Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a2fd11-ff1d-4901-8b5a-cae35a871646/1/Wc_oEoYU0zJajOwYM9c7tqRpjA4.mft
File: Wc_oEoYU0zJajOwYM9c7tqRpjA4.mft (raw, json)
Hash identifier: A2vGaShgJ7lIyppanABpkM/7geqkInZlLQ4jxuWyjhg=
Subject key identifier: BA:F3:B9:66:FA:EF:DD:9E:22:65:3B:E4:03:2B:69:B3:24:56:0B:2C
Authority key identifier: 59:CF:E8:12:86:14:D3:32:5A:8C:EC:18:33:D7:3B:B6:A4:69:8C:0E
Certificate issuer: /CN=59cfe8128614d3325a8cec1833d73bb6a4698c0e
Certificate serial: 0197B7457A67448B58D66F793754B5612F9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wc_oEoYU0zJajOwYM9c7tqRpjA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2fd11-ff1d-4901-8b5a-cae35a871646/1/Wc_oEoYU0zJajOwYM9c7tqRpjA4.mft
Manifest number: 03AB
Signing time: Sat 28 Jun 2025 16:01:13 +0000
Manifest this update: Sat 28 Jun 2025 16:01:13 +0000
Manifest next update: Sun 29 Jun 2025 16:01:13 +0000
Files and hashes: 1: JOSO1JmulK_3UGT4DHh2rfgYfwY.roa (hash: EgfSLon34sQaHSqw1cjg97JzDl/x10iZFo3pqDa2iBE=)
2: Wc_oEoYU0zJajOwYM9c7tqRpjA4.crl (hash: Kr72lRL7EuAZC5Ovt9DgLN6Ys2BslkMoTSn8Cb5eDpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2fd11-ff1d-4901-8b5a-cae35a871646/1/Wc_oEoYU0zJajOwYM9c7tqRpjA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/a2fd11-ff1d-4901-8b5a-cae35a871646/1/Wc_oEoYU0zJajOwYM9c7tqRpjA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wc_oEoYU0zJajOwYM9c7tqRpjA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:7a:67:44:8b:58:d6:6f:79:37:54:b5:61:2f:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59cfe8128614d3325a8cec1833d73bb6a4698c0e
Validity
Not Before: Jun 28 16:01:13 2025 GMT
Not After : Jun 29 16:01:13 2025 GMT
Subject: CN=baf3b966faefdd9e22653be4032b69b324560b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1d:3c:99:18:48:e5:12:d4:48:d8:e6:0e:09:
c8:01:87:39:28:e3:a1:38:17:49:1d:77:f2:db:b6:
f7:03:6e:96:78:59:bd:4e:01:b3:08:b9:d2:b2:a9:
a9:4b:8a:1e:c2:d9:8b:05:b5:14:70:48:79:19:3d:
7a:36:c9:45:9d:36:ba:fb:36:cb:f5:4f:68:de:9e:
26:10:27:0f:82:ba:86:dc:32:3d:3a:3f:ac:a0:ea:
93:77:77:9e:74:9a:55:d0:3b:80:94:45:e2:16:a4:
d3:7c:1f:d0:8c:7a:fe:96:1c:5d:55:78:1b:7d:d8:
df:a3:70:8a:ae:d3:dc:9e:ee:29:4c:62:97:2f:37:
3a:b3:0e:25:01:be:21:eb:ae:18:6e:39:51:9f:91:
09:70:29:d5:f0:46:30:9d:f3:bc:47:a8:c1:77:fc:
2d:53:0f:4c:e3:80:23:78:40:2e:bb:9b:66:b1:6a:
85:76:68:d5:af:bc:e2:3f:de:86:c7:26:10:bd:74:
dc:4b:fe:6f:09:31:5d:51:b2:32:31:97:97:4f:82:
dd:00:1f:fe:dc:d0:c1:21:63:9e:f1:d2:b8:2f:7a:
86:ca:2e:c1:df:1c:2b:e2:a6:45:be:5e:62:58:e7:
f1:f5:8d:8c:8c:03:5a:62:36:ec:d5:d3:7f:9c:4c:
d6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F3:B9:66:FA:EF:DD:9E:22:65:3B:E4:03:2B:69:B3:24:56:0B:2C
X509v3 Authority Key Identifier:
keyid:59:CF:E8:12:86:14:D3:32:5A:8C:EC:18:33:D7:3B:B6:A4:69:8C:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wc_oEoYU0zJajOwYM9c7tqRpjA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2fd11-ff1d-4901-8b5a-cae35a871646/1/Wc_oEoYU0zJajOwYM9c7tqRpjA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2fd11-ff1d-4901-8b5a-cae35a871646/1/Wc_oEoYU0zJajOwYM9c7tqRpjA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:67:86:90:a1:87:b5:1a:1b:19:33:5a:6b:8f:38:3b:d7:26:
6f:74:a6:a7:77:aa:a5:9b:2c:ee:19:00:d0:27:e3:a5:a7:b8:
fe:8c:8e:75:76:9e:b1:7d:a4:5d:15:0e:a0:ff:d2:ac:07:a1:
89:ee:88:02:62:31:d6:50:1f:57:6c:cd:34:52:22:a5:1c:d1:
f3:60:b9:e7:d0:d9:ff:85:e0:aa:65:d0:fe:96:f3:97:36:6b:
ef:ff:15:11:14:76:25:95:ca:97:6c:3b:ba:c8:b2:69:91:8b:
c0:1e:0b:8c:58:91:79:fe:95:be:0e:17:d7:0b:52:f5:a7:4c:
7f:6d:e2:9a:87:5b:c6:d0:1d:da:e5:94:c7:e5:5e:62:57:52:
09:af:b2:35:d5:8f:e4:af:ce:c7:33:27:43:20:f6:f9:1e:bf:
89:6b:b8:b1:ca:66:b3:64:81:5f:c2:14:73:5b:ee:75:23:a9:
b3:f7:0d:77:dd:10:ba:c0:7b:64:71:f2:ec:81:9e:ea:23:08:
66:45:58:21:fc:3c:be:d8:84:3a:8f:a0:15:39:f8:e9:55:9e:
90:d1:36:a3:c6:65:aa:99:d5:30:c8:9b:fa:34:ca:68:86:24:
0a:01:37:57:35:c9:50:f4:4b:db:01:dd:a8:47:f0:19:fd:cd:
23:a4:84:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:15:26 2025 by rpki-client