Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.mft
File: wazyYNIyY6fGu2xZwZ7rxnWbYL4.mft (raw, json)
Hash identifier: WnvO1CCiZ4zkCoGncP2Ejaazv+Z6bu8bk8CDuIhrR9M=
Subject key identifier: B1:6D:1E:0E:25:02:75:89:DC:CD:1D:14:C1:2F:ED:A0:04:32:21:CE
Authority key identifier: C1:AC:F2:60:D2:32:63:A7:C6:BB:6C:59:C1:9E:EB:C6:75:9B:60:BE
Certificate issuer: /CN=c1acf260d23263a7c6bb6c59c19eebc6759b60be
Certificate serial: 0197B6A10EDAB92747154EB4C6ED50A9E98A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wazyYNIyY6fGu2xZwZ7rxnWbYL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.mft
Manifest number: 15C4
Signing time: Sat 28 Jun 2025 13:01:37 +0000
Manifest this update: Sat 28 Jun 2025 13:01:37 +0000
Manifest next update: Sun 29 Jun 2025 13:01:37 +0000
Files and hashes: 1: U48ecbKwcHeg61Lsn-9oJV9fZ1M.roa (hash: 4OZhDTAYRi1p6Bim6OrHHauK8Tj1XNwxbEYFfDDGDS8=)
2: W7Ly1Qh7TAF9UC5Ryue85_XQuXw.roa (hash: Mzqyt+0iiHuJ8ffJgOXtkPZgAbIE5kucHWjmbNGM61Q=)
3: rbSVHILo7KFdyfKkJiVN3ULREeA.roa (hash: +QOKE2skzry0xtqfIBGKUWUhJ09lXvKf9/a8XMywLNU=)
4: wazyYNIyY6fGu2xZwZ7rxnWbYL4.crl (hash: v8Bdupq12KtZAGc6Qmt9zywEphFpQFk2kPnNSZRlkxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wazyYNIyY6fGu2xZwZ7rxnWbYL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:0e:da:b9:27:47:15:4e:b4:c6:ed:50:a9:e9:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1acf260d23263a7c6bb6c59c19eebc6759b60be
Validity
Not Before: Jun 28 13:01:37 2025 GMT
Not After : Jun 29 13:01:37 2025 GMT
Subject: CN=b16d1e0e25027589dccd1d14c12feda0043221ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:fd:05:57:dd:ab:e5:1d:a9:fe:28:81:9c:3c:
3b:00:9e:15:d1:c6:1b:99:a1:61:ce:d0:10:95:f8:
bb:b7:54:03:b4:be:a7:e4:59:2a:4f:e5:4a:ab:be:
bb:20:38:92:0d:b8:31:23:3a:88:7a:32:e4:e9:66:
58:67:f4:4e:e5:58:ab:6c:5a:92:f8:3f:dd:82:e8:
cd:69:e7:48:e3:b6:8c:55:12:6d:b5:58:b1:9a:bd:
d1:b1:8d:f7:68:e6:65:34:c7:18:89:c5:ee:24:4e:
57:f9:4d:6a:5f:25:64:a6:13:6d:2c:92:80:d7:5f:
e5:0f:2e:95:67:c1:9e:da:8f:f3:2b:29:d5:4b:5a:
d2:4d:25:1c:f7:0f:71:b0:d9:0a:ea:06:ca:be:18:
eb:ae:b5:4e:0e:80:3f:1f:f9:70:8a:a3:c6:92:94:
95:7a:36:4b:21:3b:3c:25:85:f4:f9:98:a8:16:3d:
11:58:53:28:26:d4:d8:f3:6a:7d:51:95:4d:2e:9d:
dd:52:25:a1:c4:e9:22:8c:7f:0f:59:79:eb:87:e0:
9b:8b:71:18:27:cb:03:f0:49:bd:05:fe:29:09:52:
6a:16:18:cd:0f:f9:17:a6:f8:65:0c:ea:65:a6:e7:
2f:b1:2e:93:5b:4e:66:54:d9:a1:d4:60:8e:ea:ac:
60:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:6D:1E:0E:25:02:75:89:DC:CD:1D:14:C1:2F:ED:A0:04:32:21:CE
X509v3 Authority Key Identifier:
keyid:C1:AC:F2:60:D2:32:63:A7:C6:BB:6C:59:C1:9E:EB:C6:75:9B:60:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wazyYNIyY6fGu2xZwZ7rxnWbYL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:cc:fd:48:d9:1b:e4:00:f3:c8:2e:a6:54:03:6a:90:b4:a7:
e1:8c:1a:75:35:6a:fa:2f:97:df:71:ab:e6:5e:b2:71:3f:22:
d0:dc:3c:94:e7:8e:f3:f4:39:91:df:e9:f7:94:67:2b:a7:ec:
88:3b:1e:04:51:55:67:4d:ed:94:e9:03:b6:89:fb:b4:dc:6b:
3f:f9:2c:62:bc:bb:46:a1:5a:55:bd:54:6f:74:ea:15:9f:80:
2d:aa:9e:fd:02:ae:29:30:80:15:30:42:1e:68:71:a9:4a:30:
8e:d7:5b:22:50:d5:68:d5:65:7c:3d:b1:ac:ef:dd:34:c0:db:
00:e8:c7:27:bb:aa:24:31:08:e6:fa:b5:30:60:d3:7b:b4:48:
5e:fe:01:dd:93:c2:f9:35:ba:6b:5d:40:6c:8e:e4:17:d8:b0:
1b:57:88:d7:fd:eb:3b:aa:f5:87:ee:32:a7:b8:60:5c:a3:21:
ad:28:ee:d6:d2:22:3f:f1:97:9b:8a:f3:b5:7b:55:3a:3c:b1:
f8:89:2d:86:33:1c:17:53:58:3b:a0:ff:bf:35:68:b2:34:a0:
11:e5:38:77:bb:df:34:18:3a:9f:a1:1d:59:f2:f4:45:1c:26:
95:ed:fc:16:7b:75:ba:8f:d5:02:6e:b6:9c:22:d4:e5:d2:59:
47:4a:5f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:55:51 2025 by rpki-client