Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.mft
File: wNKohFzfZXbejrARGAir1l_YvEQ.mft (raw, json)
Hash identifier: zOFhhsdqaJP8rCscm6OiQ4Hfpo7au02SBRBcVZFK4fA=
Subject key identifier: 72:E9:D9:C0:70:9E:57:9D:B6:9C:08:48:7F:96:6D:E2:9C:41:92:A6
Authority key identifier: C0:D2:A8:84:5C:DF:65:76:DE:8E:B0:11:18:08:AB:D6:5F:D8:BC:44
Certificate issuer: /CN=c0d2a8845cdf6576de8eb0111808abd65fd8bc44
Certificate serial: 0197CFBB688590672AC8D99B61EBC45E27DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wNKohFzfZXbejrARGAir1l_YvEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.mft
Manifest number: 15C2
Signing time: Thu 03 Jul 2025 10:00:54 +0000
Manifest this update: Thu 03 Jul 2025 10:00:54 +0000
Manifest next update: Fri 04 Jul 2025 10:00:54 +0000
Files and hashes: 1: OmgVAw8ZHFFpHCyw7LOehrOM8KA.roa (hash: 6CbGQ8M2p8DqUv4lPi9kJg+A49OPSohIvq46VoGyAHM=)
2: iB80sjC3FaeKn3w8-_wDD7I9eLg.roa (hash: J8k5oGXUl2TYImVeWDD/bvu/zaBz6UEfFHiKZd9EJV0=)
3: wNKohFzfZXbejrARGAir1l_YvEQ.crl (hash: AmfAEGA2xZD+TgMXStPKs7WcUWyd2fHht37JILm8OX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wNKohFzfZXbejrARGAir1l_YvEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cf:bb:68:85:90:67:2a:c8:d9:9b:61:eb:c4:5e:27:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0d2a8845cdf6576de8eb0111808abd65fd8bc44
Validity
Not Before: Jul 3 10:00:54 2025 GMT
Not After : Jul 4 10:00:54 2025 GMT
Subject: CN=72e9d9c0709e579db69c08487f966de29c4192a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c0:53:9e:ef:6b:5b:a3:4c:4d:bf:ae:3b:b8:
5b:63:a7:f5:8b:00:4f:8a:60:5a:30:27:ce:29:18:
ad:6e:ed:fa:ae:b2:85:01:9f:0f:5c:93:39:9b:d9:
92:c5:65:7d:ab:d1:70:d7:30:09:c5:51:77:4c:14:
5a:ae:53:52:e8:1b:d7:19:07:eb:54:6d:69:63:cd:
9e:b9:7d:df:30:e1:90:8d:1c:a4:2b:00:8a:50:33:
51:37:06:a0:5a:df:43:ee:b3:da:ce:8c:e2:23:71:
bf:16:31:84:38:94:06:18:e6:4a:47:ea:3b:e2:0f:
ff:d0:da:e2:ee:23:99:6d:be:82:c6:87:35:fa:b0:
b6:96:6d:c6:23:f0:3e:18:06:08:cc:23:70:44:d3:
15:2d:6e:86:38:a1:23:ff:3b:d2:0b:3a:8c:c2:34:
d7:7c:ff:48:aa:e8:e7:66:e9:90:5f:5c:1b:eb:2b:
20:b2:55:a8:cf:7e:04:1e:fa:3f:5c:7f:14:a5:b5:
90:39:37:c8:62:29:4e:28:8f:ec:8b:49:09:01:2a:
4e:0c:cb:c5:08:c3:da:36:7a:07:6c:de:aa:9f:fa:
a5:ff:c2:90:ca:36:eb:64:18:96:37:34:0a:11:f6:
fd:b0:e3:3e:4c:c4:10:21:2d:a4:ea:96:64:3e:d5:
39:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:E9:D9:C0:70:9E:57:9D:B6:9C:08:48:7F:96:6D:E2:9C:41:92:A6
X509v3 Authority Key Identifier:
keyid:C0:D2:A8:84:5C:DF:65:76:DE:8E:B0:11:18:08:AB:D6:5F:D8:BC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wNKohFzfZXbejrARGAir1l_YvEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:81:18:06:ce:0c:a8:1f:c8:b4:50:d7:3c:45:3c:c6:fc:a5:
3f:4e:b0:17:83:45:92:71:a5:cf:36:62:59:2c:bb:6d:aa:8f:
ec:0e:4f:f9:c6:dc:fc:b0:cd:32:2d:a9:c2:f9:6e:92:b7:e0:
61:63:df:c5:9d:d0:54:a3:02:4b:7d:ab:a3:94:43:75:c4:e6:
f3:79:e2:c1:11:04:92:20:54:47:75:a9:9f:c0:14:39:be:5b:
d7:9f:d6:e5:6a:98:82:c7:58:5a:3e:a6:5e:a5:50:d9:ed:37:
e2:71:a2:59:85:e5:58:b1:fc:d9:18:9f:a6:65:66:15:9f:a4:
d9:89:dd:fb:97:3f:6d:3c:74:97:a5:d4:72:90:71:ac:d5:a2:
45:9a:e9:23:a5:2c:ec:fe:98:69:d4:ef:7e:16:b8:a5:26:2a:
91:e5:c2:d0:15:09:a7:45:80:ab:c4:f3:b5:e9:6e:b9:ce:da:
e7:c0:7a:cb:24:a3:3b:73:c2:a8:c5:d7:69:f0:3c:23:cf:83:
f3:52:bb:4f:99:df:bb:21:7a:5c:cb:01:96:2d:4f:fe:2e:6a:
e2:73:26:96:1b:2b:a1:81:a8:d8:9a:ed:88:22:aa:6d:8a:1e:
60:e1:27:84:ff:24:d5:74:f0:f2:77:6e:b3:dd:e2:2b:cf:93:
8a:95:73:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 14:15:55 2025 by rpki-client