Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.mft
File: wSgWX47uGF-q-aozh19O5BKxD4w.mft (raw, json)
Hash identifier: ziBuRGJiURGKkOKOXkzVR97IksGZS11vU0tdBq+Ug48=
Subject key identifier: A0:73:1A:1E:3F:47:C1:31:33:E1:94:AD:30:82:3A:EF:49:F2:BE:BE
Authority key identifier: C1:28:16:5F:8E:EE:18:5F:AA:F9:AA:33:87:5F:4E:E4:12:B1:0F:8C
Certificate issuer: /CN=c128165f8eee185faaf9aa33875f4ee412b10f8c
Certificate serial: 0197BA7DF152ABEFF1FDD20706A3C10B9F0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSgWX47uGF-q-aozh19O5BKxD4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.mft
Manifest number: 0FB1
Signing time: Sun 29 Jun 2025 07:01:45 +0000
Manifest this update: Sun 29 Jun 2025 07:01:45 +0000
Manifest next update: Mon 30 Jun 2025 07:01:45 +0000
Files and hashes: 1: IGaAmqWaXDC8Jd-8Qa85p2QBKSs.roa (hash: m3bXj57F8BUs8aS9v6HaMmQ2fB5Rx7CSbbCBnNNdBUY=)
2: wSgWX47uGF-q-aozh19O5BKxD4w.crl (hash: ldh63WBsYaXulsy4vESNpSwy4hwHCoPD6Nq47yeA5J0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/wSgWX47uGF-q-aozh19O5BKxD4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7d:f1:52:ab:ef:f1:fd:d2:07:06:a3:c1:0b:9f:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c128165f8eee185faaf9aa33875f4ee412b10f8c
Validity
Not Before: Jun 29 07:01:45 2025 GMT
Not After : Jun 30 07:01:45 2025 GMT
Subject: CN=a0731a1e3f47c13133e194ad30823aef49f2bebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:78:32:2a:03:66:8e:41:f5:3d:8e:b0:21:0b:
4b:3c:73:1b:e1:2a:a8:b3:5e:ab:e0:31:8b:37:3c:
e7:d9:a5:1c:85:86:a8:1e:d7:ee:df:b7:b5:65:97:
12:b1:57:a0:06:99:6c:2d:af:05:04:a2:6f:f3:22:
93:aa:14:1e:08:64:1e:20:d9:8b:82:34:37:9f:5c:
06:37:df:f6:9b:73:91:e2:a4:33:c4:5e:cc:70:53:
8e:19:74:53:d4:2e:e6:9a:53:24:7c:3b:c7:b4:10:
cd:6e:d0:d2:6a:22:d9:e9:ca:a4:c7:27:2a:c2:8c:
62:9e:cd:a1:ab:7a:11:fe:63:27:78:fb:60:18:e9:
f7:f1:5a:48:94:cc:e3:2c:fa:77:cf:d7:18:d4:26:
c1:4e:bb:a6:2f:00:fb:5b:3d:21:59:cd:cf:6d:02:
fd:bc:32:c4:e7:e9:28:18:72:66:c5:fd:58:5b:ce:
84:7d:bb:85:9c:23:30:7f:9a:8a:93:be:41:77:92:
44:13:34:06:1f:9b:e3:63:41:10:85:9d:0f:0a:dd:
b7:f8:f9:f9:62:75:79:70:59:04:bf:b6:bf:81:a7:
21:9b:8e:3e:fe:5d:0c:93:24:3e:b1:d7:c0:24:76:
0c:49:52:21:31:3d:41:d7:96:59:0c:05:d3:c4:22:
c4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:73:1A:1E:3F:47:C1:31:33:E1:94:AD:30:82:3A:EF:49:F2:BE:BE
X509v3 Authority Key Identifier:
keyid:C1:28:16:5F:8E:EE:18:5F:AA:F9:AA:33:87:5F:4E:E4:12:B1:0F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSgWX47uGF-q-aozh19O5BKxD4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:74:6c:17:1d:89:b9:59:84:07:8d:e7:73:d8:a6:56:4f:c3:
a4:d8:19:5f:34:f4:a5:00:6d:96:09:5c:ce:83:28:21:b9:86:
49:01:ed:23:4f:30:46:ed:39:c3:18:da:c5:4a:3f:0d:34:c5:
23:9e:ae:5f:33:f5:62:b7:7a:81:2b:6e:83:f3:0f:59:1f:90:
9d:ef:0e:d9:ea:25:27:22:52:8b:20:0d:b9:72:88:22:4f:64:
53:22:a4:2e:57:d3:8f:fe:8c:a7:9b:40:40:eb:46:d8:78:2a:
bc:b0:70:6c:d2:15:4d:d0:2e:8f:63:aa:2a:bc:db:9d:95:a4:
27:92:95:6e:3e:18:8a:51:01:85:27:98:83:53:02:c8:40:75:
0f:ca:bf:2e:48:76:e9:4f:37:7e:77:43:02:74:39:1c:88:f3:
f5:c7:e8:a2:84:ca:45:5d:79:16:07:cf:0d:8d:1b:e9:fb:a8:
ce:71:fd:ef:ba:28:2a:2d:af:e2:33:47:e1:ba:9c:95:6e:c2:
73:4c:9e:af:ed:c3:ba:6e:d2:97:f6:2c:43:6a:a7:ed:01:50:
90:c3:25:c7:d0:15:97:f4:3e:11:36:b9:1b:8e:65:b5:c3:f0:
e2:d7:c5:df:7b:a6:b8:cf:71:6a:9d:4e:cb:2d:4c:9c:4e:6f:
8a:c0:7a:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe6ffFSq+/x/dIHBqPBC58OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxMjgxNjVmOGVlZTE4NWZhYWY5YWEzMzg3NWY0ZWU0MTJi
MTBmOGMwHhcNMjUwNjI5MDcwMTQ1WhcNMjUwNjMwMDcwMTQ1WjAzMTEwLwYDVQQD
EyhhMDczMWExZTNmNDdjMTMxMzNlMTk0YWQzMDgyM2FlZjQ5ZjJiZWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3gyKgNmjkH1PY6wIQtLPHMb4Sqo
s16r4DGLNzzn2aUchYaoHtfu37e1ZZcSsVegBplsLa8FBKJv8yKTqhQeCGQeINmL
gjQ3n1wGN9/2m3OR4qQzxF7McFOOGXRT1C7mmlMkfDvHtBDNbtDSaiLZ6cqkxycq
woxins2hq3oR/mMnePtgGOn38VpIlMzjLPp3z9cY1CbBTrumLwD7Wz0hWc3PbQL9
vDLE5+koGHJmxf1YW86EfbuFnCMwf5qKk75Bd5JEEzQGH5vjY0EQhZ0PCt23+Pn5
YnV5cFkEv7a/gachm44+/l0MkyQ+sdfAJHYMSVIhMT1B15ZZDAXTxCLEYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKBzGh4/R8ExM+GUrTCCOu9J8r6+MB8GA1UdIwQY
MBaAFMEoFl+O7hhfqvmqM4dfTuQSsQ+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1NnV1g0N3VHRi1xLWFvemgxOU81Qkt4RDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9hM2I4Y2QtNTZmYS00M2ExLThkYzEt
MmU1YWY1YjY4NzgxLzEvd1NnV1g0N3VHRi1xLWFvemgxOU81Qkt4RDR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9hM2I4Y2QtNTZmYS00M2ExLThkYzEtMmU1YWY1YjY4Nzgx
LzEvd1NnV1g0N3VHRi1xLWFvemgxOU81Qkt4RDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACnRsFx2J
uVmEB43nc9imVk/DpNgZXzT0pQBtlglczoMoIbmGSQHtI08wRu05wxjaxUo/DTTF
I56uXzP1Yrd6gStug/MPWR+Qne8O2eolJyJSiyANuXKIIk9kUyKkLlfTj/6Mp5tA
QOtG2HgqvLBwbNIVTdAuj2OqKrzbnZWkJ5KVbj4YilEBhSeYg1MCyEB1D8q/Lkh2
6U83fndDAnQ5HIjz9cfoooTKRV15FgfPDY0b6fuoznH977ooKi2v4jNH4bqclW7C
c0yer+3Dum7Sl/YsQ2qn7QFQkMMlx9AVl/Q+ETa5G45ltcPw4tfF33umuM9xap1O
yy1MnE5visB6Dg==
-----END CERTIFICATE-----
Generated at Sun Jun 29 09:17:47 2025 by rpki-client