Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.mft
File: wBQuXVz6pFIWa8e1WmVVj1JNZ1E.mft (raw, json)
Hash identifier: RNtuDT5RUfmN4SlzoTNDA6sYZBnV7JrepgOIU3zemsY=
Subject key identifier: 61:1B:54:FE:C9:CA:97:D2:AF:88:E5:9E:83:A1:95:1A:81:6B:5F:E3
Authority key identifier: C0:14:2E:5D:5C:FA:A4:52:16:6B:C7:B5:5A:65:55:8F:52:4D:67:51
Certificate issuer: /CN=c0142e5d5cfaa452166bc7b55a65558f524d6751
Certificate serial: 01976D3E0C50AE490AC7973363AB8ED72F50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 07:01:12 +0000
Manifest this update: Sat 14 Jun 2025 07:01:12 +0000
Manifest next update: Sun 15 Jun 2025 07:01:12 +0000
Files and hashes: 1: sNmSuLPwop12596I--vLe1Fw_L8.roa (hash: rnnFcpfS8qT33aKuf/kRcr+W7tCgIM7nW6QVvMfILWQ=)
2: wBQuXVz6pFIWa8e1WmVVj1JNZ1E.crl (hash: pQJ23CA4vgyflAOlHQ429t7QnPxew9ueKWIpJf9CzsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:0c:50:ae:49:0a:c7:97:33:63:ab:8e:d7:2f:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0142e5d5cfaa452166bc7b55a65558f524d6751
Validity
Not Before: Jun 14 07:01:12 2025 GMT
Not After : Jun 15 07:01:12 2025 GMT
Subject: CN=611b54fec9ca97d2af88e59e83a1951a816b5fe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fc:11:6a:8d:40:fc:a0:f9:41:98:f9:ba:f9:
74:a3:a7:8a:8f:d1:3b:b3:b0:ba:37:54:7e:53:a6:
2f:6a:37:60:41:36:9f:82:0e:72:f1:54:49:fb:5e:
6f:9e:2d:cb:d3:4c:1f:51:0c:9e:67:b2:88:41:ae:
28:1d:67:73:98:8c:94:9a:88:9f:1b:2c:a4:3a:ea:
0b:99:fc:fd:93:a6:66:20:57:6a:f2:f3:e6:44:08:
c8:9b:74:d4:a2:f2:1c:eb:10:4f:b9:bd:6e:18:b1:
99:48:8b:a0:05:34:5a:3c:4b:1e:99:59:ee:6c:40:
ba:2e:d8:d8:6f:d9:8c:ff:03:f7:36:fb:cb:9a:97:
9b:24:b5:22:d2:c6:53:da:ef:dc:c2:ca:bf:e7:aa:
b1:2f:2d:01:1c:1b:25:50:0d:62:7e:c6:93:04:04:
aa:ac:58:7a:15:cf:b4:b6:5f:c3:19:4e:0e:15:27:
87:20:69:14:f6:31:6d:8a:cd:39:52:bb:46:4c:4e:
75:e1:1f:9b:45:9e:dd:57:cc:56:07:63:de:60:4d:
df:f5:cc:91:7f:09:94:5a:c6:4b:9e:62:35:f5:8b:
0f:4a:b2:71:3b:d1:2d:a0:3b:8e:b6:17:3e:a8:6e:
f4:cf:f9:88:d2:a5:a2:63:7f:16:2c:25:ae:55:78:
ca:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:1B:54:FE:C9:CA:97:D2:AF:88:E5:9E:83:A1:95:1A:81:6B:5F:E3
X509v3 Authority Key Identifier:
keyid:C0:14:2E:5D:5C:FA:A4:52:16:6B:C7:B5:5A:65:55:8F:52:4D:67:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:4c:b8:75:fc:4f:44:b8:60:58:aa:93:0b:54:07:86:01:af:
75:3c:12:4c:e5:f7:4d:9b:b9:6d:c4:7b:74:8b:19:ba:35:35:
71:0a:0e:41:f2:84:00:37:eb:eb:ce:a2:88:60:c3:c4:fd:37:
38:92:1d:6b:f9:de:65:e9:ce:c1:62:5d:3e:2c:3c:90:cc:31:
db:13:5f:2e:0d:73:8c:6e:5a:f4:97:94:41:fc:65:7b:c4:22:
be:0e:5c:e8:be:1e:87:2c:d8:08:81:26:c2:52:2d:f1:59:fc:
a1:d2:72:f6:a8:52:a4:64:98:8e:08:26:c9:b4:a5:58:b0:07:
7b:b0:d5:ba:db:56:40:e7:53:2c:c5:21:c3:a2:3c:b2:fe:76:
5c:b3:fc:0b:dd:a9:2b:56:2d:f0:67:6f:e7:e7:6a:70:bd:14:
40:b9:65:f1:ce:2d:ca:1e:e8:ec:78:0e:47:01:12:ff:7f:10:
0c:c3:7e:ff:30:70:ff:36:22:3d:b3:a2:cd:db:d3:aa:d6:0e:
eb:51:56:5e:ef:63:f8:2b:46:1f:0a:a5:52:91:7f:65:a6:ec:
c0:b9:91:d8:85:6c:0b:89:81:d3:0e:26:e4:6a:51:ce:5d:96:
5a:b8:1b:79:b1:e4:7c:a6:06:8e:89:0a:6a:fe:e8:c4:ad:9a:
d5:13:ba:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:58:44 2025 by rpki-client