Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft
File: WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft (raw, json)
Hash identifier: bg/2FHTq8e1XSmKpTjS5iN45LXm3LySJydpkw3Y/0HA=
Subject key identifier: 40:D7:D9:49:0D:7B:1F:58:51:2A:2E:4D:80:D8:C2:C2:D5:EB:B0:54
Authority key identifier: 58:5E:4F:4B:4A:9E:F5:53:1D:FE:50:F4:15:41:C9:12:A3:35:FB:F1
Certificate issuer: /CN=585e4f4b4a9ef5531dfe50f41541c912a335fbf1
Certificate serial: 0197B70EBDCBA5A9200682BA1C861509FCF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft
Manifest number: 0B0E
Signing time: Sat 28 Jun 2025 15:01:25 +0000
Manifest this update: Sat 28 Jun 2025 15:01:25 +0000
Manifest next update: Sun 29 Jun 2025 15:01:25 +0000
Files and hashes: 1: UA_CLesELhQ-K1ritg7wCW9o0fw.roa (hash: hqf0nplvHISKqpfSG16CNVc9bBoJPdoMfb/a7H1JSQw=)
2: WF5PS0qe9VMd_lD0FUHJEqM1-_E.crl (hash: FdfE2Friyz+aSMcuKngcNSOzTuKsOTCBqEByIfIJftQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:bd:cb:a5:a9:20:06:82:ba:1c:86:15:09:fc:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=585e4f4b4a9ef5531dfe50f41541c912a335fbf1
Validity
Not Before: Jun 28 15:01:25 2025 GMT
Not After : Jun 29 15:01:25 2025 GMT
Subject: CN=40d7d9490d7b1f58512a2e4d80d8c2c2d5ebb054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:04:49:6d:32:4d:c3:b4:7f:0e:1d:de:ab:4c:
f6:90:ea:4e:0a:6b:32:89:2b:6e:ad:9b:be:30:c8:
a6:e3:bc:ee:5b:b1:04:4c:81:e7:34:92:40:bd:81:
d2:08:2e:4d:fd:dc:c7:dd:70:6e:87:99:97:57:7e:
5a:4e:66:4f:8b:34:e7:a2:c5:eb:96:39:13:cd:ec:
13:ce:7e:79:63:1b:43:e0:56:2c:fb:3d:bb:7c:7d:
b9:31:23:d5:71:d2:0c:e5:6d:c5:e9:1a:ee:ab:33:
e9:51:97:22:8e:c3:99:0f:b6:c3:eb:aa:f7:5f:0c:
95:83:ff:28:2c:dd:0a:ae:1f:e3:00:80:f9:1c:5b:
7a:c2:4c:7b:0c:58:0e:d3:fa:04:14:bc:94:d9:21:
a2:85:ba:95:e7:38:da:60:e0:bd:8d:59:6d:21:04:
3b:2b:53:ee:81:e7:7c:f4:90:a5:ab:d1:7b:f8:75:
d5:72:98:85:3a:68:05:20:83:ed:35:8c:56:2c:9c:
51:12:5d:2a:ab:ed:aa:46:bf:f2:14:07:7f:ae:a7:
e4:36:8e:43:28:c6:17:74:70:da:28:89:32:f3:5f:
e1:ac:c4:54:a1:59:65:de:1b:5f:1e:23:20:56:ee:
fd:7b:ab:0c:73:e8:d1:cf:f1:8d:a3:62:d3:e1:82:
77:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D7:D9:49:0D:7B:1F:58:51:2A:2E:4D:80:D8:C2:C2:D5:EB:B0:54
X509v3 Authority Key Identifier:
keyid:58:5E:4F:4B:4A:9E:F5:53:1D:FE:50:F4:15:41:C9:12:A3:35:FB:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:a1:6c:ef:b8:86:23:20:fa:13:40:b6:de:bb:16:c0:b6:66:
88:94:12:0b:a7:1e:96:f6:bb:1a:67:5f:5d:25:5b:ff:30:38:
c3:fb:11:0d:65:f4:e3:27:ac:27:32:78:aa:e8:74:40:44:21:
cc:32:d0:11:67:05:8f:7e:56:e5:f7:50:b4:7d:73:30:da:b2:
6f:ac:ce:fa:96:a0:8a:a7:81:39:3c:bf:50:e7:b4:bd:82:cf:
25:b4:0d:a2:d2:b4:ca:44:d3:60:aa:08:76:43:57:f8:e3:07:
71:63:41:cc:a2:82:c0:a8:07:56:3f:f6:68:4a:bb:2f:b6:e0:
e7:ec:7d:89:90:3f:cc:94:96:ce:eb:2f:3a:0e:50:82:6c:e7:
43:88:0d:22:82:64:f2:53:32:fc:db:87:b6:9d:69:6d:97:ac:
73:0c:26:c6:e0:a1:ed:d6:31:92:af:1e:b4:ae:40:cf:ee:cc:
dd:57:3b:c8:4d:54:83:63:75:93:93:fc:db:e1:96:5b:0c:77:
ac:f4:f5:9d:80:2e:ca:e2:ea:85:76:1c:21:9a:75:6f:01:be:
e4:cc:18:05:55:9a:dc:06:c4:a4:d0:cf:11:ea:b5:82:d5:bb:
7f:62:e0:60:7f:d2:45:e2:1a:f0:1d:ac:64:ca:bb:2a:2a:fa:
05:c2:d2:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:22:05 2025 by rpki-client