Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.mft
File: wtKiNOIkv4eZby8N9Vnq2IL55lE.mft (raw, json)
Hash identifier: z8LzAFQ3Q9hD2bjM6QbRP5Wr5CzlOuzjfaylCDw+Tk4=
Subject key identifier: 7B:94:FE:97:0E:7C:87:FC:F1:68:F1:6C:38:15:BA:39:49:8C:A1:8B
Authority key identifier: C2:D2:A2:34:E2:24:BF:87:99:6F:2F:0D:F5:59:EA:D8:82:F9:E6:51
Certificate issuer: /CN=c2d2a234e224bf87996f2f0df559ead882f9e651
Certificate serial: 0197B6A0F15BCAF586EAF99036E07385678F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtKiNOIkv4eZby8N9Vnq2IL55lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.mft
Manifest number: 15C4
Signing time: Sat 28 Jun 2025 13:01:30 +0000
Manifest this update: Sat 28 Jun 2025 13:01:30 +0000
Manifest next update: Sun 29 Jun 2025 13:01:30 +0000
Files and hashes: 1: 2oAVyU2seJGTQFfvnoLEW0LxBMw.roa (hash: ZURqts9j5VKp8XJN1Pz3dvi3R29PhjPq43deEFPHUGM=)
2: AT0dJX8We-n1OQnzvfJggA9FrB4.roa (hash: 9UAeHkptLtx/0ySMZUXtLEVDmGoLUOk5U9+no/9RFDk=)
3: wtKiNOIkv4eZby8N9Vnq2IL55lE.crl (hash: qtSYBHToCUOC/iuvqthRwZk00yuzn9DmBltgnXRATlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wtKiNOIkv4eZby8N9Vnq2IL55lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:f1:5b:ca:f5:86:ea:f9:90:36:e0:73:85:67:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d2a234e224bf87996f2f0df559ead882f9e651
Validity
Not Before: Jun 28 13:01:30 2025 GMT
Not After : Jun 29 13:01:30 2025 GMT
Subject: CN=7b94fe970e7c87fcf168f16c3815ba39498ca18b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:56:a0:64:47:6f:5b:fa:31:4f:af:16:91:24:
66:5f:3d:4c:9d:dd:d4:82:6a:ed:c4:b7:9c:19:22:
60:94:f6:cd:17:b9:bb:39:3c:b9:de:22:f6:3d:a1:
b0:64:9f:35:7b:4f:6a:5c:c4:3a:21:46:f0:5c:38:
3b:98:0d:f6:46:3e:12:93:e9:8a:bf:7d:e9:20:d5:
4a:09:d1:71:85:db:6a:18:dc:13:a5:35:48:02:ec:
72:98:16:97:78:f7:af:d7:83:ee:c9:bf:f5:0f:14:
fd:5e:ba:87:35:10:f6:cc:7a:2a:da:19:22:21:6d:
11:13:32:0c:62:e3:2e:bd:05:93:01:9a:c3:5b:39:
ce:88:30:c4:9c:fe:b9:20:9f:49:cd:e3:e4:99:98:
25:90:1b:9f:fb:d5:e5:8d:d4:d7:32:a4:1e:3d:35:
76:ed:e0:f4:d0:3e:fe:c7:d4:38:80:0e:54:d1:fa:
80:e6:be:9e:de:13:41:bd:e2:8e:01:db:84:be:7e:
1f:d2:8b:7f:f8:7f:4a:5e:f7:35:ff:97:33:98:d6:
41:b2:c7:97:b7:d4:d0:3b:df:12:8f:60:d6:ab:5a:
c1:58:63:1e:15:53:25:b3:94:12:8a:78:34:73:7c:
93:0c:8b:60:b3:32:30:cd:6b:52:a1:de:62:9c:41:
f8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:94:FE:97:0E:7C:87:FC:F1:68:F1:6C:38:15:BA:39:49:8C:A1:8B
X509v3 Authority Key Identifier:
keyid:C2:D2:A2:34:E2:24:BF:87:99:6F:2F:0D:F5:59:EA:D8:82:F9:E6:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtKiNOIkv4eZby8N9Vnq2IL55lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:26:2a:fb:c0:01:ee:e4:78:68:23:3b:31:a3:4b:c9:94:44:
79:ab:a6:49:5a:ea:11:c9:a1:e3:32:df:49:c0:71:43:36:34:
d0:06:0b:f1:17:90:46:0b:63:39:06:d6:8c:bf:08:e6:78:a9:
5c:3c:dd:da:f0:f8:21:db:58:40:45:7f:0f:f5:7c:10:d4:19:
fa:b9:f0:27:3b:a4:8a:7e:d3:a6:67:76:0a:61:12:94:c9:23:
a5:d2:d0:de:0d:67:54:3f:65:e6:0b:53:15:2b:79:3b:af:2a:
93:8e:07:aa:a8:b9:3b:cd:37:f6:52:5c:43:74:e8:6d:da:84:
bc:34:85:89:75:a7:e1:4f:65:2f:25:81:40:88:78:38:10:39:
20:53:23:28:e2:93:79:9c:34:9d:da:88:3c:02:e4:9e:ef:82:
2d:d9:ba:ff:ed:38:18:9e:db:a3:b9:7d:ac:d2:15:b7:cf:ae:
e4:cb:6a:18:bd:d9:64:eb:13:d6:43:b0:01:55:8c:5e:d2:a5:
cc:af:38:fe:ef:20:b2:ee:36:eb:83:21:77:74:1b:dd:f4:3b:
75:da:82:c9:6a:24:0e:09:ba:31:2c:48:17:6a:8e:78:69:ae:
f8:7c:28:21:87:b0:be:68:8c:9e:ca:d2:56:58:61:d6:7d:c4:
ad:0b:f3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:10:16 2025 by rpki-client