Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/2a829b-32b3-496a-80ce-a02467f6425f/1/wQdbeoGvSd7_tsg1xWCO4LiEMso.mft
File: wQdbeoGvSd7_tsg1xWCO4LiEMso.mft (raw, json)
Hash identifier: koaTNcZibx0B12k5r2m2ca+gxJmFFxx13hcIpOHfjOk=
Subject key identifier: 57:E1:58:96:EF:59:13:41:54:E3:3E:5D:C8:61:12:8B:59:15:CF:0F
Authority key identifier: C1:07:5B:7A:81:AF:49:DE:FF:B6:C8:35:C5:60:8E:E0:B8:84:32:CA
Certificate issuer: /CN=c1075b7a81af49deffb6c835c5608ee0b88432ca
Certificate serial: 0197B7EA904E012C3AAF7757D85AD9F3423A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQdbeoGvSd7_tsg1xWCO4LiEMso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/2a829b-32b3-496a-80ce-a02467f6425f/1/wQdbeoGvSd7_tsg1xWCO4LiEMso.mft
Manifest number: E6
Signing time: Sat 28 Jun 2025 19:01:32 +0000
Manifest this update: Sat 28 Jun 2025 19:01:32 +0000
Manifest next update: Sun 29 Jun 2025 19:01:32 +0000
Files and hashes: 1: YfJtBuAEzwrAwSN_J7xGNSKCjCE.roa (hash: XmpRYRo5Vs4yfW8P8k8ClzDTbvhLktOQ+0fCN4Fj/SI=)
2: wQdbeoGvSd7_tsg1xWCO4LiEMso.crl (hash: FvzKqX2Xm000jFapnesO/JeAXf2CrrrO8PLYokcVETE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/2a829b-32b3-496a-80ce-a02467f6425f/1/wQdbeoGvSd7_tsg1xWCO4LiEMso.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/2a829b-32b3-496a-80ce-a02467f6425f/1/wQdbeoGvSd7_tsg1xWCO4LiEMso.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQdbeoGvSd7_tsg1xWCO4LiEMso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:90:4e:01:2c:3a:af:77:57:d8:5a:d9:f3:42:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1075b7a81af49deffb6c835c5608ee0b88432ca
Validity
Not Before: Jun 28 19:01:32 2025 GMT
Not After : Jun 29 19:01:32 2025 GMT
Subject: CN=57e15896ef59134154e33e5dc861128b5915cf0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a8:fe:b0:67:57:35:06:7a:61:73:96:36:88:
02:18:ab:80:6a:c6:f6:f6:f3:12:b3:7e:e3:f4:97:
d2:94:2e:67:39:15:59:0d:85:f0:3f:17:ef:66:79:
f9:9a:42:8e:f5:97:11:80:ea:99:1f:12:22:5d:c7:
cc:73:c9:3c:34:fb:3d:cc:50:19:8b:ab:79:52:41:
cb:0e:29:38:8a:b7:1e:a0:0e:5f:13:95:bd:62:70:
f2:16:4b:bc:31:f0:cf:8e:af:cd:41:f6:18:3c:bb:
bb:48:61:e9:b1:af:95:3f:9f:ae:33:0a:13:d4:91:
13:de:8f:36:97:15:cc:6b:5a:be:f8:27:99:c4:80:
94:d7:78:ba:cd:af:5d:fb:f3:73:67:fd:33:5f:03:
f2:43:04:57:72:11:cd:81:e3:8f:b3:a7:63:a7:1e:
12:d4:a8:82:8f:0b:56:c6:54:76:a7:86:19:6b:93:
d9:14:45:9c:e8:e3:37:be:71:91:b6:3c:1e:6f:fa:
4c:fc:b5:76:57:c6:4b:6a:53:d8:25:26:c1:5b:0b:
3f:47:b9:c0:e3:9d:67:53:59:9f:e6:14:b3:ae:cf:
d3:10:73:65:b4:7a:c4:9b:fe:d5:9b:5d:f1:20:ad:
87:6f:8d:66:8a:b1:99:8e:36:0b:b8:f7:68:df:c7:
26:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:E1:58:96:EF:59:13:41:54:E3:3E:5D:C8:61:12:8B:59:15:CF:0F
X509v3 Authority Key Identifier:
keyid:C1:07:5B:7A:81:AF:49:DE:FF:B6:C8:35:C5:60:8E:E0:B8:84:32:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQdbeoGvSd7_tsg1xWCO4LiEMso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2a829b-32b3-496a-80ce-a02467f6425f/1/wQdbeoGvSd7_tsg1xWCO4LiEMso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2a829b-32b3-496a-80ce-a02467f6425f/1/wQdbeoGvSd7_tsg1xWCO4LiEMso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:30:90:8b:b0:06:2b:48:67:8a:93:6c:dd:ac:b2:9b:63:33:
2d:24:2f:2e:2c:91:4d:49:b4:45:2b:88:d7:89:05:fd:12:fa:
03:4a:16:be:6e:36:42:7f:f0:3d:1c:3a:10:98:b6:81:05:81:
83:1c:eb:16:35:40:96:99:1d:f2:ee:70:20:fc:45:78:7e:1f:
61:68:0a:13:a9:cd:a8:f7:7b:bc:2a:38:a4:49:83:16:d7:f4:
fb:8b:a1:c4:07:15:27:52:ec:b2:c5:c0:5d:7f:54:5c:7a:5f:
65:a0:ac:21:b4:f4:93:32:6f:81:b7:4f:eb:ad:ac:80:b9:cd:
51:ba:23:ed:f8:30:ec:1e:ef:63:52:0d:d6:89:24:7c:eb:45:
23:6b:4f:99:8d:d9:dd:18:76:ff:8d:da:f3:7e:30:d4:c0:9b:
3e:5a:c8:bb:7a:70:c3:71:a8:e7:9c:d8:cb:b9:08:94:3a:e0:
1a:78:38:c4:ce:e2:07:e3:04:ff:9a:a0:bf:f0:66:67:e1:0a:
5e:a8:d3:03:26:d4:f8:dd:e5:bb:85:9a:7a:38:7c:09:a1:c4:
8a:c5:4c:72:9e:d2:76:dd:99:85:c0:7e:94:9f:57:43:b4:f9:
6e:07:77:f5:84:95:40:46:22:37:09:f6:83:e3:2e:21:a3:f8:
c8:59:09:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:51:46 2025 by rpki-client