Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/cc02e1-8b36-42a3-b756-be3485706a7f/1/wvX9MCMFUknyE9FcugAMoCa7b6M.mft
File: wvX9MCMFUknyE9FcugAMoCa7b6M.mft (raw, json)
Hash identifier: /9oF30EBN9NhQA095sh8YoBojRftiCLT3JuoSOdsUEg=
Subject key identifier: 32:FA:7E:93:E5:87:23:86:60:0E:BF:C5:A7:D9:74:95:D3:ED:8F:2C
Authority key identifier: C2:F5:FD:30:23:05:52:49:F2:13:D1:5C:BA:00:0C:A0:26:BB:6F:A3
Certificate issuer: /CN=c2f5fd3023055249f213d15cba000ca026bb6fa3
Certificate serial: 0197B8C6060791B2D1AEB99D313879240E7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wvX9MCMFUknyE9FcugAMoCa7b6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/cc02e1-8b36-42a3-b756-be3485706a7f/1/wvX9MCMFUknyE9FcugAMoCa7b6M.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 23:01:14 +0000
Manifest this update: Sat 28 Jun 2025 23:01:14 +0000
Manifest next update: Sun 29 Jun 2025 23:01:14 +0000
Files and hashes: 1: BMHVHu-JbszVmlaPK0QGdQjobqk.roa (hash: G29ynB8gmG1T9KHI25JYWbt3xJ8CodHiSO5tv95eYEk=)
2: wvX9MCMFUknyE9FcugAMoCa7b6M.crl (hash: Y9H9SGL+jlh1ZUHCwGmt2ITjDx7LJvhsiz35nButZ78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/cc02e1-8b36-42a3-b756-be3485706a7f/1/wvX9MCMFUknyE9FcugAMoCa7b6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/cc02e1-8b36-42a3-b756-be3485706a7f/1/wvX9MCMFUknyE9FcugAMoCa7b6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/wvX9MCMFUknyE9FcugAMoCa7b6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c6:06:07:91:b2:d1:ae:b9:9d:31:38:79:24:0e:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2f5fd3023055249f213d15cba000ca026bb6fa3
Validity
Not Before: Jun 28 23:01:14 2025 GMT
Not After : Jun 29 23:01:14 2025 GMT
Subject: CN=32fa7e93e5872386600ebfc5a7d97495d3ed8f2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:81:83:e2:8c:fa:fa:8c:aa:b3:1a:c3:a5:12:
ea:05:78:f3:33:c9:32:5e:ca:a2:b8:ce:71:38:93:
82:b2:6e:5c:8d:2b:c7:f3:1a:0f:df:ee:59:7d:6d:
04:12:00:8a:58:72:5d:a0:82:42:89:b8:db:98:a6:
ac:3f:e9:1e:fd:36:3c:50:66:49:bf:dc:98:78:9b:
fd:0c:c2:b8:ab:33:47:96:5d:2c:a9:a8:05:13:57:
5f:cc:f2:fe:e4:fc:4a:01:54:39:0f:a4:6a:8a:16:
56:61:e9:0f:4a:dd:9c:92:bb:3a:01:73:9a:f1:a1:
3a:d8:b0:ca:74:3e:79:01:28:bf:83:a2:bb:85:34:
56:13:a8:a2:50:6e:45:cf:56:5a:e4:7f:a2:46:da:
b2:92:bb:3e:40:89:3a:96:6a:ee:95:5c:c9:6f:16:
59:c1:9f:54:a5:50:03:8b:86:fb:e6:a0:34:97:88:
c8:22:1c:93:ac:99:db:e0:38:0a:af:02:24:1a:c2:
90:95:83:35:09:62:64:12:04:c1:18:e3:0a:b3:6b:
5f:6f:79:f6:f3:04:21:d5:f0:d9:38:76:c1:6f:53:
5f:29:c8:3f:6e:8c:f9:10:7c:59:5b:a8:e6:bb:32:
8d:ac:61:00:f7:d4:d7:af:ba:ca:bd:07:d2:94:0b:
81:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:FA:7E:93:E5:87:23:86:60:0E:BF:C5:A7:D9:74:95:D3:ED:8F:2C
X509v3 Authority Key Identifier:
keyid:C2:F5:FD:30:23:05:52:49:F2:13:D1:5C:BA:00:0C:A0:26:BB:6F:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wvX9MCMFUknyE9FcugAMoCa7b6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/cc02e1-8b36-42a3-b756-be3485706a7f/1/wvX9MCMFUknyE9FcugAMoCa7b6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/cc02e1-8b36-42a3-b756-be3485706a7f/1/wvX9MCMFUknyE9FcugAMoCa7b6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:c3:19:bb:0b:fe:4f:0b:35:1e:49:4e:1a:72:0d:b0:57:83:
fe:1b:e4:10:e7:ca:59:02:f6:d9:70:74:f1:49:0e:eb:87:f3:
42:33:0e:5c:0e:e7:33:95:51:f2:d1:f3:7c:d3:73:9e:48:56:
87:eb:4b:76:3d:3e:b4:1a:02:1a:88:e2:b7:36:16:9f:92:0f:
65:d5:08:53:f1:ad:95:4e:d3:17:4a:f7:4a:30:95:32:d4:f8:
ef:03:a7:fb:3b:c2:8f:b3:da:30:db:43:34:ae:8e:b9:79:b4:
fd:a4:1a:17:40:ed:82:3f:3c:14:bf:1f:4e:9a:0c:2e:10:35:
80:16:7a:72:87:ab:fc:b3:df:fb:01:1e:50:64:ed:12:90:9a:
96:a2:de:2f:ff:20:ef:b8:ac:6a:86:98:43:6d:e8:6e:eb:c6:
6d:56:ff:ce:94:c9:da:68:29:c5:d1:39:3a:6d:e7:f6:d5:65:
aa:72:66:cf:49:4b:05:2c:bb:8a:0d:48:12:7a:0a:be:0e:e0:
f6:8a:c5:47:55:8b:68:3a:64:5b:51:60:8b:2e:c4:9e:ae:b7:
23:82:6c:fd:8a:93:1b:dc:f4:bf:7b:fa:6e:61:53:78:0f:e4:
36:67:7e:e4:be:0b:ab:f8:b4:24:84:68:cd:d0:b6:df:b9:ba:
6b:a3:44:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:05:19 2025 by rpki-client