Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/153d53-6e69-4301-abd3-f311bac2a37f/1/wb80sZClHOUwAleRGvMEBPSVH7Y.mft
File: wb80sZClHOUwAleRGvMEBPSVH7Y.mft (raw, json)
Hash identifier: mnAqkLJqd+ucWqT8ho7EV6DKe065NW8EuAE3ALp9qVg=
Subject key identifier: CC:11:28:9F:E5:EF:C8:15:AC:5E:8F:6F:0B:D6:7F:FD:C2:F7:A3:3B
Authority key identifier: C1:BF:34:B1:90:A5:1C:E5:30:02:57:91:1A:F3:04:04:F4:95:1F:B6
Certificate issuer: /CN=c1bf34b190a51ce5300257911af30404f4951fb6
Certificate serial: 01976D3E0DAA4DD3287283DD32A86E2200B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wb80sZClHOUwAleRGvMEBPSVH7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/153d53-6e69-4301-abd3-f311bac2a37f/1/wb80sZClHOUwAleRGvMEBPSVH7Y.mft
Manifest number: 158D
Signing time: Sat 14 Jun 2025 07:01:12 +0000
Manifest this update: Sat 14 Jun 2025 07:01:12 +0000
Manifest next update: Sun 15 Jun 2025 07:01:12 +0000
Files and hashes: 1: 0tyV27ZaRKIuc5h8kTDsBiv4BZI.roa (hash: 1dyOdZnQpGVWWsvnKswgEprRwbXy0vsePve+ulQremU=)
2: wb80sZClHOUwAleRGvMEBPSVH7Y.crl (hash: Hw7stjU/LcI+ilCBxJ3CyMHcgHsvuBYOGDwc4gInxt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/153d53-6e69-4301-abd3-f311bac2a37f/1/wb80sZClHOUwAleRGvMEBPSVH7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/153d53-6e69-4301-abd3-f311bac2a37f/1/wb80sZClHOUwAleRGvMEBPSVH7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/wb80sZClHOUwAleRGvMEBPSVH7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:0d:aa:4d:d3:28:72:83:dd:32:a8:6e:22:00:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1bf34b190a51ce5300257911af30404f4951fb6
Validity
Not Before: Jun 14 07:01:12 2025 GMT
Not After : Jun 15 07:01:12 2025 GMT
Subject: CN=cc11289fe5efc815ac5e8f6f0bd67ffdc2f7a33b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b1:7f:f5:df:9d:2d:bb:7f:1f:73:6d:4d:be:
d9:b7:ba:0d:e8:fa:49:a7:41:56:92:a8:fa:28:22:
11:8f:26:b3:a0:7e:93:62:20:12:08:e6:dc:8f:9b:
ab:0f:7f:15:8c:6a:96:f5:e9:6b:c9:7e:f2:b4:7c:
6b:15:3b:94:aa:eb:9b:6c:d4:9f:3f:42:ce:cd:eb:
23:92:1e:be:1b:bd:d4:62:bd:e9:b4:80:08:ba:19:
ac:dd:ee:d4:97:21:0f:c0:15:a0:d2:ac:24:33:4e:
94:95:96:0a:a6:2d:53:6e:6b:36:6a:8e:04:94:7e:
ff:21:96:2b:eb:1f:35:74:a1:6d:15:d7:1c:8f:f1:
33:fc:cf:ed:eb:f4:a3:03:ab:f5:d5:b9:3a:20:47:
11:72:48:d1:95:0c:60:38:f7:bb:98:4a:4e:7b:b1:
71:05:47:17:6f:71:49:01:57:76:e1:c4:1e:ea:96:
bc:1d:03:e1:96:09:40:a5:44:fe:d4:45:9e:ac:41:
bb:5c:df:9b:e1:14:05:3b:41:97:4c:1a:23:09:43:
ba:78:0f:46:43:66:78:00:1f:5b:dc:86:6e:2f:51:
cd:0c:d1:ae:39:4a:3f:e6:d0:32:11:45:5b:a5:6c:
a3:f9:a7:27:4e:37:cb:42:97:4f:65:f5:9d:b8:86:
0f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:11:28:9F:E5:EF:C8:15:AC:5E:8F:6F:0B:D6:7F:FD:C2:F7:A3:3B
X509v3 Authority Key Identifier:
keyid:C1:BF:34:B1:90:A5:1C:E5:30:02:57:91:1A:F3:04:04:F4:95:1F:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wb80sZClHOUwAleRGvMEBPSVH7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/153d53-6e69-4301-abd3-f311bac2a37f/1/wb80sZClHOUwAleRGvMEBPSVH7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/153d53-6e69-4301-abd3-f311bac2a37f/1/wb80sZClHOUwAleRGvMEBPSVH7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:25:b9:7d:fe:45:0b:e4:c1:3a:b0:f5:68:98:fb:2f:c2:19:
57:35:9f:13:89:85:d8:67:7c:6e:46:0a:12:7f:53:2f:29:d5:
29:4d:c2:1e:8b:46:3d:29:8b:0f:d3:a5:ed:27:5b:70:d4:37:
d5:c2:78:b0:bd:01:55:00:11:77:54:67:f9:e1:8e:7f:b5:8d:
cd:da:1b:75:66:f9:97:7d:c3:74:85:bd:c0:b5:87:2e:43:bf:
71:a0:1f:53:df:f9:69:94:4f:84:75:cb:3d:c2:9a:16:16:b4:
b0:30:f0:b4:af:e9:a9:ce:67:68:4f:16:f6:c7:73:82:ce:e6:
d2:c5:71:da:0d:6e:01:1e:94:a2:a3:b2:cc:be:ff:5f:88:db:
04:8d:31:91:7c:53:36:44:9c:e7:4c:26:5d:99:d2:14:e8:1e:
53:67:17:f7:e3:ad:90:77:54:d6:c6:50:c7:2f:c3:e7:39:7e:
9f:31:7e:3a:e2:b9:0c:db:53:fb:fe:ca:00:d8:c3:8b:d4:b8:
40:36:de:b6:21:10:2b:fc:87:d3:fb:83:b6:cc:36:a8:19:6b:
6b:f9:30:5e:be:68:b8:c9:b1:5f:2d:dd:cd:7a:f8:2c:54:1a:
d4:6f:7d:77:24:7d:70:71:58:e0:6f:a2:b5:71:74:69:39:37:
27:20:22:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:09:12 2025 by rpki-client