Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
File: WS58HyOUw-OqqMy2R_2DZx1gmLc.mft (raw, json)
Hash identifier: OcicGEQ+I+NdwdS6lLnkea0AiYBRqnzYoQeJZMtZvyE=
Subject key identifier: FC:FE:D0:73:4B:53:70:5C:27:26:F2:C7:3C:B0:8A:99:CE:26:01:C3
Authority key identifier: 59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
Certificate issuer: /CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Certificate serial: 01976F2CA3BBA451AF303A2DEF0B4AB6F308
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
Manifest number: 15A2
Signing time: Sat 14 Jun 2025 16:01:25 +0000
Manifest this update: Sat 14 Jun 2025 16:01:25 +0000
Manifest next update: Sun 15 Jun 2025 16:01:25 +0000
Files and hashes: 1: 3IRgLqbP_ec1EGoarWc4xpisfyQ.roa (hash: GZRzYUts0dDxW36RNVg638JimijfwAxJcVtkZHDVq/A=)
2: 96CIMKKoqN02QJYrluNPvEhoHEk.roa (hash: PH9kqz02Fz7yivfLv32cVnK1ToPORdX94byNA/yE6eo=)
3: HcTZ55L4MSrkLfHwNTyTNa60af4.roa (hash: lgA8q/P+YEtpYxddfFcHkInhcj8mF/W8Rf9rQjSJ6rQ=)
4: WS58HyOUw-OqqMy2R_2DZx1gmLc.crl (hash: CXm9gUGa4Ro/U50vcxX5iBAZw7Kyiyyoo26Cqa1Zvpc=)
5: g81BDZuaFjsKwaBqFnyHLcFPLZs.roa (hash: jSl9q0mLuOCF9O2+fEMHTTPvVPdoA/bqHU0pF52USoE=)
6: hVkEcV5BYqMN66hJqLsfxmtD6-I.roa (hash: qGjxxeMK37L3nzimP1DFdWK9NxQEtXmgcd3DzWsOUEg=)
7: i7LPx3k5NSVEBiacqO7vPHaWiwU.roa (hash: gYTLRIvfaUJXoKPS7pQ+Cpl5E8jxQVsdISY+9vzV8lg=)
8: p4_2wcOawugaSj43rAVSkkmPf8k.roa (hash: Y3pbjD0B2GwO/FNWMPam+BoxaGEQd85k797hs416lA8=)
9: t7xFNtek28TRqAwV5AsSOdRcmio.roa (hash: q0nm/KnHwfhrXByIEAa1Oz0ny+0DeTEXrb5cVZLEYz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:a3:bb:a4:51:af:30:3a:2d:ef:0b:4a:b6:f3:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Validity
Not Before: Jun 14 16:01:25 2025 GMT
Not After : Jun 15 16:01:25 2025 GMT
Subject: CN=fcfed0734b53705c2726f2c73cb08a99ce2601c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2f:6b:d2:9a:3c:e0:93:c8:17:38:13:2b:0e:
5f:c1:26:18:e3:8e:69:19:25:0a:6e:ae:36:7b:63:
b2:61:8c:ee:2d:f9:98:0c:ec:d6:69:4d:93:09:57:
87:59:28:2e:4b:90:3f:49:a9:c7:22:22:10:5f:1c:
46:c3:01:cd:00:00:14:9c:73:b4:98:45:42:b6:08:
90:ab:28:89:4b:6e:c6:10:86:e7:54:68:53:ee:82:
dd:91:68:1b:3a:05:b0:b2:03:bb:ae:53:de:b4:de:
39:46:5f:01:66:11:93:fe:9e:aa:5e:96:05:55:97:
7b:f3:48:6c:e9:c4:0f:18:a9:b8:47:b3:11:9a:4c:
03:38:8c:0f:9f:a4:0a:94:ca:24:f2:14:fc:46:3f:
20:51:24:62:35:47:b5:a1:a1:a9:3c:42:47:63:99:
fe:3c:19:6d:40:fe:34:9b:61:90:4d:1a:dc:3c:3d:
59:20:71:af:4c:71:cf:d5:5c:a1:a2:a4:53:78:65:
6b:90:0d:0f:8e:73:89:8f:1c:40:de:f5:70:2c:e7:
88:c0:63:e4:70:ea:4a:99:34:26:02:cd:ea:25:38:
47:4f:90:2c:b3:95:42:66:3b:2f:f3:94:c7:75:8d:
49:c4:a5:36:35:71:a8:4a:98:60:08:7f:a2:89:d4:
44:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:FE:D0:73:4B:53:70:5C:27:26:F2:C7:3C:B0:8A:99:CE:26:01:C3
X509v3 Authority Key Identifier:
keyid:59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:63:17:b7:16:3d:77:12:5a:ac:69:d0:b4:7b:69:72:f5:31:
87:5a:77:0d:c5:f6:96:59:df:89:d3:06:50:31:a3:e7:ea:ba:
04:54:12:62:9f:1f:be:33:47:27:35:06:e8:ce:f6:1b:66:42:
28:71:f8:44:5d:67:2a:95:4c:58:c2:b0:90:22:22:ba:2f:8f:
1d:6f:30:2f:8c:49:4b:47:b3:b1:06:d5:4d:e9:6f:15:d6:6f:
29:df:f7:47:0d:65:31:39:c5:63:23:c5:09:06:e7:ef:11:e6:
1a:94:f9:db:60:26:20:fe:59:72:8b:d1:8b:04:4d:a7:32:7e:
6a:05:3d:57:36:11:0a:2d:d7:58:5a:c4:28:ca:a5:ce:dc:83:
38:61:dc:67:04:8d:36:35:80:f4:fc:2c:78:45:1d:e4:f3:56:
33:02:ce:a9:46:37:6e:55:ec:d9:44:15:01:b0:b6:3c:9d:8b:
b1:12:a9:0d:98:3c:87:6a:fd:92:61:ff:34:ba:e1:98:26:de:
6a:71:21:7a:f5:c7:94:c2:50:fa:54:5f:16:81:24:90:ca:3c:
da:8b:c6:d4:b4:d0:22:49:fc:18:37:0e:57:33:14:a6:e6:c2:
4b:74:b1:74:ac:6d:0a:8a:8e:c6:e2:a9:ba:d5:24:61:7d:85:
36:bc:bb:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:02:02 2025 by rpki-client