Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/WyxHDbJENILhlSOVOnjB7woWlHk.mft
File: WyxHDbJENILhlSOVOnjB7woWlHk.mft (raw, json)
Hash identifier: AdCBdq3sdP6nLENA3hzeRruxYJX4rjn5b4R3DRV3po0=
Subject key identifier: 69:78:65:04:4B:47:F9:3B:57:A3:7A:A8:A9:DF:DB:AE:16:BB:93:55
Authority key identifier: 5B:2C:47:0D:B2:44:34:82:E1:95:23:95:3A:78:C1:EF:0A:16:94:79
Certificate issuer: /CN=5b2c470db2443482e19523953a78c1ef0a169479
Certificate serial: 0197B88F63D17C82DA70345CC5B755411B90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WyxHDbJENILhlSOVOnjB7woWlHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/WyxHDbJENILhlSOVOnjB7woWlHk.mft
Manifest number: 0D55
Signing time: Sat 28 Jun 2025 22:01:34 +0000
Manifest this update: Sat 28 Jun 2025 22:01:34 +0000
Manifest next update: Sun 29 Jun 2025 22:01:34 +0000
Files and hashes: 1: 0AdevnLlsxFU0_MXijL2HLDuliU.roa (hash: Oq6mu5Hbl5chx/r3WVWbX/YQvEZQoJ2rWVh4OUcVSO0=)
2: WyxHDbJENILhlSOVOnjB7woWlHk.crl (hash: +3OaQgHPFAuDW+k/nlXvAOKbIWPDZyKVqLSuzMHgZ4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/WyxHDbJENILhlSOVOnjB7woWlHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/WyxHDbJENILhlSOVOnjB7woWlHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WyxHDbJENILhlSOVOnjB7woWlHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:63:d1:7c:82:da:70:34:5c:c5:b7:55:41:1b:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b2c470db2443482e19523953a78c1ef0a169479
Validity
Not Before: Jun 28 22:01:34 2025 GMT
Not After : Jun 29 22:01:34 2025 GMT
Subject: CN=697865044b47f93b57a37aa8a9dfdbae16bb9355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:37:f6:9f:1b:be:18:e2:b4:8b:d3:28:43:9e:
78:67:74:7a:08:27:bd:65:59:3a:73:cd:49:03:b0:
4f:53:5f:4c:0b:54:8b:cf:52:3a:41:be:f5:7e:3f:
d2:88:71:de:cb:5a:25:da:e7:70:94:42:d6:c4:f2:
90:1c:75:d8:55:6d:28:2b:69:b8:b0:b8:f7:6b:b4:
cf:c2:6e:7c:6a:9b:fe:fc:10:c3:7b:b8:4f:9a:c4:
2c:71:7c:d4:8e:2b:a0:10:60:c9:c4:76:3f:ec:46:
36:98:60:c3:92:92:d4:cd:e1:f7:d6:3c:69:98:8b:
61:ee:bf:9f:f6:6b:8a:1f:8e:e0:79:d7:d4:19:b5:
08:03:16:5f:16:fe:a9:d2:c3:35:cd:52:cc:c9:9e:
ba:fe:7c:c2:42:58:b6:b8:cf:6d:59:be:a4:f8:63:
6b:66:c9:bf:24:f3:e6:02:43:6e:63:f4:ce:0d:9d:
79:c8:dc:ce:b4:b4:d8:18:21:40:ae:5e:11:52:d2:
00:47:3d:a7:76:14:5e:79:04:aa:77:f6:f8:e0:4d:
18:72:4f:a6:ca:1f:69:80:8e:e4:6e:9b:5d:6c:15:
0b:8a:c6:d4:ea:7d:99:9d:bf:fb:61:7b:17:21:63:
66:aa:d6:29:53:db:c5:ae:52:31:5c:84:f0:c7:e3:
bf:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:78:65:04:4B:47:F9:3B:57:A3:7A:A8:A9:DF:DB:AE:16:BB:93:55
X509v3 Authority Key Identifier:
keyid:5B:2C:47:0D:B2:44:34:82:E1:95:23:95:3A:78:C1:EF:0A:16:94:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WyxHDbJENILhlSOVOnjB7woWlHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/WyxHDbJENILhlSOVOnjB7woWlHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/WyxHDbJENILhlSOVOnjB7woWlHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:6d:7d:44:2b:9e:d9:e2:73:15:cb:cd:05:d8:87:94:3d:ba:
df:25:5e:90:84:7f:c5:00:0a:65:39:b1:17:87:08:01:4a:22:
4a:93:9c:73:cf:c1:e0:2b:ef:1c:46:de:e1:a0:73:94:9d:78:
07:e4:17:a6:ca:e3:bb:25:29:6b:d6:6f:dc:85:df:98:c5:a4:
ab:a9:5c:f7:65:17:c0:4e:a2:7c:2d:58:1d:83:18:d2:c0:af:
89:7f:77:48:21:04:0e:75:b5:dd:2a:77:4b:d6:bc:4d:b0:b7:
bc:52:3a:63:6e:3e:21:97:32:44:18:5d:1e:a5:47:14:9d:52:
78:a4:43:56:b5:c4:31:b0:e3:55:3b:44:00:4c:f7:8d:69:b3:
9b:c1:63:2f:1d:c6:c6:45:01:8e:30:dc:8c:76:d1:69:a7:68:
60:17:f5:aa:36:b5:a4:2b:29:ca:32:da:00:92:89:28:2d:57:
57:85:d6:24:da:71:9a:30:38:04:95:12:57:b7:e2:cd:49:3a:
55:7b:9f:64:83:97:aa:9b:8f:71:9d:35:b8:d6:33:5e:d6:28:
61:c2:80:32:50:16:27:6a:d7:18:9c:f7:20:c0:79:59:90:fd:
97:de:7d:84:70:20:c5:40:a4:e1:31:b8:9b:2c:cd:7b:0b:90:
ee:8b:76:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:32:07 2025 by rpki-client