Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
File: wi1VOyjF0OpbHvYMm84z31C8tJM.mft (raw, json)
Hash identifier: 5WG49porVfqvlqvlGe7Po8vUxEPXZFNpa+rvEXX9NY0=
Subject key identifier: 26:9E:1D:C8:10:73:A0:BE:69:46:B6:6D:6C:B9:3C:99:20:03:A4:48
Authority key identifier: C2:2D:55:3B:28:C5:D0:EA:5B:1E:F6:0C:9B:CE:33:DF:50:BC:B4:93
Certificate issuer: /CN=c22d553b28c5d0ea5b1ef60c9bce33df50bcb493
Certificate serial: 0197B7B3189ED9BB014A15C2C38A3BE082F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wi1VOyjF0OpbHvYMm84z31C8tJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
Manifest number: 0EB2
Signing time: Sat 28 Jun 2025 18:00:57 +0000
Manifest this update: Sat 28 Jun 2025 18:00:57 +0000
Manifest next update: Sun 29 Jun 2025 18:00:57 +0000
Files and hashes: 1: 2if-W7_9B6ndVwa4CXKbXlfYipY.roa (hash: x6w8qlU6igwl5cXDxoZUE8Lr1i8+UZJJXlmem9XWOSg=)
2: iNIpA6NRoHEtD1Gdwv0RcZxMEOY.roa (hash: QoWSCTkZW/GH9j1mmy2Sv0c+Jd5oUQpoqRVhrzgy26s=)
3: wi1VOyjF0OpbHvYMm84z31C8tJM.crl (hash: AiAf08w16kNZsnN1y+d/U24PdPqzNRKD7sYlrce+i58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wi1VOyjF0OpbHvYMm84z31C8tJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:18:9e:d9:bb:01:4a:15:c2:c3:8a:3b:e0:82:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c22d553b28c5d0ea5b1ef60c9bce33df50bcb493
Validity
Not Before: Jun 28 18:00:57 2025 GMT
Not After : Jun 29 18:00:57 2025 GMT
Subject: CN=269e1dc81073a0be6946b66d6cb93c992003a448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ff:b3:c3:89:72:70:80:b7:70:a2:e2:ed:a6:
83:48:55:9e:bf:f5:24:63:e9:fe:21:99:00:b1:23:
c2:cb:72:9e:f5:9a:90:d5:b3:28:68:3c:48:05:ac:
1b:c1:17:90:f0:32:e1:02:aa:33:1e:1f:7a:96:94:
82:13:43:86:f9:45:05:8a:9b:69:1e:a1:15:8b:6d:
b5:20:67:6a:23:ce:d2:cb:20:45:73:a9:01:b5:a1:
b4:5b:98:78:c1:ba:dd:1b:fb:b9:59:37:9f:50:ed:
d5:86:a6:24:a5:a6:52:16:6b:49:45:48:b8:9a:3b:
48:87:cb:1f:bc:35:35:2f:df:cd:d5:02:7d:d8:fa:
39:40:a0:c2:7a:0b:a0:10:be:a7:eb:9b:02:04:37:
ac:01:c4:b5:10:8f:e1:94:5f:7a:49:9a:87:b7:05:
eb:4a:81:ec:b9:16:a7:94:e8:a9:0c:41:d8:de:91:
84:24:4b:3b:b1:3e:cf:80:3c:b8:0e:e6:0a:31:77:
0e:fb:08:97:1b:60:f3:c5:a4:56:35:62:36:78:3f:
24:c4:02:a0:58:af:75:c1:d7:16:fe:06:92:0d:d2:
08:aa:84:9e:3e:20:08:73:b7:f1:b0:30:a4:39:75:
5d:85:9e:39:f5:82:c7:95:35:4d:89:4a:f7:41:b7:
43:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:9E:1D:C8:10:73:A0:BE:69:46:B6:6D:6C:B9:3C:99:20:03:A4:48
X509v3 Authority Key Identifier:
keyid:C2:2D:55:3B:28:C5:D0:EA:5B:1E:F6:0C:9B:CE:33:DF:50:BC:B4:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wi1VOyjF0OpbHvYMm84z31C8tJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:1f:1f:e8:25:ce:e3:3c:58:86:93:e1:51:34:2c:03:ab:cf:
c3:79:cc:e8:83:28:94:93:e2:9a:71:68:24:fd:f6:61:b6:75:
e9:6e:56:81:66:b5:ff:fa:83:b2:57:37:fc:53:81:b6:e3:ca:
25:81:8a:da:21:b3:78:c3:16:4e:a1:66:66:24:88:72:15:e7:
4a:eb:e2:e7:70:b6:38:4a:54:91:6b:b5:2d:3c:98:44:2b:ef:
4c:7d:c4:89:4a:c2:b1:14:ac:b7:49:ff:f8:1b:ba:f4:ba:4b:
81:cb:87:3f:e9:f8:b6:fa:13:58:e4:1b:96:82:1f:72:c1:14:
a4:fa:ce:53:8c:d0:32:de:e2:d4:3e:25:b0:60:70:6f:a6:d5:
1c:03:4e:05:01:06:6d:6e:ce:ca:fd:73:c6:c2:80:00:9d:53:
54:95:83:74:a0:55:44:6c:a8:16:f7:32:c6:7f:47:ac:ab:e6:
8b:1f:f1:08:fc:d5:5d:e8:eb:fd:8f:ff:34:c1:45:ee:d4:aa:
55:98:24:53:13:bc:37:33:c0:33:8d:5a:84:35:ca:ff:0f:42:
27:d0:04:4d:86:47:43:02:1e:a4:87:c5:53:4f:62:81:03:18:
5c:2a:fe:ef:89:63:3b:7f:85:ce:4f:3a:5f:11:2f:3d:82:d0:
6d:db:2f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:45:18 2025 by rpki-client