Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.mft
File: WZGVhAM8ORGgCb3eMYP2xgsq_Mo.mft (raw, json)
Hash identifier: MfHIhRpdGcZp7hUJn3NIIa21dPAk0Ny+eOCWJHGiTyA=
Subject key identifier: 6C:16:1C:66:B7:85:17:1F:21:45:22:87:9E:DD:67:C8:95:34:49:FD
Authority key identifier: 59:91:95:84:03:3C:39:11:A0:09:BD:DE:31:83:F6:C6:0B:2A:FC:CA
Certificate issuer: /CN=59919584033c3911a009bdde3183f6c60b2afcca
Certificate serial: 01985456B13865D4A598F801E147F2BE8996
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.mft
Manifest number: 0CB2
Signing time: Tue 29 Jul 2025 04:00:24 +0000
Manifest this update: Tue 29 Jul 2025 04:00:24 +0000
Manifest next update: Wed 30 Jul 2025 04:00:24 +0000
Files and hashes: 1: 3iX2jkkHiD5MWdLtUD1Exzmo13Q.roa (hash: 3QNrKYAXHRyi/BOzLIrAyRHDvtVW/W4+B5tMO6HApyM=)
2: WZGVhAM8ORGgCb3eMYP2xgsq_Mo.crl (hash: tnTu24AHMomoWbxtpi5hCdKntGg77O5l2EMjWraN+PY=)
3: ula9jfoyo-Oxj4oQTJhGSM2DQ5o.roa (hash: +U/LkfnqXi7jglNA2KgxDFsmoz1cp5+KfODGzHBZoUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:56:b1:38:65:d4:a5:98:f8:01:e1:47:f2:be:89:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59919584033c3911a009bdde3183f6c60b2afcca
Validity
Not Before: Jul 29 04:00:24 2025 GMT
Not After : Jul 30 04:00:24 2025 GMT
Subject: CN=6c161c66b785171f214522879edd67c8953449fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e7:f9:d7:4a:08:74:44:6e:e6:a8:29:17:b7:
d1:df:b3:a7:09:2a:94:89:9f:54:66:cd:61:f6:e3:
4c:24:80:7c:19:6d:8e:04:81:6b:9e:bc:0d:a7:05:
6b:1f:b8:60:c0:70:f4:96:44:5e:a5:37:02:17:73:
08:3f:9d:d8:b6:51:83:47:b3:5d:ae:53:97:59:20:
07:fa:66:5d:33:25:99:ed:0e:9b:ee:84:34:ad:f0:
7e:ab:7d:b1:2e:c8:bf:67:6c:2d:94:c6:1b:4e:3a:
53:5f:c7:18:dd:64:67:67:be:74:dd:7f:a9:a2:6c:
bf:6e:79:21:b9:fb:64:f2:6c:7e:21:94:df:d0:9d:
fa:fd:f7:28:eb:8a:84:dd:0d:0e:f8:1f:e9:a3:20:
56:89:70:0d:27:a9:66:e9:d0:ab:58:76:ea:53:75:
1c:0d:dc:69:65:90:2a:3e:e5:00:b9:75:78:88:3d:
60:e2:d7:90:cc:ee:d7:95:eb:a1:ac:fc:bc:bd:7f:
8c:bc:86:b3:2f:70:d4:29:66:fd:9c:57:61:88:a5:
19:7c:1b:9a:12:3c:80:2b:0a:8c:2c:30:29:db:b9:
9c:cd:e8:db:7c:44:5a:30:56:cd:02:eb:9f:93:8c:
9a:8b:59:a4:d9:69:67:e8:2a:e2:8b:e2:2e:e2:a3:
57:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:16:1C:66:B7:85:17:1F:21:45:22:87:9E:DD:67:C8:95:34:49:FD
X509v3 Authority Key Identifier:
keyid:59:91:95:84:03:3C:39:11:A0:09:BD:DE:31:83:F6:C6:0B:2A:FC:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:56:d0:2a:35:b1:17:e0:49:0b:a1:c7:e8:93:43:36:64:f0:
84:71:f3:88:2a:74:9d:56:b2:d3:6e:ee:6a:d4:91:40:4d:a4:
4e:5f:88:69:68:0a:fe:b2:d2:06:d3:1f:5e:d5:03:cd:9c:11:
9c:a8:60:5d:96:c0:8e:6b:80:59:f0:60:1c:51:74:a0:cb:cc:
a6:be:24:c6:00:89:71:49:8d:50:df:c9:ab:c1:b9:cd:1f:46:
1e:60:bb:74:50:1e:02:b4:ef:f7:c6:42:ac:40:91:33:58:9c:
29:db:bc:38:02:dc:9e:01:e5:e1:e3:01:15:cf:08:16:f5:d2:
0e:4d:86:dc:a3:36:ff:40:39:36:d4:f1:fa:22:b5:4b:89:d7:
ae:95:62:4d:a4:cd:e9:3f:22:ab:74:25:68:6b:f4:87:97:42:
92:f2:94:28:24:a9:39:26:62:a0:85:35:5f:4d:86:5e:b8:f4:
3b:32:f9:1c:50:eb:8e:0d:14:ff:cd:7c:9f:2d:93:a2:68:d8:
f2:d2:fd:0e:10:db:29:0d:05:a3:ac:93:67:25:bc:aa:1f:17:
c4:e6:08:84:8b:1b:d6:96:32:9a:c0:07:50:cd:2f:31:33:80:
26:b8:55:71:31:85:00:33:45:e6:ce:f7:c9:5c:f7:e5:db:c4:
27:fa:7a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:28:59 2025 by rpki-client