Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.mft
File: wU7kzo087uI-Amb8r1RIIK5BB4g.mft (raw, json)
Hash identifier: fDUZbQk9i9V1y1OQBiUIovdFH9OLqujDmRA5AQuRVD4=
Subject key identifier: 6D:E9:4A:BF:42:84:62:79:75:0A:D0:6F:5A:62:D1:E3:3E:53:42:47
Authority key identifier: C1:4E:E4:CE:8D:3C:EE:E2:3E:02:66:FC:AF:54:48:20:AE:41:07:88
Certificate issuer: /CN=c14ee4ce8d3ceee23e0266fcaf544820ae410788
Certificate serial: 0197BAEAE46EC491DA4CF52B8644BC1A5418
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wU7kzo087uI-Amb8r1RIIK5BB4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.mft
Manifest number: 0212
Signing time: Sun 29 Jun 2025 09:00:45 +0000
Manifest this update: Sun 29 Jun 2025 09:00:45 +0000
Manifest next update: Mon 30 Jun 2025 09:00:45 +0000
Files and hashes: 1: StpUpn9lX23TO-Oe-4PI79KxNG0.roa (hash: Y4gPgVsX/dvV/I4lGCjA++A6e1J5MarmPPrWMNyloHc=)
2: wU7kzo087uI-Amb8r1RIIK5BB4g.crl (hash: z/UKiucTCwyhsdmzSXqbdGj25IMG/QYqDAiT87/YzIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/wU7kzo087uI-Amb8r1RIIK5BB4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:ea:e4:6e:c4:91:da:4c:f5:2b:86:44:bc:1a:54:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c14ee4ce8d3ceee23e0266fcaf544820ae410788
Validity
Not Before: Jun 29 09:00:45 2025 GMT
Not After : Jun 30 09:00:45 2025 GMT
Subject: CN=6de94abf42846279750ad06f5a62d1e33e534247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:11:c9:fb:02:40:5d:c4:ee:fa:00:52:25:dc:
d0:57:78:c0:a0:5f:1e:a1:43:8b:24:84:fc:e8:4e:
ad:4f:bf:9c:ac:89:2f:6a:18:07:ef:a2:cb:07:d6:
09:4b:af:e5:03:41:0a:c3:40:ff:d8:c5:b5:a5:85:
9a:1c:96:73:a5:40:18:04:14:92:ae:c4:c6:f9:7e:
be:1f:c2:cd:5e:dd:f2:57:b8:87:0e:60:f2:18:43:
51:54:03:9b:bb:03:e8:56:21:73:e0:fe:0e:d7:e1:
52:af:74:f0:b3:33:67:56:2d:0c:0f:8f:e9:49:88:
a6:a4:8f:8a:04:d2:a1:2d:82:93:2a:32:30:43:98:
0c:94:45:14:59:e1:2d:58:c3:47:44:b6:e5:80:73:
c1:b2:dc:bd:1f:73:22:32:92:7d:1b:7d:33:67:58:
3b:aa:c7:f6:57:79:cd:0e:51:d3:cf:1d:05:d5:98:
c5:b1:84:30:fd:46:98:43:f8:29:d4:4f:97:6d:3c:
67:85:a7:6c:42:7e:85:ed:2f:68:c5:db:0b:98:0f:
f6:5b:8b:48:d4:c9:7b:96:eb:37:ce:8f:51:71:fa:
11:d5:68:b0:00:b4:c7:f5:c5:21:ea:0f:57:7c:7e:
5d:46:d1:ff:84:79:38:ca:58:23:70:af:89:f3:bb:
ee:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:E9:4A:BF:42:84:62:79:75:0A:D0:6F:5A:62:D1:E3:3E:53:42:47
X509v3 Authority Key Identifier:
keyid:C1:4E:E4:CE:8D:3C:EE:E2:3E:02:66:FC:AF:54:48:20:AE:41:07:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wU7kzo087uI-Amb8r1RIIK5BB4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:9d:a1:67:3f:0e:0c:06:6d:2c:6d:76:75:04:03:50:9f:f3:
ef:53:fc:4c:75:ff:ba:0e:58:cb:a7:ba:5b:2f:e9:69:59:4f:
80:6b:b3:6e:42:62:64:bc:5a:6e:39:75:64:e1:13:83:06:88:
ca:19:f4:71:6d:68:7c:10:8a:1a:54:2d:25:06:3e:d6:21:ff:
ed:e2:e5:ad:1e:e8:34:c8:08:34:19:4e:7e:5c:61:92:14:01:
1d:e6:0f:b1:3a:c4:8b:3c:98:ad:c1:ee:e4:0b:ee:d3:20:70:
41:93:d9:43:63:cc:04:e6:6f:2b:3f:ef:8d:be:f8:68:41:e4:
5e:53:1e:3a:a6:a0:ea:72:70:32:9c:44:46:81:ab:84:00:d8:
33:a3:9b:74:a9:4d:6f:3b:40:21:ca:2b:63:db:17:06:90:ff:
4e:78:f2:91:66:2f:c9:ae:0c:3e:c5:f4:b1:8d:09:91:d0:83:
86:d8:35:fa:e9:32:78:46:f2:c1:92:ae:42:08:23:d3:3e:39:
3b:9a:82:0e:90:db:0c:46:b4:09:98:b9:c3:75:71:46:3b:21:
d0:20:7c:96:a4:24:e5:fe:f5:89:a0:55:77:16:c7:42:3d:de:
19:db:54:60:5f:85:4c:68:08:a7:7b:9b:de:88:15:4d:00:b0:
48:6c:07:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:26:05 2025 by rpki-client