Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.mft
File: Wo04knhIXt1Q0yz1yoTOJyjAjMY.mft (raw, json)
Hash identifier: Nn3LDhm8ArF8GJ5ZFknjJV7YBfKUAaHm5KkFAQOw7rY=
Subject key identifier: 4A:9B:1A:C5:17:85:D4:4B:44:F4:DE:6A:77:0B:7D:5D:03:E6:D0:4A
Authority key identifier: 5A:8D:38:92:78:48:5E:DD:50:D3:2C:F5:CA:84:CE:27:28:C0:8C:C6
Certificate issuer: /CN=5a8d389278485edd50d32cf5ca84ce2728c08cc6
Certificate serial: 0197B6A1F204D2B67CC831AE2C746032F6B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wo04knhIXt1Q0yz1yoTOJyjAjMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.mft
Manifest number: 141D
Signing time: Sat 28 Jun 2025 13:02:35 +0000
Manifest this update: Sat 28 Jun 2025 13:02:35 +0000
Manifest next update: Sun 29 Jun 2025 13:02:35 +0000
Files and hashes: 1: 9QUsRCAhmLwTzTZMFA3QwgGkN-o.roa (hash: BYkBRt5u6iYa0bSjaJlYJJH3gyP0JFZinNO6dVWDgNQ=)
2: Wo04knhIXt1Q0yz1yoTOJyjAjMY.crl (hash: paUzFgAX1u7ITSPwq+rQe5QRCy+jz8Or+8UolWr3R4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wo04knhIXt1Q0yz1yoTOJyjAjMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:f2:04:d2:b6:7c:c8:31:ae:2c:74:60:32:f6:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a8d389278485edd50d32cf5ca84ce2728c08cc6
Validity
Not Before: Jun 28 13:02:35 2025 GMT
Not After : Jun 29 13:02:35 2025 GMT
Subject: CN=4a9b1ac51785d44b44f4de6a770b7d5d03e6d04a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:95:3e:0b:8f:9a:70:28:54:de:78:c4:a1:e4:
10:22:29:cc:c0:3f:76:f3:e6:19:08:cd:d2:78:0d:
42:ff:d9:33:a6:aa:e6:f0:ad:48:f8:c9:d3:ef:c0:
0e:67:28:e8:de:e1:9d:b1:70:a2:8a:ea:0f:18:0e:
cd:71:42:2c:df:8c:42:7f:12:92:19:c8:dc:7f:e7:
bf:92:6a:b8:62:e3:bc:f8:c3:78:a7:ac:3a:78:f3:
ad:b9:42:9d:45:8a:be:e9:1b:75:42:ed:fb:6f:ce:
37:d2:4b:91:2f:01:0c:25:21:2a:c1:cc:7b:ba:3b:
d0:77:2b:c6:c3:72:69:bf:00:7d:c4:92:51:0c:16:
95:a5:9f:14:2c:b1:87:2e:33:65:f1:6f:39:6d:e2:
43:f0:2d:8c:d3:cd:97:9f:f4:85:c3:d7:d5:de:61:
53:db:f0:f0:ef:a8:1b:ad:8f:1a:82:c3:92:0a:38:
f2:3d:0c:e4:3d:e3:dd:98:cf:b0:a9:05:67:6a:ee:
57:d3:66:d1:d9:79:44:fb:bd:5c:05:4d:86:d3:58:
42:73:56:24:5c:7f:c8:9f:3d:6a:c3:bd:90:db:0e:
cc:b6:8c:a6:df:c4:03:95:6d:58:95:3f:31:5b:27:
8a:bd:fa:3a:c0:95:c9:66:00:bb:bc:e7:70:1b:14:
f8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:9B:1A:C5:17:85:D4:4B:44:F4:DE:6A:77:0B:7D:5D:03:E6:D0:4A
X509v3 Authority Key Identifier:
keyid:5A:8D:38:92:78:48:5E:DD:50:D3:2C:F5:CA:84:CE:27:28:C0:8C:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wo04knhIXt1Q0yz1yoTOJyjAjMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:ae:11:96:0f:bf:00:50:77:9d:fb:8c:0d:2f:5a:03:77:25:
5c:23:10:fe:ef:38:05:b8:34:d4:7e:9b:39:28:4c:eb:53:c4:
aa:ae:b1:41:cb:8a:53:1f:d4:09:0d:67:34:34:96:30:8b:9a:
a7:7f:79:cc:c2:54:5f:db:4d:4d:97:69:bd:35:17:7e:5f:a7:
9f:2f:7f:25:f4:e5:6f:f2:da:91:d7:c0:bf:c9:98:6f:e7:0a:
dd:04:4c:45:20:d3:12:80:8c:57:ff:9d:80:3e:cd:fe:1d:9e:
ee:b0:2a:29:0e:4f:26:36:5f:b9:a7:04:43:a5:cb:f0:01:6b:
6b:1b:76:66:ce:ea:69:91:33:fe:b5:55:fc:73:21:4c:7b:33:
80:6c:9c:74:7a:66:c6:a9:27:59:46:56:35:50:13:fd:b5:d5:
a6:de:cd:2f:27:a1:2a:c3:c3:b6:8d:16:a0:bf:ac:16:67:84:
bf:ee:bf:f6:b6:2b:6c:ac:af:72:eb:4c:8a:56:6d:73:41:a6:
8a:0d:13:1b:3c:24:28:87:d4:3d:a4:71:48:4b:e1:e1:93:e7:
fc:96:26:00:57:56:9e:5c:54:fc:fb:37:5c:c4:d9:4d:ea:13:
36:9a:cb:eb:23:ee:96:bb:27:a7:c2:dd:1e:b9:7f:67:b3:64:
1f:1c:3e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:29:06 2025 by rpki-client