Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft
File: wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft (raw, json)
Hash identifier: YQ/jtH/99bJ6U0DXbRrHofACYkSmZ9S5gzeCryDZZjk=
Subject key identifier: EA:4B:27:43:E2:FA:3C:F0:7D:30:8D:C8:CA:4E:AC:6A:09:40:BF:AB
Authority key identifier: C0:A2:33:59:0D:E5:86:E0:C5:58:21:C6:F6:D5:73:2A:FC:84:12:29
Certificate issuer: /CN=c0a233590de586e0c55821c6f6d5732afc841229
Certificate serial: 0197B8FD121207F09BD72E41C02284557C7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wKIzWQ3lhuDFWCHG9tVzKvyEEik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft
Manifest number: 15BB
Signing time: Sun 29 Jun 2025 00:01:22 +0000
Manifest this update: Sun 29 Jun 2025 00:01:22 +0000
Manifest next update: Mon 30 Jun 2025 00:01:22 +0000
Files and hashes: 1: 2ckuuQNGelqhfIDU0HMZ3G_jIN4.roa (hash: Ly3hlzB/x5T87M29FpEs5LMZzWEyS3uYaMyLbALjnTU=)
2: wKIzWQ3lhuDFWCHG9tVzKvyEEik.crl (hash: lT2VKk6UySWbtSa9DhTKRJyVEUsltXPJPlbH2ViiJDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft
rsync://rpki.ripe.net/repository/DEFAULT/wKIzWQ3lhuDFWCHG9tVzKvyEEik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:12:12:07:f0:9b:d7:2e:41:c0:22:84:55:7c:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0a233590de586e0c55821c6f6d5732afc841229
Validity
Not Before: Jun 29 00:01:22 2025 GMT
Not After : Jun 30 00:01:22 2025 GMT
Subject: CN=ea4b2743e2fa3cf07d308dc8ca4eac6a0940bfab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:cb:b5:3d:7a:20:a4:62:44:11:05:b1:1c:e5:
54:90:ee:6d:b6:1c:ea:8e:38:fe:b4:c4:5e:96:aa:
84:8c:b9:48:d8:eb:2e:ed:9f:bd:15:50:69:4f:e1:
4e:42:ab:eb:a5:5d:18:c8:bd:47:79:3a:d1:4f:ac:
91:bf:04:87:ee:3f:b5:28:8e:91:da:61:28:2f:5b:
1e:73:65:fb:d4:cb:6e:48:63:59:f5:51:8e:62:2f:
f1:db:1b:51:7d:e7:c0:23:c6:0e:6d:c1:df:2e:18:
eb:d7:16:7c:49:b3:72:98:10:52:ab:3b:2f:64:e5:
af:b6:d1:f4:18:c6:77:4f:1d:77:2b:e4:68:f2:92:
63:ee:1e:72:8e:84:c9:13:18:20:c4:df:3f:38:68:
55:65:22:dc:4a:b8:24:91:4e:af:e7:56:60:85:69:
3d:be:8f:99:68:3f:a1:cd:f3:8c:8c:be:bf:26:6a:
f8:28:76:27:12:2a:1e:ca:bd:00:03:80:64:4f:9e:
e5:04:91:ce:73:7c:7d:d9:2d:a6:c8:29:d1:02:31:
52:c4:1e:83:4d:b2:8c:9c:99:ff:cb:f0:b6:46:f8:
78:bb:fb:4f:31:66:a4:0b:1f:16:9e:f8:39:ca:c7:
85:87:7a:7b:b3:78:38:a3:c7:88:62:fe:93:c5:2c:
99:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:4B:27:43:E2:FA:3C:F0:7D:30:8D:C8:CA:4E:AC:6A:09:40:BF:AB
X509v3 Authority Key Identifier:
keyid:C0:A2:33:59:0D:E5:86:E0:C5:58:21:C6:F6:D5:73:2A:FC:84:12:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKIzWQ3lhuDFWCHG9tVzKvyEEik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:d3:d1:a4:2b:2d:63:27:5d:98:0f:04:35:1b:78:8b:29:8b:
8f:f7:37:9d:b1:a1:c5:f5:96:02:08:77:92:4b:ba:88:20:5e:
c5:72:ac:0e:7e:f7:dc:a0:4a:71:69:1a:e6:bc:38:09:3d:ec:
f7:b1:79:06:94:9e:ed:4b:2a:9b:ad:e6:80:98:79:53:a4:a2:
64:19:58:41:4f:af:e1:8d:a0:c1:2a:00:d8:79:97:10:b1:9b:
cf:be:08:19:55:b3:0f:78:16:da:3e:d4:ef:b7:4d:26:7d:80:
31:eb:13:0b:e0:1c:95:28:23:c3:a0:ce:2f:2b:e1:22:f1:02:
9e:c2:59:14:6d:0d:0a:b1:e5:73:54:f7:59:94:9d:86:6d:0d:
c7:fa:44:87:4e:e7:f2:96:a7:46:6d:75:7f:3c:4f:70:00:2b:
12:36:f4:92:36:b0:f1:cd:10:b6:29:8a:2d:63:ec:34:f1:ec:
53:10:a5:f0:de:55:13:04:dd:41:8a:d7:36:f9:19:7f:42:5b:
86:66:67:9e:82:e9:cc:2b:17:49:37:17:6f:fe:c0:58:9b:ae:
3c:78:39:29:84:57:d3:47:46:88:1c:4d:5c:2a:7b:ac:ea:b6:
8d:d5:bc:4c:b9:14:78:ad:65:52:17:8e:99:29:c4:f0:e8:9b:
c4:b1:3c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:31:51 2025 by rpki-client