Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/d2362e-3256-4244-858a-ee56f1afc366/1/wRq5FoIcWjFIzhJSungByqKrSRQ.mft
File: wRq5FoIcWjFIzhJSungByqKrSRQ.mft (raw, json)
Hash identifier: 7+iI+HTZBV61zPRO1gdkDdmbco1eKfndY7J+b3rc9R8=
Subject key identifier: 57:F5:6D:68:53:C0:78:E7:29:A1:6F:10:4F:E5:AD:22:24:18:FB:5D
Authority key identifier: C1:1A:B9:16:82:1C:5A:31:48:CE:12:52:BA:78:01:CA:A2:AB:49:14
Certificate issuer: /CN=c11ab916821c5a3148ce1252ba7801caa2ab4914
Certificate serial: 01984664011E6D10E9B80D48C8E0C73BF034
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wRq5FoIcWjFIzhJSungByqKrSRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/d2362e-3256-4244-858a-ee56f1afc366/1/wRq5FoIcWjFIzhJSungByqKrSRQ.mft
Manifest number: 15FE
Signing time: Sat 26 Jul 2025 11:00:15 +0000
Manifest this update: Sat 26 Jul 2025 11:00:15 +0000
Manifest next update: Sun 27 Jul 2025 11:00:15 +0000
Files and hashes: 1: jmxXPs-eFsLMyQfsEqQE-gTcJzg.roa (hash: JMdb9ncK/VZi/Drly8ri6tbObrJ2pnr+vB9E79datFA=)
2: wRq5FoIcWjFIzhJSungByqKrSRQ.crl (hash: HZUnE4vPVot49gpA55aBEXL1BUsdTYsPLE+zLfusNPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/d2362e-3256-4244-858a-ee56f1afc366/1/wRq5FoIcWjFIzhJSungByqKrSRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/d2362e-3256-4244-858a-ee56f1afc366/1/wRq5FoIcWjFIzhJSungByqKrSRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wRq5FoIcWjFIzhJSungByqKrSRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:64:01:1e:6d:10:e9:b8:0d:48:c8:e0:c7:3b:f0:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c11ab916821c5a3148ce1252ba7801caa2ab4914
Validity
Not Before: Jul 26 11:00:15 2025 GMT
Not After : Jul 27 11:00:15 2025 GMT
Subject: CN=57f56d6853c078e729a16f104fe5ad222418fb5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0f:cd:ad:7f:b2:2a:c0:f3:7d:c3:fc:f1:de:
ed:73:59:7a:f5:48:d1:54:3b:cf:91:bd:6b:ac:1b:
00:fe:7d:ae:f8:c3:44:7c:4a:6d:9a:33:4f:81:d5:
77:4d:45:86:de:9b:75:8e:3d:d1:cf:2f:fe:1b:0f:
ec:07:ed:8d:43:9e:80:ae:4a:61:cb:77:df:6d:32:
71:d9:56:c5:38:6b:14:cb:5d:37:50:e9:79:c3:3f:
bc:19:47:17:28:71:ce:00:c7:f2:a7:c5:fb:80:73:
1e:1c:1c:9c:9c:0e:16:70:92:f8:5c:3a:c9:82:ea:
cb:67:7d:a0:b0:e3:21:24:fb:dc:e4:98:51:7b:06:
32:29:9a:fa:47:0e:1c:64:ad:45:9a:6f:b2:dd:fd:
b3:38:01:4f:30:ca:33:51:f1:f2:f4:29:46:98:8e:
01:2b:9e:d7:97:52:60:92:8b:2b:77:9b:cb:17:d7:
a7:7e:fe:f0:a8:13:c8:42:f3:4a:36:b7:48:fa:b3:
55:ae:11:cc:27:8d:66:9e:24:c8:bd:6f:00:c5:09:
cb:c9:ea:0a:ff:ce:31:82:f2:1d:df:39:71:6f:17:
9c:07:fb:83:63:f1:5b:ec:74:7a:30:45:d8:42:ec:
01:fb:32:7c:76:af:10:92:16:a9:75:04:f9:b4:b8:
36:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:F5:6D:68:53:C0:78:E7:29:A1:6F:10:4F:E5:AD:22:24:18:FB:5D
X509v3 Authority Key Identifier:
keyid:C1:1A:B9:16:82:1C:5A:31:48:CE:12:52:BA:78:01:CA:A2:AB:49:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRq5FoIcWjFIzhJSungByqKrSRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d2362e-3256-4244-858a-ee56f1afc366/1/wRq5FoIcWjFIzhJSungByqKrSRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d2362e-3256-4244-858a-ee56f1afc366/1/wRq5FoIcWjFIzhJSungByqKrSRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:9c:c5:7a:3f:d5:71:9d:89:a8:de:9d:2d:96:bb:95:79:c9:
b0:64:ab:5b:c4:b8:f8:2b:62:3d:f1:53:09:46:0d:ff:9d:8d:
08:1a:6f:33:bb:40:fe:12:d8:33:22:fa:78:ca:a0:41:ab:44:
7e:72:89:12:2f:33:34:96:79:9c:54:83:d3:17:73:e8:1e:1e:
2f:77:b1:f5:14:16:a9:20:f5:7c:47:82:a2:36:d4:ed:c2:d0:
08:09:b1:32:9e:c5:f6:73:31:92:d4:85:3b:c6:ba:9c:e5:73:
0a:09:70:d1:0c:7d:4f:2e:b6:e9:14:ff:7f:62:a7:a6:67:63:
7f:9b:07:21:c6:7b:57:68:cf:0a:d6:47:0a:22:0a:22:ae:93:
53:bc:c2:7b:06:0c:13:2a:b9:cb:5a:89:1c:9c:ce:84:42:c8:
04:6c:c4:e9:8e:c8:b9:f5:ee:bd:5d:a4:58:97:ae:64:2c:a2:
12:22:e5:1e:7f:c3:62:36:07:b9:56:48:d5:22:e5:79:88:da:
c2:da:4a:22:9b:20:31:c1:73:b4:20:96:fc:38:6c:27:5d:65:
38:6d:71:76:dc:c9:02:6d:14:96:e3:4f:48:18:cc:3f:1b:ec:
05:7d:2c:f3:47:8a:72:37:84:ec:bb:b9:5f:c5:31:0f:2d:c3:
b6:29:48:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:57:26 2025 by rpki-client