Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.mft
File: WfrTiL6nHaL0PzmkXhAUHW8pxCg.mft (raw, json)
Hash identifier: DSB4J3qmsDh3X/oi2ClMETMq+ZrFUb9QNVM4BArbimU=
Subject key identifier: 10:6C:F2:AF:07:23:87:F2:FC:77:92:61:DF:B0:88:6A:B0:81:62:FD
Authority key identifier: 59:FA:D3:88:BE:A7:1D:A2:F4:3F:39:A4:5E:10:14:1D:6F:29:C4:28
Certificate issuer: /CN=59fad388bea71da2f43f39a45e10141d6f29c428
Certificate serial: 0197B6A0576C867EC8925A44E1DF381EB546
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfrTiL6nHaL0PzmkXhAUHW8pxCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.mft
Manifest number: 14CE
Signing time: Sat 28 Jun 2025 13:00:50 +0000
Manifest this update: Sat 28 Jun 2025 13:00:50 +0000
Manifest next update: Sun 29 Jun 2025 13:00:50 +0000
Files and hashes: 1: LYb-x1oBjYV986-WVWGm87nYs0w.roa (hash: Hdp26qwcmy9Rb38THuQbvn6WpSeZJ3xKyk1AFGilm9k=)
2: WfrTiL6nHaL0PzmkXhAUHW8pxCg.crl (hash: JnfTh3gDS1z/7ultK/RqUo9aN2tDx/SQqcZiEEwSHg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/WfrTiL6nHaL0PzmkXhAUHW8pxCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:57:6c:86:7e:c8:92:5a:44:e1:df:38:1e:b5:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59fad388bea71da2f43f39a45e10141d6f29c428
Validity
Not Before: Jun 28 13:00:50 2025 GMT
Not After : Jun 29 13:00:50 2025 GMT
Subject: CN=106cf2af072387f2fc779261dfb0886ab08162fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cf:ee:e5:cc:27:37:40:b2:26:da:0c:cf:9c:
d8:8d:5e:43:39:be:b7:aa:f0:4e:06:90:50:3a:86:
5e:46:c1:08:80:af:16:60:a1:ca:f3:91:bc:4e:6d:
b5:b3:82:b5:a4:fc:a6:20:e1:06:94:46:16:42:1d:
5b:bf:23:65:90:a3:49:ad:90:84:43:4c:b8:08:61:
44:1b:61:a6:b2:9c:ca:da:28:6e:50:67:26:2f:0a:
37:b8:83:7e:e5:9f:06:c5:e6:33:5d:9e:f1:18:36:
67:73:2e:c0:06:64:d5:7c:2a:75:25:76:33:cb:4e:
35:9c:22:0e:7d:4e:08:9a:01:a1:7a:27:6d:cd:b7:
e5:42:00:4d:7a:11:67:0a:b9:06:dd:a6:8c:aa:dc:
0b:01:8f:11:e2:c3:0b:cb:af:8f:76:a1:3e:2d:07:
04:bb:44:44:e4:03:72:ac:93:c5:53:e3:fe:82:2a:
c2:ad:02:ba:c1:87:f5:3e:fb:a5:1e:89:5f:52:91:
81:e3:62:bb:37:a0:c7:c4:2c:cc:12:6c:b5:9a:72:
f7:5f:ad:88:34:bf:52:16:50:d2:34:07:8f:54:f6:
0b:47:eb:2b:71:c1:79:14:bb:86:ae:8e:93:e8:92:
2b:ff:da:0d:b6:94:f0:e0:6e:a2:d4:08:83:12:51:
51:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:6C:F2:AF:07:23:87:F2:FC:77:92:61:DF:B0:88:6A:B0:81:62:FD
X509v3 Authority Key Identifier:
keyid:59:FA:D3:88:BE:A7:1D:A2:F4:3F:39:A4:5E:10:14:1D:6F:29:C4:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfrTiL6nHaL0PzmkXhAUHW8pxCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:ae:73:09:a2:95:62:fd:47:5c:a8:90:d4:1f:dc:2f:f6:b3:
fd:d8:88:3e:a6:d9:a5:be:d8:55:41:a6:13:01:3c:27:67:e8:
9c:c8:52:ae:7b:aa:cf:99:7a:92:af:81:a8:50:44:1d:c4:6d:
6b:fb:c5:b2:8d:0c:62:56:0a:c9:b7:e5:97:a8:ec:20:9c:9b:
34:3b:5d:c7:5e:71:ab:29:e5:30:de:a6:29:43:50:07:32:b5:
07:85:bf:c1:1a:1c:cc:b4:e8:92:fa:3b:d6:9b:96:b4:aa:a8:
5f:fd:b9:00:08:86:82:54:62:92:9b:6e:4b:02:a8:0c:b8:c3:
52:e1:db:bc:3e:fd:71:b5:44:bc:6b:f9:81:ea:30:5e:07:63:
9e:55:79:60:e9:3c:58:43:64:da:77:00:a3:d4:bd:65:64:a4:
71:85:3b:fd:96:2f:b3:67:a4:b8:19:b0:3e:37:72:70:a7:f0:
e0:b3:a2:91:c7:04:b5:66:e4:57:5a:e6:99:be:7d:bd:6b:4b:
cc:e5:42:c4:e2:57:a4:39:c3:ff:11:50:13:49:90:35:df:75:
fe:05:32:38:15:50:7c:44:19:cc:d1:aa:be:bd:54:ad:0f:7e:
96:7c:2d:f2:f2:58:51:39:0b:50:9b:6d:a7:c4:86:7f:e9:3a:
3e:df:ba:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:03:16 2025 by rpki-client