Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.mft
File: wtKiNOIkv4eZby8N9Vnq2IL55lE.mft (raw, json)
Hash identifier: 3juTUd+GGo+B7vsHEYlBjgu/6ikxiErBH8gDa84YHyE=
Subject key identifier: 32:07:5A:49:C3:8D:F0:3E:72:97:12:2D:6B:EC:3C:2A:3C:97:9D:5B
Authority key identifier: C2:D2:A2:34:E2:24:BF:87:99:6F:2F:0D:F5:59:EA:D8:82:F9:E6:51
Certificate issuer: /CN=c2d2a234e224bf87996f2f0df559ead882f9e651
Certificate serial: 019770E39F526B5C2FBD64A2CC2288A91C32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtKiNOIkv4eZby8N9Vnq2IL55lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.mft
Manifest number: 15A0
Signing time: Sun 15 Jun 2025 00:00:55 +0000
Manifest this update: Sun 15 Jun 2025 00:00:55 +0000
Manifest next update: Mon 16 Jun 2025 00:00:55 +0000
Files and hashes: 1: 2oAVyU2seJGTQFfvnoLEW0LxBMw.roa (hash: ZURqts9j5VKp8XJN1Pz3dvi3R29PhjPq43deEFPHUGM=)
2: AT0dJX8We-n1OQnzvfJggA9FrB4.roa (hash: 9UAeHkptLtx/0ySMZUXtLEVDmGoLUOk5U9+no/9RFDk=)
3: wtKiNOIkv4eZby8N9Vnq2IL55lE.crl (hash: dm+nB0xS1LjKNPCodJmix9K631UYvu5Lp+j91l+kSro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wtKiNOIkv4eZby8N9Vnq2IL55lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:e3:9f:52:6b:5c:2f:bd:64:a2:cc:22:88:a9:1c:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d2a234e224bf87996f2f0df559ead882f9e651
Validity
Not Before: Jun 15 00:00:55 2025 GMT
Not After : Jun 16 00:00:55 2025 GMT
Subject: CN=32075a49c38df03e7297122d6bec3c2a3c979d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:27:5d:b6:a0:60:8f:85:cc:fe:c5:eb:d8:26:
76:f7:d6:b4:a3:32:cd:1b:12:9e:2c:ee:6b:1f:84:
34:ff:13:cb:cf:29:3c:7a:04:f8:78:3d:ac:c9:d2:
6c:8a:6e:be:f0:58:73:3f:a7:9a:7c:48:0f:a1:b4:
12:ff:49:e8:d8:4c:62:75:08:a4:08:dd:1b:ff:75:
c3:24:bf:e6:a1:7b:c3:90:b7:71:fb:8f:9c:d0:f9:
5a:64:f0:f8:54:4e:9a:a5:55:57:c6:5a:9d:60:c0:
d7:fc:0b:d1:c8:5b:37:e5:1c:aa:90:c2:47:24:cc:
ca:68:2c:6e:1b:1f:61:9e:24:ea:70:02:83:d0:bc:
44:62:b1:b5:78:c1:81:93:1c:ca:4a:5d:50:e2:c8:
f7:ec:cc:15:ff:1b:de:80:f5:41:64:11:11:18:79:
f7:ec:c3:25:33:44:d0:6a:db:bf:c1:f7:8d:cd:97:
b2:f1:d6:68:3f:4b:21:30:64:0d:3a:0b:77:f2:35:
44:8f:f1:cc:71:02:10:f7:b2:1e:69:17:58:3d:fc:
f7:b0:e7:50:07:c1:95:6e:c0:50:af:42:e2:15:af:
9e:08:b7:da:ee:e6:82:94:aa:92:b7:92:27:4c:96:
d6:b0:9f:a3:ec:80:49:8e:a5:f5:db:46:f2:ee:cb:
f8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:07:5A:49:C3:8D:F0:3E:72:97:12:2D:6B:EC:3C:2A:3C:97:9D:5B
X509v3 Authority Key Identifier:
keyid:C2:D2:A2:34:E2:24:BF:87:99:6F:2F:0D:F5:59:EA:D8:82:F9:E6:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtKiNOIkv4eZby8N9Vnq2IL55lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:ab:90:20:aa:b2:dd:65:5c:01:fc:c4:6a:34:29:9d:65:5a:
db:84:51:28:af:c8:2b:d4:ae:cb:86:66:d9:7d:86:a2:6d:c4:
5c:c1:69:01:6e:d3:1a:e2:81:28:3e:c9:57:dd:f8:57:81:3b:
61:0f:3a:de:04:e0:e1:d5:d2:eb:d3:61:cf:6e:94:c5:6c:0a:
c0:cc:07:9b:d9:ce:c9:52:43:82:eb:0b:89:f0:01:df:04:fe:
c3:bb:5d:64:d8:34:52:ba:d9:5c:ec:8b:4c:8a:4b:8f:da:b6:
49:49:ee:c5:f3:5d:b8:db:74:6c:56:66:63:61:fe:3b:9d:64:
f1:11:3a:22:9f:78:5e:c4:77:1c:6e:8d:d6:4b:54:dc:1f:0b:
a5:28:30:65:60:e6:4d:a0:ad:87:55:88:4f:e5:c2:e3:d0:2e:
98:19:35:5e:07:fe:a0:02:1d:fb:0d:b6:4a:c0:8a:1c:48:60:
5f:fe:a7:f0:d3:59:da:3e:b5:c6:75:be:64:9e:15:76:7f:0f:
86:0c:64:47:81:ae:7b:fe:ea:d1:04:33:88:40:78:39:d4:c6:
eb:62:c8:1a:1e:d2:c2:a5:de:34:6c:55:44:72:66:ae:9a:09:
b3:90:63:5c:4b:13:1b:08:29:a4:c8:fd:2b:0d:3f:80:9d:dc:
44:b8:de:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:59:18 2025 by rpki-client