Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft
File: Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft (raw, json)
Hash identifier: tvXa3KcF8/bKjg/CVDvg9HXDuWWgUY3HTWb+6ogSPpU=
Subject key identifier: 5F:2B:FA:56:C2:60:3B:EE:0A:AC:47:AC:BE:F6:22:F8:A7:F1:EB:09
Authority key identifier: 59:DD:A7:5F:81:10:74:3D:25:0C:30:68:A3:56:CE:6A:CF:1C:4F:E2
Certificate issuer: /CN=59dda75f8110743d250c3068a356ce6acf1c4fe2
Certificate serial: 01976C98FB06E23835E16B10DC03178A30C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft
Manifest number: 15A8
Signing time: Sat 14 Jun 2025 04:00:54 +0000
Manifest this update: Sat 14 Jun 2025 04:00:54 +0000
Manifest next update: Sun 15 Jun 2025 04:00:54 +0000
Files and hashes: 1: HARnUvjlt2Ihiye5L31M1Ihsszo.roa (hash: R6szIcdOkXpk4Tvb4l6mExr2G3bKCj15fJUl212PxlA=)
2: Wd2nX4EQdD0lDDBoo1bOas8cT-I.crl (hash: aHbr1dI1zFlUaY8u0e1f95tCxie3w7cI3XuLeRr7YlI=)
3: eZmwFy41-LIbouqrlW9zkimoU3M.roa (hash: zJU/IMiyEvSZt1AwTK7cRbJ+HAzHnx6LAKEgb7nLXYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:fb:06:e2:38:35:e1:6b:10:dc:03:17:8a:30:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dda75f8110743d250c3068a356ce6acf1c4fe2
Validity
Not Before: Jun 14 04:00:54 2025 GMT
Not After : Jun 15 04:00:54 2025 GMT
Subject: CN=5f2bfa56c2603bee0aac47acbef622f8a7f1eb09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:83:36:e6:3c:f3:0d:39:53:17:c4:c5:ec:e3:
a2:d9:0b:81:5c:b3:48:44:c3:e1:63:7d:41:1e:9a:
b5:ee:8f:6c:86:6e:e2:df:2c:ed:6a:48:c0:d8:cd:
96:29:ac:fd:f9:b3:a0:45:d7:53:54:27:86:b4:98:
c7:00:e5:07:4c:8b:b2:a9:f3:da:8c:19:a4:1f:27:
94:b4:43:10:3f:9b:59:6c:11:ac:75:bf:d1:80:e2:
68:45:9c:b1:bb:65:cf:6f:b7:73:75:c2:0a:8e:71:
69:47:22:ab:c5:49:cf:20:74:74:87:36:83:63:d3:
f7:76:fe:6d:76:37:ef:6f:ae:73:42:21:f4:64:e7:
a0:02:99:28:ee:b8:00:61:d7:d5:e6:dc:ad:73:0b:
79:20:c9:e8:b6:01:78:7f:32:44:12:b2:f6:10:1d:
48:19:ee:c0:b0:18:dc:68:83:7b:53:67:dd:a7:2f:
70:71:29:7f:00:1a:48:6d:d6:8b:cd:9e:66:fc:b2:
0c:26:42:2c:93:00:9b:53:89:ad:41:3c:f6:7e:13:
12:ee:28:fb:45:1c:e3:64:12:5d:d2:0d:ab:d6:55:
03:6a:94:1c:3b:15:a3:5b:2a:a6:f0:67:38:44:83:
ca:8e:78:0e:91:be:99:aa:fa:4d:df:25:12:4e:2d:
76:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:2B:FA:56:C2:60:3B:EE:0A:AC:47:AC:BE:F6:22:F8:A7:F1:EB:09
X509v3 Authority Key Identifier:
keyid:59:DD:A7:5F:81:10:74:3D:25:0C:30:68:A3:56:CE:6A:CF:1C:4F:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:75:09:d5:43:f4:db:2a:ec:1c:b1:08:e2:7f:33:d4:6d:9c:
3c:9d:10:a2:50:4c:df:90:4c:01:bf:67:92:96:cb:12:13:91:
50:d0:9b:ef:2c:bf:27:2f:33:a2:03:f7:9b:eb:24:aa:06:fe:
ca:4f:a6:78:8a:ae:30:3b:3b:64:52:1e:56:23:94:2d:d5:d2:
9d:02:f5:97:fd:51:1a:c2:2e:14:6a:d7:62:5a:22:94:6d:5d:
5d:8a:54:ae:0c:08:89:23:06:4c:7b:04:24:27:98:de:1a:17:
51:20:08:72:4c:b1:ca:80:35:0d:26:e8:5f:55:60:2d:2d:c7:
c2:84:90:86:b2:40:b2:6b:72:2a:e3:57:a3:d0:c3:0c:d8:3b:
01:e4:81:0d:0e:75:ec:8b:b5:38:97:98:14:7e:07:1b:2c:b7:
95:b1:ea:b5:e1:d8:f1:b5:fe:4b:21:20:07:82:f3:13:46:5d:
30:ad:b7:45:b6:b4:98:87:24:85:c3:31:01:ab:58:b7:2d:66:
36:5d:d7:0d:88:3f:f9:ae:6e:8b:84:85:33:7c:32:25:6f:03:
c7:95:4f:5d:cb:e9:54:0e:cd:b8:61:54:b2:55:fd:ba:9f:79:
65:ec:a6:95:6f:97:22:48:e7:2c:9c:1e:c7:7b:5a:86:9e:ed:
7e:18:64:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:06:27 2025 by rpki-client