Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.mft
File: woWhR044Yn4wGlUb4076RYKlzzk.mft (raw, json)
Hash identifier: pBhGBcokLz21TISejKkY2yKrZEO6CFB+WMpTymGDsPc=
Subject key identifier: 49:24:8D:51:44:0D:28:CC:14:77:54:BE:B3:95:7E:8E:9F:7B:65:A7
Authority key identifier: C2:85:A1:47:4E:38:62:7E:30:1A:55:1B:E3:4E:FA:45:82:A5:CF:39
Certificate issuer: /CN=c285a1474e38627e301a551be34efa4582a5cf39
Certificate serial: 01976DAB9F98D60FBA78F0BD95F81B221595
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/woWhR044Yn4wGlUb4076RYKlzzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 09:00:53 +0000
Manifest this update: Sat 14 Jun 2025 09:00:53 +0000
Manifest next update: Sun 15 Jun 2025 09:00:53 +0000
Files and hashes: 1: BVOoOEB4gLobrgdxyI5-9zlLWgE.roa (hash: pTz91HcnSysQwLiCozFtJaXWh/WUZ9JSyAK8aIEd67c=)
2: TKlbM4JoTI14SvlWl9KxKwEmigw.roa (hash: YEHXScxruB3ZAlC0fbNpVAnfjw2qlaMRSrlrmf/M0XY=)
3: woWhR044Yn4wGlUb4076RYKlzzk.crl (hash: V7llow3Wfd+pXj1tErXTZdonh9+j3jXgCK7QyQVIjA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/woWhR044Yn4wGlUb4076RYKlzzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:9f:98:d6:0f:ba:78:f0:bd:95:f8:1b:22:15:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c285a1474e38627e301a551be34efa4582a5cf39
Validity
Not Before: Jun 14 09:00:53 2025 GMT
Not After : Jun 15 09:00:53 2025 GMT
Subject: CN=49248d51440d28cc147754beb3957e8e9f7b65a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:06:31:0a:b1:40:11:a0:66:14:f8:f1:ff:13:
33:70:7e:df:6f:ba:a5:a5:49:16:7a:7a:f3:e4:bc:
99:92:8f:ee:18:0e:9a:e0:42:0b:b0:0d:5d:82:5a:
b5:7f:b5:b4:bc:8c:5f:82:94:81:83:b6:82:47:f6:
11:2c:3b:58:fd:b1:54:de:09:ad:9d:1c:d3:4a:8e:
83:59:17:77:f7:c8:7e:65:f2:47:d4:15:4d:30:2b:
e7:d3:92:07:1a:f1:cd:f6:72:45:0d:7e:84:e4:58:
a4:ef:ad:62:dc:73:70:2d:35:fe:e3:e2:68:dd:9a:
e3:16:67:af:61:fb:31:b5:23:be:50:fa:e8:7b:a9:
75:bb:be:df:69:b0:e1:da:59:09:f8:64:0f:8c:92:
09:c8:58:b7:01:38:07:0a:17:fc:5a:c8:00:36:f0:
ce:be:15:62:e0:d1:4c:e2:00:e2:4d:41:07:e0:2e:
fc:7f:b7:d4:c3:3a:33:b8:31:35:96:77:a6:e8:40:
08:75:ed:16:0f:90:b2:de:f6:60:fe:50:d3:23:68:
9e:9e:45:81:0f:0c:a0:94:e4:e7:0c:bf:56:19:72:
27:da:0c:ec:54:e6:ab:a9:82:47:e0:c1:b9:89:06:
70:93:ec:56:bc:5c:73:52:7c:1f:14:ad:73:e2:10:
5d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:24:8D:51:44:0D:28:CC:14:77:54:BE:B3:95:7E:8E:9F:7B:65:A7
X509v3 Authority Key Identifier:
keyid:C2:85:A1:47:4E:38:62:7E:30:1A:55:1B:E3:4E:FA:45:82:A5:CF:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/woWhR044Yn4wGlUb4076RYKlzzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:7c:3d:00:9c:45:bc:8a:8d:4b:31:4d:3b:28:e4:9b:cf:6a:
6a:11:57:67:3a:14:92:06:c3:91:fd:27:87:99:50:89:0a:b8:
35:5f:03:b2:12:a0:81:f8:b9:47:cf:d0:e8:c1:d9:0a:03:55:
ac:c7:72:ad:68:20:50:5f:0b:8e:0c:54:32:42:22:45:0f:e1:
c7:66:c6:48:37:5c:e9:ad:aa:0c:d0:03:c8:62:f3:53:dd:bc:
fc:1c:65:ae:84:a2:55:2b:37:87:61:93:70:8a:81:7a:b4:a8:
2f:c2:4e:b7:dc:5f:ae:5e:02:26:06:9a:9b:2e:e7:85:43:2b:
35:9f:fc:26:be:b2:a8:d7:cb:90:4a:9b:b6:c3:07:b8:9a:5e:
e4:7f:90:95:fb:ca:02:08:72:67:d0:84:a7:98:4d:d3:c4:e8:
73:93:6c:4d:14:53:49:71:4b:01:6f:24:85:48:10:d2:76:f8:
dd:79:e4:29:fb:a3:92:f1:05:94:19:a2:0f:23:d8:a1:47:1e:
f9:b9:e4:7f:c2:b8:c6:24:15:b1:c3:95:5b:5e:6c:8b:83:97:
55:45:f8:2d:4d:94:d5:c5:a6:b0:9b:f4:26:91:0e:9c:90:26:
bf:c0:f9:a6:6a:dd:41:0f:f2:e5:54:06:7a:34:97:59:c7:aa:
0a:a7:d9:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:15:20 2025 by rpki-client