Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
File: wQTNffhMMZ0ZrzWxEE8XProsbb0.mft (raw, json)
Hash identifier: YNafDf/UD9lwsAVLllGJlawmWkgpOg+V4wdW4o+Dh4M=
Subject key identifier: BC:1E:88:AF:C6:4D:BE:6A:16:43:F1:C4:53:EC:01:DB:BF:DD:47:D9
Authority key identifier: C1:04:CD:7D:F8:4C:31:9D:19:AF:35:B1:10:4F:17:3E:BA:2C:6D:BD
Certificate issuer: /CN=c104cd7df84c319d19af35b1104f173eba2c6dbd
Certificate serial: 0197B70EB653940BAAD89C2F7A47687497BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQTNffhMMZ0ZrzWxEE8XProsbb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
Manifest number: 07DE
Signing time: Sat 28 Jun 2025 15:01:23 +0000
Manifest this update: Sat 28 Jun 2025 15:01:23 +0000
Manifest next update: Sun 29 Jun 2025 15:01:23 +0000
Files and hashes: 1: 1-XP7SSYynpJIZg4ibI0Wpm_d7y4.roa (hash: LOYh8aPG/hc+f2Wb/Cw6QofBs2xxLo7hf2Lj5w8CzgE=)
2: wQTNffhMMZ0ZrzWxEE8XProsbb0.crl (hash: HV6fzfAsZEsPthv4SXlhUny318i+zlQ9FWo6DiQwJgo=)
3: wtdVCL_vW5DHi-a_XtUsZ9JKKCw.roa (hash: JT8633z6qqiHZIgSN23W3yJc2J/8lJJEZ1oYIJiRcWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQTNffhMMZ0ZrzWxEE8XProsbb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:b6:53:94:0b:aa:d8:9c:2f:7a:47:68:74:97:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c104cd7df84c319d19af35b1104f173eba2c6dbd
Validity
Not Before: Jun 28 15:01:23 2025 GMT
Not After : Jun 29 15:01:23 2025 GMT
Subject: CN=bc1e88afc64dbe6a1643f1c453ec01dbbfdd47d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a3:0f:91:2a:62:a4:6e:60:0a:ec:c2:2d:cc:
62:1b:7b:7b:4a:44:61:79:5d:79:fd:56:28:94:a2:
4f:e1:85:67:b6:33:eb:4c:7d:1b:2d:9c:f4:c4:bf:
f2:d3:ae:39:f8:59:e6:ff:da:b9:4e:88:13:ba:e0:
68:ac:df:77:6e:6a:94:f1:8c:b3:30:6a:09:a0:64:
6c:22:7f:ae:4b:e3:f1:c9:1e:0b:61:8d:fd:19:3b:
8b:4a:21:54:58:96:70:f6:27:d2:df:bf:b5:e4:82:
64:48:e3:bf:31:2e:b8:bf:d0:5b:e6:3c:12:e6:5d:
d5:d2:c3:d6:5e:3e:c2:97:c0:e1:be:fd:40:be:d0:
b7:eb:90:b4:76:32:97:86:35:54:ca:cf:6b:ef:7b:
46:48:3c:f1:93:43:a2:f3:e3:51:44:0f:ed:93:db:
4b:14:37:c3:04:b9:16:c5:79:70:33:99:83:2a:6b:
5d:79:c9:cb:1b:1e:04:76:c0:2f:93:8b:99:53:b3:
1c:fc:dc:12:46:2c:dd:f4:ac:e5:f8:6c:9f:08:71:
fe:c5:a3:c9:87:6b:40:9c:51:af:81:40:84:d0:99:
9e:be:ba:8e:1c:35:8f:cc:16:28:05:8a:b6:63:6d:
a1:3f:60:59:3c:1d:4a:2e:9d:23:12:45:57:5d:5a:
cc:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:1E:88:AF:C6:4D:BE:6A:16:43:F1:C4:53:EC:01:DB:BF:DD:47:D9
X509v3 Authority Key Identifier:
keyid:C1:04:CD:7D:F8:4C:31:9D:19:AF:35:B1:10:4F:17:3E:BA:2C:6D:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQTNffhMMZ0ZrzWxEE8XProsbb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:94:e0:c7:53:5c:78:fd:47:76:6c:e4:74:90:ce:d4:ab:11:
01:d2:f9:57:5e:65:f3:6d:1c:4d:2d:3b:48:db:f9:1b:2e:7f:
8a:d6:fc:7e:b0:19:f1:83:7b:d4:6c:75:d7:1f:a6:64:da:6f:
2d:d7:36:a1:35:96:98:75:b7:c6:d7:e5:e3:28:61:b5:af:65:
2b:10:2f:ed:40:2b:43:62:94:45:4f:20:18:2b:6a:b3:60:a7:
70:03:6d:ef:f3:44:6c:05:75:87:25:bd:07:bf:0c:d2:3e:24:
60:ad:e5:7f:25:8b:05:d8:32:91:55:90:84:04:a0:15:c0:77:
db:ec:9f:60:2d:84:e2:16:96:9c:36:cd:eb:2c:df:91:da:6d:
9e:09:eb:6e:95:a0:ad:b6:8e:dd:c8:9d:f1:ee:29:a7:0a:1d:
52:c0:ab:c6:be:d6:e2:d0:22:7b:58:b6:a6:9f:65:79:68:be:
c9:e5:3f:18:68:a0:38:e0:08:f9:71:46:0a:66:f5:04:5f:38:
95:bd:bb:05:07:38:a6:ed:ae:35:51:63:27:3c:99:da:81:c2:
55:e4:1c:2b:92:db:64:03:f2:7e:6e:95:db:0d:dd:a2:76:1e:
7f:3a:aa:02:31:47:67:be:5f:50:e9:9b:37:11:48:66:5b:4d:
91:8d:23:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:26:52 2025 by rpki-client