Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
File: wXLFrvM8BsSu8trI8FA_y92acoc.mft (raw, json)
Hash identifier: hS2o1vtIODCLt08sELf4yiTjUlePjs2eGtdRU7NgWrU=
Subject key identifier: 6C:01:A8:BA:2B:FD:59:78:DE:BB:12:05:E2:43:A3:DE:D2:E2:CB:92
Authority key identifier: C1:72:C5:AE:F3:3C:06:C4:AE:F2:DA:C8:F0:50:3F:CB:DD:9A:72:87
Certificate issuer: /CN=c172c5aef33c06c4aef2dac8f0503fcbdd9a7287
Certificate serial: 01978A366A32D7FDECC96DF02F87B6FEB212
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
Manifest number: 159E
Signing time: Thu 19 Jun 2025 22:01:51 +0000
Manifest this update: Thu 19 Jun 2025 22:01:51 +0000
Manifest next update: Fri 20 Jun 2025 22:01:51 +0000
Files and hashes: 1: kRQmIjZUZcW_fI2_4gYw0CKPjk8.roa (hash: GuGEs/myNDqnLNvt1oCueG5pjZk/wU9SkbqBX0DdzIw=)
2: kZ91QLg0xrut8heY5oLTREuaDCo.roa (hash: MHAbqSvE1IAdHrt1bDct/PVOIuPEBRkSyGqv/6pjqdI=)
3: wXLFrvM8BsSu8trI8FA_y92acoc.crl (hash: Gxs3nFoRdSk3kFdliMeRo3aXRNecCf6AhJWqxDJWGic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 19:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8a:36:6a:32:d7:fd:ec:c9:6d:f0:2f:87:b6:fe:b2:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c172c5aef33c06c4aef2dac8f0503fcbdd9a7287
Validity
Not Before: Jun 19 22:01:51 2025 GMT
Not After : Jun 20 22:01:51 2025 GMT
Subject: CN=6c01a8ba2bfd5978debb1205e243a3ded2e2cb92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e2:5c:aa:b3:df:20:6c:98:40:8e:4f:9f:bb:
00:70:53:ab:92:6d:3f:e6:5e:24:2c:15:5a:e9:9e:
85:32:db:06:0e:7d:91:7d:b0:6f:c3:25:7d:a4:84:
00:ef:f0:83:71:13:56:27:9e:a1:01:9b:ca:a4:a9:
0c:6f:73:08:c6:73:2d:65:89:43:a2:fb:21:fa:8c:
ab:7c:28:9b:be:09:91:67:a6:03:6d:62:c8:86:10:
25:ce:45:99:ef:b5:a7:11:83:db:0a:14:0e:52:06:
40:57:cd:d0:08:5f:28:3c:be:92:43:58:c9:03:6f:
f6:e7:42:e0:74:4e:05:3b:f1:c4:63:41:44:40:bd:
fb:c0:18:fc:9a:38:31:fb:c4:97:25:48:e1:6c:83:
7b:90:12:68:85:bc:92:1b:c6:7d:28:ed:db:77:2b:
c2:f3:72:f7:8b:18:69:73:5d:b7:f4:ad:ad:e1:d5:
5a:3a:e6:76:40:cf:f4:9e:f1:8a:c3:3a:ad:fb:42:
c1:21:cc:eb:c2:cb:66:a6:77:93:49:bd:80:6a:99:
07:b0:3b:2f:2c:b1:b2:de:d4:14:fc:df:bd:a4:25:
b5:5e:ef:5c:c9:33:30:aa:f6:bc:6e:0a:e1:21:87:
26:71:22:82:47:ac:2a:1c:55:ca:f4:e4:88:6b:e3:
a3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:01:A8:BA:2B:FD:59:78:DE:BB:12:05:E2:43:A3:DE:D2:E2:CB:92
X509v3 Authority Key Identifier:
keyid:C1:72:C5:AE:F3:3C:06:C4:AE:F2:DA:C8:F0:50:3F:CB:DD:9A:72:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ee:48:d7:3d:a5:5e:49:59:d0:b1:19:d6:18:fb:39:3d:6b:
3f:63:c4:d8:50:7c:82:3e:c4:3b:75:97:83:41:3b:a7:63:21:
5d:8e:71:cf:91:be:09:0f:53:ed:2f:fa:8b:97:19:e5:99:74:
db:36:25:27:4f:fe:87:ee:6d:6e:65:21:dc:e4:e9:f6:30:4c:
13:0e:1a:a6:28:15:19:09:9a:33:81:cd:76:26:36:0a:e9:58:
42:e1:3e:b4:5c:ef:aa:ae:fd:f5:98:89:49:25:25:66:83:69:
33:6f:b7:fb:37:6f:a9:65:b1:a1:73:21:bb:3c:07:80:b2:67:
9a:a2:43:d0:6b:7c:32:96:3e:c2:49:b2:98:12:13:c0:51:c8:
57:43:84:09:30:87:35:31:32:08:1b:d4:df:7d:36:7b:20:b1:
bb:8d:e1:4d:db:42:bc:68:89:41:27:c7:f7:38:db:50:44:a7:
74:32:9a:bb:a1:a1:5c:98:69:e8:f8:90:4c:e3:34:86:8a:eb:
b5:2f:c6:29:1f:c4:b1:7e:17:6b:c5:65:78:e1:70:a9:5f:b0:
77:5e:f2:03:cb:37:f5:ed:c5:0a:18:96:c2:98:86:6a:59:c7:
8c:83:3c:21:52:5d:c5:fb:f2:39:41:07:a7:10:78:3a:3e:62:
14:28:6d:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeKNmoy1/3syW3wL4e2/rISMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxNzJjNWFlZjMzYzA2YzRhZWYyZGFjOGYwNTAzZmNiZGQ5
YTcyODcwHhcNMjUwNjE5MjIwMTUxWhcNMjUwNjIwMjIwMTUxWjAzMTEwLwYDVQQD
Eyg2YzAxYThiYTJiZmQ1OTc4ZGViYjEyMDVlMjQzYTNkZWQyZTJjYjkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOJcqrPfIGyYQI5Pn7sAcFOrkm0/
5l4kLBVa6Z6FMtsGDn2RfbBvwyV9pIQA7/CDcRNWJ56hAZvKpKkMb3MIxnMtZYlD
ovsh+oyrfCibvgmRZ6YDbWLIhhAlzkWZ77WnEYPbChQOUgZAV83QCF8oPL6SQ1jJ
A2/250LgdE4FO/HEY0FEQL37wBj8mjgx+8SXJUjhbIN7kBJohbySG8Z9KO3bdyvC
83L3ixhpc1239K2t4dVaOuZ2QM/0nvGKwzqt+0LBIczrwstmpneTSb2AapkHsDsv
LLGy3tQU/N+9pCW1Xu9cyTMwqva8bgrhIYcmcSKCR6wqHFXK9OSIa+Oj9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGwBqLor/Vl43rsSBeJDo97S4suSMB8GA1UdIwQY
MBaAFMFyxa7zPAbErvLayPBQP8vdmnKHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1hMRnJ2TThCc1N1OHRySThGQV95OTJhY29jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8zMDYzMzAtMTFkMi00NDNmLTgzNDIt
ZWE1ODcwNjUzMDc2LzEvd1hMRnJ2TThCc1N1OHRySThGQV95OTJhY29jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8zMDYzMzAtMTFkMi00NDNmLTgzNDItZWE1ODcwNjUzMDc2
LzEvd1hMRnJ2TThCc1N1OHRySThGQV95OTJhY29jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHe5I1z2l
XklZ0LEZ1hj7OT1rP2PE2FB8gj7EO3WXg0E7p2MhXY5xz5G+CQ9T7S/6i5cZ5Zl0
2zYlJ0/+h+5tbmUh3OTp9jBMEw4apigVGQmaM4HNdiY2CulYQuE+tFzvqq799ZiJ
SSUlZoNpM2+3+zdvqWWxoXMhuzwHgLJnmqJD0Gt8MpY+wkmymBITwFHIV0OECTCH
NTEyCBvU3302eyCxu43hTdtCvGiJQSfH9zjbUESndDKau6GhXJhp6PiQTOM0horr
tS/GKR/EsX4Xa8VleOFwqV+wd17yA8s39e3FChiWwpiGalnHjIM8IVJdxfvyOUEH
pxB4Oj5iFChtiA==
-----END CERTIFICATE-----
Generated at Fri Jun 20 05:39:03 2025 by rpki-client