:c2:96:c5:5e:69:7e:
02:83:8b:42:0b:45:d2:cc:4a:08:18:b8:c1:e6:fd:e8:15:be:
1e:a8:60:b4:3c:ff:60:d0:ec:db:56:62:65:23:39:fb:9a:79:
b1:6c:df:4a:21:87:8e:1a:c5:84:81:0a:db:c0:0c:1e:b2:35:
ea:5a:dc:96:f4:b9:2f:4d:18:15:92:39:31:a1:89:af:df:eb:
7d:ae:3e:34:69:a4:f4:35:18:df:6a:9c:1b:cb:d9:fd:7c:83:
79:fa:26:d7:1d:91:31:8d:3b:44:ed:28:65:df:fa:7b:f1:e7:
72:c1:10:53:b7:d8:52:e1:29:c2:76:88:5a:4b:51:25:ff:f2:
0c:78:06:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:23:24 2025 by rpki-client