Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.mft
File: wtKsHXyezPVli4jxb2E9ez6OjHI.mft (raw, json)
Hash identifier: QsDSF4TxArpJ/UfD7L8uyskAeI590b3VIXM1Kh8DLXw=
Subject key identifier: C6:5F:66:CA:0A:46:76:49:20:0F:39:B9:CA:08:31:82:0D:5A:5C:13
Authority key identifier: C2:D2:AC:1D:7C:9E:CC:F5:65:8B:88:F1:6F:61:3D:7B:3E:8E:8C:72
Certificate issuer: /CN=c2d2ac1d7c9eccf5658b88f16f613d7b3e8e8c72
Certificate serial: 01978A36018833E24178332B21155C3D0600
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtKsHXyezPVli4jxb2E9ez6OjHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.mft
Manifest number: 0C73
Signing time: Thu 19 Jun 2025 22:01:24 +0000
Manifest this update: Thu 19 Jun 2025 22:01:24 +0000
Manifest next update: Fri 20 Jun 2025 22:01:24 +0000
Files and hashes: 1: DkCgqG244-xdfGSiZiRL_6jjMU4.roa (hash: LYv1Ix1K/vm79oDEZ0SXpTqFtZHiYhhxeZ+EeZAbK6I=)
2: eaEk-4j5PrJQWB1ynGSuwR96qYE.roa (hash: cKnW7tUA+y/LjIR8x0MQBeinXC+rpLOrHc/MhvgB6Fk=)
3: wtKsHXyezPVli4jxb2E9ez6OjHI.crl (hash: 03MOGVZBxXemurBFNbN4UfDnZzu2c4kwh0alVf7mxb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wtKsHXyezPVli4jxb2E9ez6OjHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 15:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8a:36:01:88:33:e2:41:78:33:2b:21:15:5c:3d:06:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d2ac1d7c9eccf5658b88f16f613d7b3e8e8c72
Validity
Not Before: Jun 19 22:01:24 2025 GMT
Not After : Jun 20 22:01:24 2025 GMT
Subject: CN=c65f66ca0a467649200f39b9ca0831820d5a5c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:46:c9:a2:8d:7b:99:45:79:1c:99:48:d3:29:
e8:e7:ed:24:aa:2a:9a:8e:00:44:66:08:8e:66:9f:
6c:39:5e:43:26:90:7e:a8:35:64:ca:51:15:b7:c3:
05:5e:f7:ea:b1:14:3e:66:40:96:91:8e:98:b6:49:
58:94:0d:ef:ff:a3:47:30:e8:ba:d9:4f:3a:f3:c0:
b4:73:38:8a:4d:b9:86:69:58:de:9b:9c:01:77:61:
fe:c9:0e:b1:0b:7d:e3:ff:75:49:d0:7b:13:20:6e:
ba:f2:5e:96:d1:1d:89:3d:33:e8:59:e9:38:d3:1e:
63:2f:70:db:01:a0:f3:a9:f4:68:b5:71:5c:24:82:
ea:64:90:b9:f2:ad:2b:63:2b:91:1b:f6:09:14:00:
ff:aa:d9:43:f5:68:5b:e0:1b:47:62:16:b3:c0:fc:
ce:7b:b5:44:55:78:60:07:6a:38:9b:35:71:c0:ad:
46:83:2e:d3:3f:1f:d7:96:d3:76:e6:60:26:74:14:
59:bd:9d:e8:ae:3d:04:21:1a:aa:e6:40:26:53:fe:
fb:d7:ef:33:c0:81:98:97:ce:6e:87:56:5d:2e:5c:
4e:71:5f:f3:13:af:85:b7:54:c4:64:d6:42:d6:68:
fb:3d:5d:39:0f:69:99:ce:94:5b:f6:78:c7:5b:b9:
2d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:5F:66:CA:0A:46:76:49:20:0F:39:B9:CA:08:31:82:0D:5A:5C:13
X509v3 Authority Key Identifier:
keyid:C2:D2:AC:1D:7C:9E:CC:F5:65:8B:88:F1:6F:61:3D:7B:3E:8E:8C:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtKsHXyezPVli4jxb2E9ez6OjHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:80:ea:c3:1c:fd:98:13:64:64:51:bd:ef:25:2d:4f:71:2b:
c0:d3:7b:7c:a5:5b:b0:84:0f:11:3e:35:46:71:f6:ac:b0:7d:
65:01:06:da:65:09:78:7c:03:93:12:ad:1e:e1:01:60:48:44:
5d:63:ef:fc:15:75:07:fe:38:d9:e7:9b:f9:19:c6:d4:7a:74:
03:37:2b:1c:d6:b0:90:3b:69:57:b9:08:24:52:03:38:5b:24:
04:f3:5d:15:06:6a:14:07:e9:68:e2:78:b9:1d:ca:37:4c:65:
48:d6:20:1d:05:51:dc:cb:09:fd:e3:71:53:8a:b6:15:5a:19:
db:cf:fe:ff:53:ef:fa:1e:56:7f:7e:bf:70:d9:04:51:93:51:
85:82:e0:0e:b4:2f:70:31:b4:c5:1d:55:48:ed:cb:2e:b9:43:
9f:c7:b6:75:b8:77:86:6d:11:d3:df:90:67:ae:96:34:33:84:
1d:23:e6:c0:86:d6:36:45:f9:11:d9:94:4d:6a:b4:b7:14:6f:
b7:b5:6c:70:8f:28:72:da:23:0d:c9:f7:4c:4f:d4:ff:3b:e1:
82:f5:82:ca:a8:3b:0b:71:09:96:e0:1d:bf:54:8b:62:36:9e:
60:25:41:1c:70:a8:5f:96:a6:02:43:f6:c1:50:83:79:1c:45:
7f:b3:12:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 02:15:33 2025 by rpki-client