Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.mft
File: woWhR044Yn4wGlUb4076RYKlzzk.mft (raw, json)
Hash identifier: +rs/iDbOpiJzQNAZd835IXUNPSyXwGJoyY49SFlMLgk=
Subject key identifier: EE:6E:70:5B:16:81:03:61:9F:3C:82:FC:7C:3E:DE:FE:32:E3:A4:54
Authority key identifier: C2:85:A1:47:4E:38:62:7E:30:1A:55:1B:E3:4E:FA:45:82:A5:CF:39
Certificate issuer: /CN=c285a1474e38627e301a551be34efa4582a5cf39
Certificate serial: 0197B70F66C1CED99B8401E06340831F5D70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/woWhR044Yn4wGlUb4076RYKlzzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 15:02:09 +0000
Manifest this update: Sat 28 Jun 2025 15:02:09 +0000
Manifest next update: Sun 29 Jun 2025 15:02:09 +0000
Files and hashes: 1: BVOoOEB4gLobrgdxyI5-9zlLWgE.roa (hash: pTz91HcnSysQwLiCozFtJaXWh/WUZ9JSyAK8aIEd67c=)
2: TKlbM4JoTI14SvlWl9KxKwEmigw.roa (hash: YEHXScxruB3ZAlC0fbNpVAnfjw2qlaMRSrlrmf/M0XY=)
3: woWhR044Yn4wGlUb4076RYKlzzk.crl (hash: fS4CcQZXTiv0FCa1UdJ48mPgQ2xxW25CD5Q9TXV7D64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/woWhR044Yn4wGlUb4076RYKlzzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:66:c1:ce:d9:9b:84:01:e0:63:40:83:1f:5d:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c285a1474e38627e301a551be34efa4582a5cf39
Validity
Not Before: Jun 28 15:02:09 2025 GMT
Not After : Jun 29 15:02:09 2025 GMT
Subject: CN=ee6e705b168103619f3c82fc7c3edefe32e3a454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:62:51:eb:4d:86:ae:80:46:34:3c:c3:9b:96:
25:53:37:16:05:e8:c1:64:6e:13:51:fc:f8:08:69:
a1:fe:c4:54:46:d3:60:9a:8a:25:36:94:81:c1:84:
cf:6c:eb:5b:6d:f7:bf:78:41:5c:8f:48:ce:d8:f7:
22:f5:38:65:79:24:5c:34:a2:f2:17:4b:e6:a0:82:
9d:79:29:ce:f6:ec:8f:cf:76:b4:04:bb:d1:ba:40:
e4:b3:b9:3f:03:04:bc:a7:b6:c9:94:c4:38:89:77:
b4:2a:ab:aa:d5:03:67:cf:8c:55:98:1a:14:53:b7:
f1:22:98:f8:a4:0e:f1:31:a8:ff:1d:d7:1a:e6:8e:
19:ca:3c:2a:e6:2a:71:2b:d2:ea:b5:8d:19:ba:67:
38:56:f3:46:77:2e:d5:fc:e8:c9:77:1a:01:2d:d0:
c3:5e:50:75:5c:ba:d2:ea:dc:cd:37:b7:90:5c:d8:
08:d9:5b:69:9f:2a:cd:a0:59:3a:a0:74:db:4f:2f:
4b:63:45:3f:d7:3b:6b:31:84:6e:b2:78:f6:ad:80:
84:10:78:e3:ab:ce:c9:30:01:4f:75:3d:57:d3:e9:
2c:97:7a:f1:99:d3:ea:42:9d:d6:71:56:b9:03:9f:
5d:10:a8:ea:9c:50:a0:24:9b:99:b0:7e:06:99:99:
77:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:6E:70:5B:16:81:03:61:9F:3C:82:FC:7C:3E:DE:FE:32:E3:A4:54
X509v3 Authority Key Identifier:
keyid:C2:85:A1:47:4E:38:62:7E:30:1A:55:1B:E3:4E:FA:45:82:A5:CF:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/woWhR044Yn4wGlUb4076RYKlzzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:3b:cf:c2:7c:ba:01:ca:33:91:65:81:d4:54:3e:e4:39:06:
ce:ce:ee:85:50:0c:9b:8d:63:ed:85:b7:41:cf:52:89:82:40:
b0:7f:ff:01:b5:fb:77:1a:4f:db:77:0b:2e:92:00:b4:e1:b4:
db:cb:f3:0c:db:36:8c:83:7b:7f:a6:7f:6e:49:6a:3e:c5:cc:
69:68:fb:54:ec:0e:64:cc:d0:1f:04:5b:7e:ec:7d:64:22:e3:
0d:c5:6c:03:dc:2d:1c:f9:fa:ed:c4:1a:92:ea:27:46:b4:7b:
1d:c6:8d:32:26:0d:e4:7e:a0:b9:8c:c0:98:b3:6b:9a:48:a9:
33:4d:82:4e:85:b9:2b:8d:de:ba:21:ba:5c:f2:58:cb:e8:e6:
27:b5:96:8f:c1:22:6b:cf:27:e2:6d:00:81:7c:81:50:bc:9f:
f7:90:fd:e6:80:4d:28:a8:b5:1c:b2:8b:00:90:10:c9:fd:a2:
52:fd:de:cd:7a:3c:5e:f8:1f:b8:5d:2b:0f:87:15:9b:be:4e:
ce:68:36:fd:7d:5a:73:ec:b0:66:f2:b1:79:f7:05:03:9c:cd:
63:25:65:e5:a6:12:53:08:ca:76:02:96:36:6b:b9:1b:70:6f:
da:a9:ef:3f:45:cf:6c:d6:44:01:9d:2a:8e:c7:2d:12:23:47:
a8:89:a3:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:46:03 2025 by rpki-client