Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/99d2f5-1800-4c08-bcad-8a751b0e0170/1/wXO75fcjeEWsqNMmO41R7zePwSA.mft
File: wXO75fcjeEWsqNMmO41R7zePwSA.mft (raw, json)
Hash identifier: NEJ9WonJU0iAItWWHuV/dt+CYfxX6DxW2jBxUpigJC0=
Subject key identifier: 36:05:B0:7B:A9:2C:CA:09:38:34:20:ED:3A:80:15:95:58:69:76:B6
Authority key identifier: C1:73:BB:E5:F7:23:78:45:AC:A8:D3:26:3B:8D:51:EF:37:8F:C1:20
Certificate issuer: /CN=c173bbe5f7237845aca8d3263b8d51ef378fc120
Certificate serial: 01976960B1B7F26DC61608F5F1339001DFBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wXO75fcjeEWsqNMmO41R7zePwSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/99d2f5-1800-4c08-bcad-8a751b0e0170/1/wXO75fcjeEWsqNMmO41R7zePwSA.mft
Manifest number: 0280
Signing time: Fri 13 Jun 2025 13:00:33 +0000
Manifest this update: Fri 13 Jun 2025 13:00:33 +0000
Manifest next update: Sat 14 Jun 2025 13:00:33 +0000
Files and hashes: 1: nTT0TyM5N3ly5yMdXzhx4HHtEso.roa (hash: RLNwdKAN6eUr14/Qkl0nwCAt9mev9qzfdg1E2WS7ZdA=)
2: wXO75fcjeEWsqNMmO41R7zePwSA.crl (hash: H1OLLEhHUMKBRmfjnbwMWhmRNBelh0cI//tnrGuxTWo=)
3: wkDz4piEW6E8TjjPv3mOyqzv81A.roa (hash: eds8liA7bmXrlLWfOe2ZVl6NU4VaLq7onyWiImSwEm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/99d2f5-1800-4c08-bcad-8a751b0e0170/1/wXO75fcjeEWsqNMmO41R7zePwSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/99d2f5-1800-4c08-bcad-8a751b0e0170/1/wXO75fcjeEWsqNMmO41R7zePwSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wXO75fcjeEWsqNMmO41R7zePwSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:b1:b7:f2:6d:c6:16:08:f5:f1:33:90:01:df:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c173bbe5f7237845aca8d3263b8d51ef378fc120
Validity
Not Before: Jun 13 13:00:33 2025 GMT
Not After : Jun 14 13:00:33 2025 GMT
Subject: CN=3605b07ba92cca09383420ed3a801595586976b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1b:54:1a:99:a9:e0:e9:a3:2f:0f:52:d3:dc:
a1:1c:44:64:aa:95:82:0d:dd:e8:cc:3a:10:75:e1:
87:e3:93:a3:ee:1d:e3:8d:72:01:a9:4f:2b:bc:68:
85:88:3b:c7:ed:c4:3c:9f:dc:d0:85:37:4d:c3:07:
0b:49:25:e5:3b:f2:9c:cb:88:c8:9a:f9:ab:05:79:
63:71:85:8f:eb:75:54:83:f1:59:1d:11:c1:97:14:
ea:6d:ed:97:a0:46:8a:0b:bc:ca:08:79:05:72:df:
87:28:ee:be:47:c6:dd:29:41:51:e1:e7:09:01:13:
d1:a9:8d:d4:72:17:b8:4b:8b:e3:57:82:63:81:aa:
c5:12:5f:1e:8e:2d:a0:cf:d0:e6:23:c3:57:43:cc:
aa:42:91:9b:6d:95:9e:4a:4d:34:09:19:68:8f:e5:
81:9f:8c:4d:af:de:0d:c3:80:5d:28:a6:32:73:45:
65:36:44:f5:a2:45:d8:82:b7:88:fe:04:ac:4a:3a:
0e:48:63:b2:8b:47:5e:c1:56:de:9f:40:e1:ab:66:
14:3a:64:37:11:90:4f:82:bb:b4:a0:de:d8:21:16:
5c:2d:90:bc:88:8a:fb:29:7a:a6:9e:25:ed:3b:96:
77:d6:bc:46:1e:3c:53:65:d1:77:04:d4:c5:35:14:
5a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:05:B0:7B:A9:2C:CA:09:38:34:20:ED:3A:80:15:95:58:69:76:B6
X509v3 Authority Key Identifier:
keyid:C1:73:BB:E5:F7:23:78:45:AC:A8:D3:26:3B:8D:51:EF:37:8F:C1:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXO75fcjeEWsqNMmO41R7zePwSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/99d2f5-1800-4c08-bcad-8a751b0e0170/1/wXO75fcjeEWsqNMmO41R7zePwSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/99d2f5-1800-4c08-bcad-8a751b0e0170/1/wXO75fcjeEWsqNMmO41R7zePwSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:a1:3c:e9:18:15:68:cd:3f:e3:e5:23:2a:32:dd:49:6a:b8:
3f:e0:9d:42:9e:85:e0:bc:f7:df:d6:39:ae:09:72:99:4b:b4:
8e:f6:35:54:2f:e2:ce:26:14:10:43:df:00:e0:ff:94:8e:c8:
36:f6:73:a9:c3:44:98:bf:3d:a6:b4:ee:91:02:64:95:78:b0:
51:ba:5f:45:26:e0:fa:60:64:84:19:dc:28:e3:83:e9:b8:c3:
bd:40:4a:f1:3a:09:46:c5:5e:24:22:4a:49:9e:df:5b:8e:d8:
83:4c:ab:26:d4:04:78:30:70:95:2c:8a:73:ae:a3:2c:70:b2:
b9:5e:5a:db:78:6f:17:ed:f0:c9:30:9b:94:bc:ec:2c:a1:8a:
42:7e:76:cf:dc:a0:d5:e2:bb:72:ac:7b:d0:d9:98:4c:6b:4f:
61:76:29:fd:e6:8a:66:7a:3a:e1:14:a3:98:f7:0a:64:69:fd:
c4:1f:8a:2f:14:8d:31:8a:6a:6f:6f:1a:51:a1:55:ea:e3:4d:
60:15:e6:04:fe:df:3a:11:27:e9:c8:6e:ac:18:bb:3b:3f:b5:
ff:41:49:dc:f7:eb:79:50:2e:3a:06:42:d4:15:65:93:98:36:
f0:ab:8c:92:77:d8:b6:bd:4d:85:b3:57:cb:9e:bb:13:67:bd:
27:77:94:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpYLG38m3GFgj18TOQAd+7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxNzNiYmU1ZjcyMzc4NDVhY2E4ZDMyNjNiOGQ1MWVmMzc4
ZmMxMjAwHhcNMjUwNjEzMTMwMDMzWhcNMjUwNjE0MTMwMDMzWjAzMTEwLwYDVQQD
EygzNjA1YjA3YmE5MmNjYTA5MzgzNDIwZWQzYTgwMTU5NTU4Njk3NmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxtUGpmp4OmjLw9S09yhHERkqpWC
Dd3ozDoQdeGH45Oj7h3jjXIBqU8rvGiFiDvH7cQ8n9zQhTdNwwcLSSXlO/Kcy4jI
mvmrBXljcYWP63VUg/FZHRHBlxTqbe2XoEaKC7zKCHkFct+HKO6+R8bdKUFR4ecJ
ARPRqY3Uche4S4vjV4JjgarFEl8eji2gz9DmI8NXQ8yqQpGbbZWeSk00CRloj+WB
n4xNr94Nw4BdKKYyc0VlNkT1okXYgreI/gSsSjoOSGOyi0dewVben0Dhq2YUOmQ3
EZBPgru0oN7YIRZcLZC8iIr7KXqmniXtO5Z31rxGHjxTZdF3BNTFNRRa+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDYFsHupLMoJODQg7TqAFZVYaXa2MB8GA1UdIwQY
MBaAFMFzu+X3I3hFrKjTJjuNUe83j8EgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1hPNzVmY2plRVdzcU5NbU80MVI3emVQd1NBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy85OWQyZjUtMTgwMC00YzA4LWJjYWQt
OGE3NTFiMGUwMTcwLzEvd1hPNzVmY2plRVdzcU5NbU80MVI3emVQd1NBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy85OWQyZjUtMTgwMC00YzA4LWJjYWQtOGE3NTFiMGUwMTcw
LzEvd1hPNzVmY2plRVdzcU5NbU80MVI3emVQd1NBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO6E86RgV
aM0/4+UjKjLdSWq4P+CdQp6F4Lz339Y5rglymUu0jvY1VC/iziYUEEPfAOD/lI7I
NvZzqcNEmL89prTukQJklXiwUbpfRSbg+mBkhBncKOOD6bjDvUBK8ToJRsVeJCJK
SZ7fW47Yg0yrJtQEeDBwlSyKc66jLHCyuV5a23hvF+3wyTCblLzsLKGKQn52z9yg
1eK7cqx70NmYTGtPYXYp/eaKZno64RSjmPcKZGn9xB+KLxSNMYpqb28aUaFV6uNN
YBXmBP7fOhEn6churBi7Oz+1/0FJ3PfreVAuOgZC1BVlk5g28KuMknfYtr1NhbNX
y567E2e9J3eUVw==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:29:07 2025 by rpki-client