Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft
File: wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft (raw, json)
Hash identifier: WqFEWeF9htKJbJWSR7jpFsnzs5r7MTDP5lQ2PwfM/tw=
Subject key identifier: AC:0F:2A:48:8E:F0:B4:D8:64:81:3A:F8:92:E4:C3:CD:41:75:DF:03
Authority key identifier: C3:35:8E:5C:4F:80:A8:20:6C:CC:51:03:BF:2E:BE:3A:4E:96:A0:F1
Certificate issuer: /CN=c3358e5c4f80a8206ccc5103bf2ebe3a4e96a0f1
Certificate serial: 0197B77C1B19AF3148610E33388BCA264E6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wzWOXE-AqCBszFEDvy6-Ok6WoPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft
Manifest number: 03D3
Signing time: Sat 28 Jun 2025 17:00:53 +0000
Manifest this update: Sat 28 Jun 2025 17:00:53 +0000
Manifest next update: Sun 29 Jun 2025 17:00:53 +0000
Files and hashes: 1: jQ35y5JqdtG9WdmH02jLEjnZC4E.roa (hash: FipHH6QD7PJQoRtOLX5VjgWSjY2BOLQCjuClzQsUWi8=)
2: wzWOXE-AqCBszFEDvy6-Ok6WoPE.crl (hash: poGG3b+EeUAJRq/ZR1/xXE7IdDdvLqQNBNZfU0VrPaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wzWOXE-AqCBszFEDvy6-Ok6WoPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:1b:19:af:31:48:61:0e:33:38:8b:ca:26:4e:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3358e5c4f80a8206ccc5103bf2ebe3a4e96a0f1
Validity
Not Before: Jun 28 17:00:53 2025 GMT
Not After : Jun 29 17:00:53 2025 GMT
Subject: CN=ac0f2a488ef0b4d864813af892e4c3cd4175df03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:34:4b:65:be:79:f4:d5:fc:4c:3a:21:79:2b:
ff:39:ab:12:4d:43:ff:c1:d0:0c:df:a9:b6:87:82:
06:f9:40:44:47:19:f4:60:57:a9:46:8a:58:7f:32:
a5:64:19:4b:53:ae:fd:d2:b4:e9:e8:e3:9f:d5:23:
1a:86:49:3a:04:1e:ed:97:da:90:57:83:bd:70:f4:
7f:9d:c4:67:34:9d:f3:70:d0:dd:5f:a1:67:79:a0:
40:7d:a6:c7:b9:ac:4b:8f:e1:cd:14:d2:14:1a:fd:
87:e6:b6:11:99:db:56:f9:36:ef:b4:f4:12:ec:46:
6f:03:ff:ab:10:1b:37:8b:6b:8a:22:80:ed:c1:27:
74:04:88:34:67:e2:dc:ea:c7:be:d2:c6:3a:d4:a6:
c0:12:71:f3:a1:77:85:7b:72:f0:6d:fd:27:30:5f:
86:da:0d:20:dc:2e:4b:41:cb:06:d6:c7:1f:68:e7:
a3:ea:7c:9c:75:00:65:7f:2e:70:cc:e7:7a:e2:b0:
df:5c:cf:28:a3:84:9e:2a:bd:ca:71:34:0c:f5:6b:
75:c5:df:93:22:77:3e:a0:c0:ad:0a:41:7a:15:4d:
05:0a:ec:67:4d:7b:b9:4a:55:a4:95:6d:44:67:e2:
fd:33:71:00:2c:05:42:9e:e6:ad:b6:fb:08:5e:d5:
95:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:0F:2A:48:8E:F0:B4:D8:64:81:3A:F8:92:E4:C3:CD:41:75:DF:03
X509v3 Authority Key Identifier:
keyid:C3:35:8E:5C:4F:80:A8:20:6C:CC:51:03:BF:2E:BE:3A:4E:96:A0:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzWOXE-AqCBszFEDvy6-Ok6WoPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:c7:48:f6:46:c3:f6:7b:27:e8:be:e5:98:24:f2:49:50:61:
b9:8b:6e:d2:4a:f5:92:4b:82:37:34:0c:95:6a:47:93:24:21:
73:a3:0c:37:18:65:19:a8:bd:f2:4b:e6:b3:fc:a5:5a:24:34:
cb:74:c2:9c:4f:d4:23:00:2a:6c:58:ff:ab:30:31:b3:c2:91:
ef:35:05:01:b4:95:29:a4:a9:81:71:a7:ea:28:4c:34:35:29:
35:96:10:dd:14:d8:a4:99:aa:17:90:5f:4d:c5:d0:eb:7a:a8:
fd:f8:5c:29:63:15:5a:38:29:d3:2c:1d:72:c2:40:3b:a9:56:
b0:4b:4e:16:a0:d1:5e:d7:4e:98:24:57:94:53:37:91:c3:51:
d3:1d:6b:2b:a6:a6:6a:8c:2d:d2:32:b3:6d:a1:d0:5e:1d:bc:
91:df:da:11:7b:88:41:ed:b1:a2:1d:7d:46:37:4e:70:b5:5f:
26:d4:93:f9:3b:89:db:46:1d:d9:1d:c0:da:0c:d2:26:28:fe:
25:37:fe:b9:94:ae:7a:1b:8a:7f:20:2b:d5:e9:d0:a6:f9:f9:
80:6c:77:57:f5:50:dc:81:e1:84:f1:66:25:be:f2:3e:86:b6:
e6:23:f8:8f:08:fb:c6:55:8a:9c:1a:d7:f6:50:90:d4:03:a4:
ae:f7:6b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:55:40 2025 by rpki-client