
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/bf73f5-f414-4a13-b716-9cb7fc154425/1/WiHxhbSzhmdV26ABC88QuUqKpmw.mft
File: WiHxhbSzhmdV26ABC88QuUqKpmw.mft (raw, json)
Hash identifier: qRgchz3QbjkplKDkzaHW3RJYMcEVMrgO+KtNjetcgzQ=
Subject key identifier: 36:4C:2C:7B:9D:B7:4C:BD:27:8D:18:72:F4:B2:D3:0B:01:26:91:65
Authority key identifier: 5A:21:F1:85:B4:B3:86:67:55:DB:A0:01:0B:CF:10:B9:4A:8A:A6:6C
Certificate issuer: /CN=5a21f185b4b3866755dba0010bcf10b94a8aa66c
Certificate serial: 0197B70F1864FA8A099CB3AC167E3A461255
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WiHxhbSzhmdV26ABC88QuUqKpmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/bf73f5-f414-4a13-b716-9cb7fc154425/1/WiHxhbSzhmdV26ABC88QuUqKpmw.mft
Manifest number: 1558
Signing time: Sat 28 Jun 2025 15:01:49 +0000
Manifest this update: Sat 28 Jun 2025 15:01:49 +0000
Manifest next update: Sun 29 Jun 2025 15:01:49 +0000
Files and hashes: 1: MT9vPInoaysz5wep7peoXlzT3YM.roa (hash: 3Nc11g2iFkPxsowhqR+tamDkBXdlZBe0DtJ8wPuCW4E=)
2: WiHxhbSzhmdV26ABC88QuUqKpmw.crl (hash: LzjDRz4GuL5Pf1ZCHjSCsRqO/m9VH8RxRJNmAoHT9YA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/bf73f5-f414-4a13-b716-9cb7fc154425/1/WiHxhbSzhmdV26ABC88QuUqKpmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/bf73f5-f414-4a13-b716-9cb7fc154425/1/WiHxhbSzhmdV26ABC88QuUqKpmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WiHxhbSzhmdV26ABC88QuUqKpmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:18:64:fa:8a:09:9c:b3:ac:16:7e:3a:46:12:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a21f185b4b3866755dba0010bcf10b94a8aa66c
Validity
Not Before: Jun 28 15:01:49 2025 GMT
Not After : Jun 29 15:01:49 2025 GMT
Subject: CN=364c2c7b9db74cbd278d1872f4b2d30b01269165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3e:4a:2c:3d:34:af:45:40:d2:ef:00:3f:ab:
dc:71:8d:33:73:56:ae:f9:92:e4:85:53:70:7e:46:
bf:96:31:fd:f5:b0:be:2e:8d:db:d7:8c:19:d1:a7:
70:e3:22:9b:1b:2a:cf:b1:41:99:29:06:f3:fe:c7:
4b:06:97:4d:a0:94:da:88:4b:4a:b7:37:bb:f1:15:
8a:05:c2:d5:51:86:c8:61:20:a0:be:1a:61:72:79:
cf:8f:9e:8a:69:78:fa:82:49:79:78:01:3d:d0:04:
e0:e1:e1:97:da:4a:89:57:53:15:b2:e9:96:49:23:
55:c2:d1:b8:d7:b0:65:f2:4f:9d:7d:a8:0e:29:26:
92:e6:95:1d:a9:a1:e2:52:72:93:5d:c9:e6:0f:be:
d1:15:7d:77:05:3d:73:ad:22:b5:c3:07:dc:38:88:
66:74:ef:b9:59:c8:e4:02:75:67:be:a3:30:0a:9c:
18:2e:34:9f:82:f6:04:5f:31:f2:59:30:8c:1c:b9:
7a:9d:44:46:d9:4e:8f:0b:71:4b:e9:fa:be:7a:bf:
3b:74:3d:3e:35:1c:08:0d:41:5f:6f:d0:5d:cc:9f:
3b:19:3b:14:b4:35:5f:18:0e:fe:85:69:d8:ac:50:
f4:25:a8:14:d1:8a:2c:f2:a0:bf:e1:fa:b2:f1:38:
77:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:4C:2C:7B:9D:B7:4C:BD:27:8D:18:72:F4:B2:D3:0B:01:26:91:65
X509v3 Authority Key Identifier:
keyid:5A:21:F1:85:B4:B3:86:67:55:DB:A0:01:0B:CF:10:B9:4A:8A:A6:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WiHxhbSzhmdV26ABC88QuUqKpmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/bf73f5-f414-4a13-b716-9cb7fc154425/1/WiHxhbSzhmdV26ABC88QuUqKpmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/bf73f5-f414-4a13-b716-9cb7fc154425/1/WiHxhbSzhmdV26ABC88QuUqKpmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:a7:bf:58:27:1e:d4:dd:73:87:2c:45:39:eb:e1:86:8c:05:
b4:a7:8e:4c:f9:25:8f:40:4a:bb:57:34:ad:fa:cf:98:34:87:
48:85:b7:81:95:ff:e0:72:8a:8a:8d:15:c0:a2:8a:7a:8b:2f:
ed:7f:16:10:42:33:df:6d:bc:3c:eb:c6:ef:83:41:c3:2a:15:
5e:08:95:65:4e:be:3f:0b:33:af:23:53:f4:7e:4e:8f:07:8f:
c7:e9:7b:a9:a1:56:37:6c:6d:56:f3:14:7d:07:d8:d3:1b:28:
c4:03:2a:62:d1:1b:1d:9f:13:6f:a8:c5:02:48:bd:73:e9:12:
90:86:d2:2a:2a:27:0b:25:2c:ed:15:10:39:59:61:43:09:08:
85:e3:84:3e:42:20:34:38:99:a8:aa:8a:e3:23:ba:d0:36:24:
be:93:9a:47:3d:46:65:52:e2:68:6f:e1:77:d7:a1:22:cf:e6:
ee:c6:b3:73:50:4f:22:e1:5d:63:8f:86:e3:d0:e3:1f:2f:90:
23:9f:51:61:41:b0:bf:33:e1:a1:4b:7a:fb:cc:9d:2d:d2:e5:
60:97:3f:ef:62:e9:c3:83:17:3c:67:eb:62:6d:29:3a:c5:c8:
43:b8:c8:14:92:d0:2c:e6:c7:42:67:49:71:5e:c7:7f:7e:8d:
cc:a9:4c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:35:32 2025 by rpki-client