Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.mft
File: WfJfgmyjg6C3pcA2eteB_id_Z88.mft (raw, json)
Hash identifier: leyYE7PaUWTCk77jzpkA5NeU4PXvvA59+OPHdjmJN84=
Subject key identifier: 3E:80:74:3B:2C:BF:3E:44:7F:44:B4:04:97:A2:CD:F9:C7:2B:22:0F
Authority key identifier: 59:F2:5F:82:6C:A3:83:A0:B7:A5:C0:36:7A:D7:81:FE:27:7F:67:CF
Certificate issuer: /CN=59f25f826ca383a0b7a5c0367ad781fe277f67cf
Certificate serial: 0197B70EE625099CAD5B5E9333D14AA921B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfJfgmyjg6C3pcA2eteB_id_Z88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 15:01:36 +0000
Manifest this update: Sat 28 Jun 2025 15:01:36 +0000
Manifest next update: Sun 29 Jun 2025 15:01:36 +0000
Files and hashes: 1: WfJfgmyjg6C3pcA2eteB_id_Z88.crl (hash: W05KANe2Objwt+7mamvpPUM59H0rWKLYB+Q/wvEuAv4=)
2: Wmojj5WI86DdYFq5g4bYA7Nw2eQ.roa (hash: zUiZqLG6W26ho//gZg9iQz5Nrd2fw/u+RT7b1CbWXkM=)
3: kL9XeaVdFYIH8Ee21mjkEgEBZ5M.roa (hash: GmszFqPnsf/cmc4G3XaWK6S4KreytGM4kW7CsuDRkfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.mft
rsync://rpki.ripe.net/repository/DEFAULT/WfJfgmyjg6C3pcA2eteB_id_Z88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:e6:25:09:9c:ad:5b:5e:93:33:d1:4a:a9:21:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59f25f826ca383a0b7a5c0367ad781fe277f67cf
Validity
Not Before: Jun 28 15:01:36 2025 GMT
Not After : Jun 29 15:01:36 2025 GMT
Subject: CN=3e80743b2cbf3e447f44b40497a2cdf9c72b220f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:73:f6:be:62:f6:9e:bb:ee:a1:e5:c4:c1:f4:
5d:ac:2b:d8:b7:56:fb:68:03:f1:5b:0f:17:21:8f:
bb:cf:0b:01:85:72:ab:5b:04:d7:c8:47:8e:bc:bd:
81:55:60:fa:81:d7:78:84:b0:98:f5:2c:d7:da:83:
f0:88:c0:a2:14:5a:8f:d8:45:ca:cb:d9:7e:41:ee:
b0:93:f7:bd:2c:56:1a:89:2c:82:59:99:6c:c6:3f:
2b:0a:44:2d:ab:df:f9:11:3d:9c:46:2f:31:d5:76:
b9:25:20:9f:24:bf:b1:da:8a:34:9c:2d:03:e7:b1:
bf:9c:fd:af:55:a9:0c:0f:7a:a6:4e:17:14:e1:8c:
29:6f:cd:b1:57:37:bd:d8:11:3b:2d:18:ce:e0:6c:
8a:f6:6c:b0:58:d0:47:ac:7c:64:3c:fc:9a:4a:09:
7f:81:ac:9b:19:9d:3d:ec:1f:f6:ef:e0:f6:c2:63:
e0:77:f9:9b:1e:d2:41:52:67:00:e3:8d:4e:94:83:
48:b2:8c:99:e5:56:78:81:72:81:04:e7:e4:25:d6:
3f:9a:d4:a5:98:3c:10:4f:e4:f1:7e:15:ca:c6:e0:
de:1c:74:11:68:6b:b1:97:c6:63:2b:e2:f3:3e:31:
fd:ec:20:5d:11:33:4d:09:95:48:f2:10:1c:3b:1c:
d8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:80:74:3B:2C:BF:3E:44:7F:44:B4:04:97:A2:CD:F9:C7:2B:22:0F
X509v3 Authority Key Identifier:
keyid:59:F2:5F:82:6C:A3:83:A0:B7:A5:C0:36:7A:D7:81:FE:27:7F:67:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfJfgmyjg6C3pcA2eteB_id_Z88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:10:c7:19:0b:9c:5e:06:33:1d:68:15:a2:50:53:c2:f2:b5:
84:9a:58:cb:19:3b:04:ad:b7:d8:ba:e9:03:7e:62:b8:10:b9:
b3:07:a6:78:10:24:4e:cb:1c:1b:4f:57:ef:9d:91:9b:a1:0a:
76:59:32:91:19:2c:4c:37:79:e6:28:06:54:60:55:4a:bd:5b:
4c:80:77:71:b7:79:00:39:ac:87:0e:ff:a5:4f:a6:50:1a:26:
ce:07:f2:54:ba:9c:cf:c5:75:a4:1f:e0:e1:1d:e2:98:78:29:
04:5a:f9:5d:f3:93:dc:f9:f0:37:64:51:b6:9f:a4:93:4b:2c:
05:43:0b:41:57:16:03:30:0f:cb:77:ba:c9:72:86:a7:b4:8e:
47:b4:61:91:e7:76:03:26:45:a0:cb:60:18:e7:86:56:25:bc:
1d:ae:78:4e:5c:9e:67:4c:77:cc:0b:b9:4a:6a:a2:71:47:d9:
52:31:71:bb:3e:b0:a3:47:74:b5:77:62:a7:81:12:6f:6b:f0:
97:ec:07:4d:8e:fe:db:ce:06:74:23:e5:15:06:e4:96:3d:a1:
8a:7b:c8:9f:3d:96:40:41:05:29:3b:a4:dd:8a:32:94:b0:9d:
32:be:03:8e:53:7f:c6:99:8e:91:45:dd:b5:34:6d:3f:64:87:
df:74:b0:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:27:46 2025 by rpki-client