Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/d2362e-3256-4244-858a-ee56f1afc366/1/wRq5FoIcWjFIzhJSungByqKrSRQ.mft
File: wRq5FoIcWjFIzhJSungByqKrSRQ.mft (raw, json)
Hash identifier: h9TlSXvN+tYrBGB/IMbi+3knRAHDux4HGteyxVe6tZU=
Subject key identifier: DF:36:93:CA:DE:7F:9B:59:A7:8A:21:8B:46:78:12:F6:15:2A:A4:1B
Authority key identifier: C1:1A:B9:16:82:1C:5A:31:48:CE:12:52:BA:78:01:CA:A2:AB:49:14
Certificate issuer: /CN=c11ab916821c5a3148ce1252ba7801caa2ab4914
Certificate serial: 0197C6EFF49A638766655987AB6E783AAC36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wRq5FoIcWjFIzhJSungByqKrSRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/d2362e-3256-4244-858a-ee56f1afc366/1/wRq5FoIcWjFIzhJSungByqKrSRQ.mft
Manifest number: 15BC
Signing time: Tue 01 Jul 2025 17:01:43 +0000
Manifest this update: Tue 01 Jul 2025 17:01:43 +0000
Manifest next update: Wed 02 Jul 2025 17:01:43 +0000
Files and hashes: 1: jmxXPs-eFsLMyQfsEqQE-gTcJzg.roa (hash: JMdb9ncK/VZi/Drly8ri6tbObrJ2pnr+vB9E79datFA=)
2: wRq5FoIcWjFIzhJSungByqKrSRQ.crl (hash: ThLd+Hl5kBBIfMde+rJsq9zHKX0TsgmqAZVHkhedOvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/d2362e-3256-4244-858a-ee56f1afc366/1/wRq5FoIcWjFIzhJSungByqKrSRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/d2362e-3256-4244-858a-ee56f1afc366/1/wRq5FoIcWjFIzhJSungByqKrSRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wRq5FoIcWjFIzhJSungByqKrSRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:ef:f4:9a:63:87:66:65:59:87:ab:6e:78:3a:ac:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c11ab916821c5a3148ce1252ba7801caa2ab4914
Validity
Not Before: Jul 1 17:01:43 2025 GMT
Not After : Jul 2 17:01:43 2025 GMT
Subject: CN=df3693cade7f9b59a78a218b467812f6152aa41b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:12:b0:40:1a:74:0b:54:ed:d0:dd:1f:18:f0:
f5:95:ae:e1:4d:76:bf:62:6e:69:e2:f2:43:15:f1:
a9:f3:a5:eb:0f:25:1e:ff:bd:13:38:55:56:56:cd:
8b:36:33:7a:18:79:84:32:a8:e8:4c:a3:a5:90:0d:
75:41:97:af:00:13:ca:e9:d4:53:6b:8c:7e:d2:1a:
e6:02:7c:da:9f:8a:b8:d7:12:16:12:0b:17:cd:0e:
fe:59:de:cc:87:30:22:e8:6f:b3:60:e8:2a:00:84:
14:ae:eb:0b:f7:10:d2:ce:a3:d3:b5:be:a3:52:ef:
08:df:99:77:14:56:1f:a8:fa:72:8e:62:b2:9d:c7:
7a:fc:45:35:4a:c0:e3:e7:97:cb:e1:60:e0:19:c5:
ef:29:de:51:3f:8d:fc:30:13:33:f4:ce:de:df:1a:
d1:8e:e8:4c:b8:c4:da:5c:e3:f9:ec:7c:b0:62:78:
a7:7e:85:60:61:19:52:13:0d:8b:e2:d0:29:b1:43:
aa:39:f3:37:0c:2c:16:20:6e:30:25:b8:d3:65:e7:
75:89:ca:69:7f:42:cb:a9:c0:45:de:a2:9c:ab:9a:
b3:d7:7a:17:25:64:1d:c2:0b:03:19:e5:30:e8:a0:
41:25:8e:4d:8b:0c:dd:9d:96:a5:ca:e6:ad:53:10:
5a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:36:93:CA:DE:7F:9B:59:A7:8A:21:8B:46:78:12:F6:15:2A:A4:1B
X509v3 Authority Key Identifier:
keyid:C1:1A:B9:16:82:1C:5A:31:48:CE:12:52:BA:78:01:CA:A2:AB:49:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRq5FoIcWjFIzhJSungByqKrSRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d2362e-3256-4244-858a-ee56f1afc366/1/wRq5FoIcWjFIzhJSungByqKrSRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d2362e-3256-4244-858a-ee56f1afc366/1/wRq5FoIcWjFIzhJSungByqKrSRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:68:b0:fa:55:ec:43:64:78:52:9c:99:d6:6b:9b:67:a1:2c:
a7:a0:e6:94:7c:71:67:db:39:f9:f2:48:f1:2e:5b:44:d7:9e:
ba:af:13:b9:e6:6a:ff:aa:1f:81:61:34:5a:8a:79:0d:64:2e:
3b:6a:b2:99:ec:86:4d:4f:19:6c:fd:81:2c:97:f4:66:68:58:
b2:34:85:09:ba:93:a1:99:42:19:14:b3:2f:d3:6b:9c:b1:68:
6a:26:84:1d:6e:13:b7:91:82:f6:9c:97:07:8e:e9:c2:ab:40:
f2:d9:9f:ce:15:10:9d:5f:d3:d7:35:d5:7b:68:f5:83:7c:d0:
ec:6c:c6:7c:5a:b9:c0:41:20:24:5b:e3:54:91:f1:fd:8d:49:
f7:96:d6:42:a8:bd:ba:76:f8:c4:b2:07:68:ce:7c:cf:14:65:
41:03:7d:3a:27:9d:ff:bc:13:a9:45:48:e7:2d:d2:b8:d0:e4:
93:ad:bb:8e:94:84:f0:bd:d4:2e:69:23:97:0a:46:56:93:af:
73:7d:9c:37:c7:3c:28:5d:83:87:a8:99:72:f3:3d:38:84:94:
90:f8:39:e1:11:b1:55:94:d5:bb:48:1e:55:5f:a0:09:3b:82:
96:34:0e:19:bf:68:bf:26:da:13:18:8b:f9:c1:ce:59:c2:cf:
27:d0:74:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:46:06 2025 by rpki-client