Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.mft
File: wessYB-m0HUHlzCB-qEyX-GQsnY.mft (raw, json)
Hash identifier: TB3uY39aiO9Thfh+2DM2IDDV1KKLV+vq/T/40XFCW6A=
Subject key identifier: 39:EA:74:70:6E:D6:F0:09:13:54:4D:E9:5E:43:E3:A6:10:89:D5:81
Authority key identifier: C1:EB:2C:60:1F:A6:D0:75:07:97:30:81:FA:A1:32:5F:E1:90:B2:76
Certificate issuer: /CN=c1eb2c601fa6d07507973081faa1325fe190b276
Certificate serial: 0197B77C020EC39E98289762D4126850A5F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wessYB-m0HUHlzCB-qEyX-GQsnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.mft
Manifest number: 0432
Signing time: Sat 28 Jun 2025 17:00:46 +0000
Manifest this update: Sat 28 Jun 2025 17:00:46 +0000
Manifest next update: Sun 29 Jun 2025 17:00:46 +0000
Files and hashes: 1: 9VIpFT_uZfwTVVoxe7PNJO0XppE.roa (hash: dBqoAsOTvzrDylULyUsZPwgLS85TPwI2yvXP5iugyTk=)
2: v1vDCS3zEydWpnAi830GA_yQEHw.roa (hash: 3xFB/pduxsTBOKVMWYRZZ5LgXgY+cAqxpBeMHy8oimw=)
3: wessYB-m0HUHlzCB-qEyX-GQsnY.crl (hash: i65FlRrzrJjc+JpWkF4oE8LjJt59QZJ7kqsd8P9mZpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wessYB-m0HUHlzCB-qEyX-GQsnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:02:0e:c3:9e:98:28:97:62:d4:12:68:50:a5:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1eb2c601fa6d07507973081faa1325fe190b276
Validity
Not Before: Jun 28 17:00:46 2025 GMT
Not After : Jun 29 17:00:46 2025 GMT
Subject: CN=39ea74706ed6f00913544de95e43e3a61089d581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:08:13:3f:9d:69:05:cf:d8:b8:ab:44:b8:b5:
61:e0:a5:d1:32:30:89:de:da:a8:4d:d2:22:21:5a:
b0:7c:e6:da:23:a6:c3:57:8b:ea:c1:7d:16:f9:7b:
2c:07:0c:63:f1:ff:9b:b7:3b:23:93:16:c8:1f:92:
9f:f4:16:3b:e2:ba:cf:cb:1d:9b:08:47:5e:0b:4e:
b5:c2:78:93:a7:f2:7f:f8:42:01:52:22:30:58:24:
4a:b7:c7:1b:0e:05:46:e9:71:cc:53:6d:83:02:4a:
4e:07:32:db:db:cd:47:85:33:13:8d:a9:cd:87:c7:
47:4c:a2:a3:18:35:24:c5:e1:93:67:06:4f:7c:80:
fe:3f:23:06:7b:e5:17:5c:0a:23:28:dc:f2:31:b6:
63:01:20:bb:6f:06:e4:3a:08:e6:1b:d5:5c:22:ff:
8f:2c:d2:f5:a3:d1:88:ca:15:d5:c4:e6:2d:4f:2a:
ac:87:89:8a:89:21:5a:86:be:ee:d8:da:b4:a4:9a:
7b:e3:74:e0:0b:1e:32:1a:e8:e3:2d:3f:05:dd:02:
c6:c9:56:04:32:f4:58:83:58:f1:d5:13:06:29:90:
b4:c6:64:ba:15:e6:bf:5c:36:59:0e:ba:84:8c:e0:
78:c4:51:42:ce:cf:0c:02:6f:1f:39:1f:ba:d3:29:
22:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:EA:74:70:6E:D6:F0:09:13:54:4D:E9:5E:43:E3:A6:10:89:D5:81
X509v3 Authority Key Identifier:
keyid:C1:EB:2C:60:1F:A6:D0:75:07:97:30:81:FA:A1:32:5F:E1:90:B2:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wessYB-m0HUHlzCB-qEyX-GQsnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:5f:d7:6c:c3:54:a1:c7:83:cb:0a:b6:f8:44:45:cc:c4:1e:
6a:1d:7d:0c:cb:b0:d1:41:88:ad:99:1e:7d:a9:25:6b:57:3b:
30:a9:b1:3f:39:26:cc:a5:48:47:ec:10:4f:68:8a:ef:1b:1b:
8c:0c:ff:1f:37:f9:cf:e8:8b:36:46:92:e0:a2:16:d9:40:50:
f0:e2:19:09:48:77:1e:1f:7f:bd:06:1c:f9:6f:17:d7:dd:b9:
98:bd:c2:03:f2:ba:b8:6e:e2:56:bb:7c:9f:f9:d6:eb:47:51:
c3:05:74:64:35:4b:99:89:b5:4c:78:81:c4:1a:81:ba:b5:7e:
8e:7a:86:e7:f9:fe:80:3c:7c:2d:c1:83:69:ad:c3:dc:cd:3c:
a1:3d:16:36:8f:49:20:29:0e:8d:53:86:7e:8f:b2:83:25:3f:
2b:49:5f:bf:8c:e2:5d:c1:1e:0c:12:87:f9:3d:b3:c3:99:aa:
4b:3e:84:13:6f:a6:44:7e:4a:cf:a4:56:00:6a:ff:4c:c4:f4:
78:d8:d1:5f:71:ac:06:c2:1b:65:94:b2:9c:e9:0b:11:97:80:
b2:b6:b5:a0:8d:3b:c7:14:86:f8:52:6d:ed:93:ac:a6:6a:b1:
38:72:3c:54:70:a8:f6:b0:46:e3:c2:47:ea:c9:d6:1a:19:47:
d1:64:0d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:20:09 2025 by rpki-client