Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.mft
File: wessYB-m0HUHlzCB-qEyX-GQsnY.mft (raw, json)
Hash identifier: nUAUvbQjP9awXUaTlJYmcYrihiM2Ft8w1DCaTgWwvM4=
Subject key identifier: 8B:11:ED:49:2E:46:28:CB:F6:A1:BC:06:DD:74:22:51:D4:01:5C:1A
Authority key identifier: C1:EB:2C:60:1F:A6:D0:75:07:97:30:81:FA:A1:32:5F:E1:90:B2:76
Certificate issuer: /CN=c1eb2c601fa6d07507973081faa1325fe190b276
Certificate serial: 01978357E169EE54E64013187EC864E92BD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wessYB-m0HUHlzCB-qEyX-GQsnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.mft
Manifest number: 0417
Signing time: Wed 18 Jun 2025 14:01:04 +0000
Manifest this update: Wed 18 Jun 2025 14:01:04 +0000
Manifest next update: Thu 19 Jun 2025 14:01:04 +0000
Files and hashes: 1: 9VIpFT_uZfwTVVoxe7PNJO0XppE.roa (hash: dBqoAsOTvzrDylULyUsZPwgLS85TPwI2yvXP5iugyTk=)
2: v1vDCS3zEydWpnAi830GA_yQEHw.roa (hash: 3xFB/pduxsTBOKVMWYRZZ5LgXgY+cAqxpBeMHy8oimw=)
3: wessYB-m0HUHlzCB-qEyX-GQsnY.crl (hash: e0Kgt+sV/OL4BiY617FkKFUBpxKJgNI4V894HnYdkPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wessYB-m0HUHlzCB-qEyX-GQsnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 14:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:83:57:e1:69:ee:54:e6:40:13:18:7e:c8:64:e9:2b:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1eb2c601fa6d07507973081faa1325fe190b276
Validity
Not Before: Jun 18 14:01:04 2025 GMT
Not After : Jun 19 14:01:04 2025 GMT
Subject: CN=8b11ed492e4628cbf6a1bc06dd742251d4015c1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a3:af:f1:a1:88:d0:c8:d6:d3:e7:83:2b:fb:
34:12:14:39:67:ed:64:78:d0:c8:1a:83:52:53:d8:
e6:ce:59:5e:57:fe:86:9d:d9:50:ca:8a:2f:d5:18:
ec:1a:a8:d4:ce:ef:18:d8:90:01:60:d1:fd:98:2e:
d4:cb:85:b4:ce:77:11:80:69:22:8a:1a:e7:b1:b8:
4d:53:53:31:32:b1:8e:40:25:e4:06:c0:5c:55:36:
6d:e1:90:9d:3a:2e:f4:cb:c7:5e:39:ba:bb:95:a8:
89:0d:38:b0:c0:46:41:a1:b3:9f:42:72:e1:cb:ec:
10:9f:44:d0:c6:cd:3c:20:d6:52:80:76:12:36:b4:
72:16:80:f0:98:12:5f:96:bd:c5:ea:6d:e2:f1:5b:
6f:94:10:01:d0:c4:56:60:cc:5b:a1:9a:45:a0:98:
62:80:04:58:fc:ba:10:1f:cc:dc:59:48:18:71:4a:
cf:6d:e5:2d:43:55:79:1b:d1:bb:06:ef:3c:22:7c:
82:26:c4:c8:eb:a6:4d:18:2b:26:e5:95:53:1a:06:
95:b7:0a:31:90:7b:05:a9:a7:50:f1:5f:de:5d:93:
c3:38:11:36:4b:dd:0a:1a:b1:54:56:d3:33:bc:e6:
d9:31:75:98:1a:78:60:38:45:5f:d4:6c:7d:6c:98:
d5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:11:ED:49:2E:46:28:CB:F6:A1:BC:06:DD:74:22:51:D4:01:5C:1A
X509v3 Authority Key Identifier:
keyid:C1:EB:2C:60:1F:A6:D0:75:07:97:30:81:FA:A1:32:5F:E1:90:B2:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wessYB-m0HUHlzCB-qEyX-GQsnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:38:16:02:28:43:c6:ef:05:c8:d8:04:bb:ec:c9:f0:45:ec:
f4:10:99:ec:ce:80:0a:6d:bb:d7:ee:d6:7e:ef:0c:e7:55:a6:
e6:a1:c0:4f:a6:c7:8a:d6:cb:43:11:cc:7a:88:5f:b2:fa:fd:
9f:82:ee:dc:d2:40:b7:27:51:6e:11:c7:f7:d6:97:a3:40:2a:
c9:4c:9c:c3:3a:64:62:09:06:8a:47:89:e4:0f:83:97:a1:de:
c9:ba:0b:00:1e:22:00:f0:7e:e4:8d:19:4e:b1:fa:9b:99:32:
7f:d6:c7:ad:08:ca:b7:7f:e0:ea:59:12:93:97:d5:29:22:1b:
14:cb:84:53:51:db:5d:d1:1a:bb:b8:88:64:88:2e:5d:c6:0a:
5f:c6:fd:5c:2c:2e:09:8b:91:13:10:9c:0f:5a:7c:50:ff:8c:
5e:de:1c:65:10:6d:b5:7b:90:05:47:ac:2e:27:55:8b:de:f2:
c7:16:fd:66:9d:2a:81:3f:94:fe:fd:ee:12:f9:d8:b2:65:08:
11:9d:18:ce:f1:e2:43:1e:52:bf:fc:44:3d:25:78:d2:57:e2:
b5:9e:4a:df:66:18:f4:24:f7:86:88:74:77:56:b0:f8:79:e5:
0e:82:76:00:49:f4:50:db:8f:ae:50:9b:66:41:3e:01:c6:de:
97:b1:12:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 23:11:24 2025 by rpki-client