Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b83ab5-cdb2-4174-8093-802d09cfc835/1/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.mft
File: Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.mft (raw, json)
Hash identifier: RcmuoQe48H7iTaYwvCFukLPrrDYxJh9UQGmBMGh60KA=
Subject key identifier: 2F:8B:18:D1:B9:B1:01:97:0F:A6:FC:C7:64:32:13:F7:61:F1:D1:C5
Authority key identifier: 5A:8F:81:36:6F:FC:43:C7:1F:5B:B5:21:F8:15:01:76:0E:BE:B0:74
Certificate issuer: /CN=5a8f81366ffc43c71f5bb521f81501760ebeb074
Certificate serial: 0197B8FD31C5B5BE91A06828AC24CFCD20C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/b83ab5-cdb2-4174-8093-802d09cfc835/1/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.mft
Manifest number: 15B4
Signing time: Sun 29 Jun 2025 00:01:30 +0000
Manifest this update: Sun 29 Jun 2025 00:01:30 +0000
Manifest next update: Mon 30 Jun 2025 00:01:30 +0000
Files and hashes: 1: KkzZdtSbSgev6F4EciFP374t71M.roa (hash: RKNA7btFBFTKM+7ILEeu2plNQgmHlkDMuCESaQkp038=)
2: Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.crl (hash: qBBTCwwudItk7tJHNUowRgZ7lk1QFr3Gz36u7z4zbFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/b83ab5-cdb2-4174-8093-802d09cfc835/1/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/b83ab5-cdb2-4174-8093-802d09cfc835/1/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:31:c5:b5:be:91:a0:68:28:ac:24:cf:cd:20:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a8f81366ffc43c71f5bb521f81501760ebeb074
Validity
Not Before: Jun 29 00:01:30 2025 GMT
Not After : Jun 30 00:01:30 2025 GMT
Subject: CN=2f8b18d1b9b101970fa6fcc7643213f761f1d1c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9c:01:27:e0:4a:f2:20:b9:e7:9b:26:99:15:
ab:3b:73:d3:f7:bf:4c:d8:01:b9:8a:10:cc:3b:ce:
72:5e:46:16:51:0a:96:6c:60:02:5d:7b:d4:83:d3:
b1:60:c9:94:b5:d2:f3:c0:89:9f:99:a1:22:50:c5:
eb:9e:05:66:05:f0:6b:69:32:28:50:5c:f0:1f:8d:
85:7a:27:9d:b7:41:5d:83:37:b2:d7:6a:78:fd:4f:
6d:4b:dc:48:c6:9e:e7:c3:ae:40:18:47:1f:24:ee:
15:f8:2d:88:0e:bf:69:bd:25:ea:c9:08:df:f5:14:
31:4f:24:33:a6:fb:19:53:04:de:02:7a:88:f1:c7:
36:9d:d8:4d:59:c6:1f:58:89:24:6a:cc:3c:cd:fd:
af:6c:b3:31:f8:3e:7a:60:34:c1:e0:bf:6d:d8:c8:
bd:96:67:3b:a6:ff:d1:e6:92:dd:3c:12:f1:cd:bf:
5d:22:ad:22:dc:2a:b8:3c:d0:e9:5a:0d:66:30:6c:
25:57:13:99:42:ae:06:b0:ae:9f:49:c8:f7:36:ca:
64:24:79:17:92:34:f5:a6:04:d2:e3:0b:01:89:92:
12:1d:bc:96:30:59:97:66:a9:96:3e:09:35:e0:ef:
f0:a6:ef:bb:a2:52:b7:f6:df:2c:1d:97:00:4c:b4:
57:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:8B:18:D1:B9:B1:01:97:0F:A6:FC:C7:64:32:13:F7:61:F1:D1:C5
X509v3 Authority Key Identifier:
keyid:5A:8F:81:36:6F:FC:43:C7:1F:5B:B5:21:F8:15:01:76:0E:BE:B0:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b83ab5-cdb2-4174-8093-802d09cfc835/1/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b83ab5-cdb2-4174-8093-802d09cfc835/1/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:31:d0:cc:a7:9c:c3:cc:0a:00:7f:94:0b:1f:c2:cc:75:ca:
27:84:bf:3a:4c:c2:f3:82:b3:c7:10:f2:a5:89:d7:d1:f8:49:
72:bb:90:d6:f7:55:f3:9f:68:68:5b:23:be:5a:ec:38:b9:71:
a4:fa:d5:b5:36:29:20:61:4d:3f:6c:2c:f1:04:2f:cd:8e:84:
69:41:ce:b6:44:b0:91:33:24:1a:d1:5b:1d:8b:42:f2:53:2d:
8f:41:85:7e:f7:3d:8a:cb:71:ad:3b:16:5c:a7:47:80:6d:b6:
55:f3:78:f0:f1:9c:19:4f:bb:a2:2d:26:7a:3b:95:f6:5e:cb:
c3:e7:6d:a8:66:99:4f:e6:95:02:dd:fd:2a:50:85:2b:d8:24:
7f:43:29:ba:0e:f7:d6:72:01:37:ab:8e:62:57:23:9d:1c:fa:
78:56:08:a2:28:5f:d8:c0:8a:d6:fe:5b:8d:f9:9c:e4:21:70:
11:1f:8b:02:1e:06:9d:f7:38:01:a6:3c:6f:94:fe:13:83:2c:
a1:80:32:9c:75:2d:a8:e9:b1:7a:7f:6f:e6:7a:14:55:4a:97:
ff:06:91:be:b2:1c:23:f5:f4:05:11:e7:af:95:e6:28:3a:f8:
21:3d:bb:12:13:51:ec:dd:d3:2f:ea:90:40:55:4a:26:30:3d:
69:a4:97:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:13:33 2025 by rpki-client