Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.mft
File: wBekqCFysgav7hwT0pbuJgOFtXE.mft (raw, json)
Hash identifier: j7K/5fQ6Jm71GpVd8HN1AD80hWHNaqKlisfVNwUB/IE=
Subject key identifier: C9:30:95:23:1E:2C:FC:2C:9F:43:1E:B7:29:80:A4:68:68:CA:C3:37
Authority key identifier: C0:17:A4:A8:21:72:B2:06:AF:EE:1C:13:D2:96:EE:26:03:85:B5:71
Certificate issuer: /CN=c017a4a82172b206afee1c13d296ee260385b571
Certificate serial: 01975C4A4A795271F3C23F91AC9F05C3CAF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBekqCFysgav7hwT0pbuJgOFtXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.mft
Manifest number: 1587
Signing time: Wed 11 Jun 2025 00:01:01 +0000
Manifest this update: Wed 11 Jun 2025 00:01:01 +0000
Manifest next update: Thu 12 Jun 2025 00:01:01 +0000
Files and hashes: 1: dCiNIBkWF2RsTfBzLCoJZdfeZWw.roa (hash: YbTpFGUkZZd0ope4WSof9klg7VlGCuc2kGLkcWvVqI4=)
2: wBekqCFysgav7hwT0pbuJgOFtXE.crl (hash: oMdAQxwN3vGJ0D8d/LsVplVdKNJEblTSBxd2uJ/SYmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wBekqCFysgav7hwT0pbuJgOFtXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 20:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:4a:4a:79:52:71:f3:c2:3f:91:ac:9f:05:c3:ca:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c017a4a82172b206afee1c13d296ee260385b571
Validity
Not Before: Jun 11 00:01:01 2025 GMT
Not After : Jun 12 00:01:01 2025 GMT
Subject: CN=c93095231e2cfc2c9f431eb72980a46868cac337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d6:6e:75:3e:77:24:8c:31:fb:e9:09:3c:f8:
00:a2:c5:6f:c2:29:fd:5e:6d:31:f7:d6:de:2b:cb:
1d:72:70:72:d5:d0:66:44:bc:77:1c:2e:06:5b:4c:
84:ce:96:3d:4e:c6:61:66:5c:96:e8:c8:f8:8f:7b:
8e:95:eb:5d:d8:6e:6d:ed:e3:e1:af:57:d8:ac:24:
11:ba:02:cf:09:2d:29:43:a6:4f:bd:ea:ff:05:a1:
14:6d:71:fd:9b:b1:ce:fd:e7:92:fb:17:65:88:bf:
b4:40:78:cf:16:e6:d2:78:07:58:cf:89:55:1d:76:
7b:f3:83:3e:d9:8e:20:2c:89:68:07:6c:9b:22:39:
e3:fe:4d:48:59:bf:36:8a:4d:6c:f0:c5:20:de:3a:
65:c6:15:73:8a:f6:d8:50:5b:27:d8:67:37:be:d0:
f6:c6:3f:66:78:3b:50:48:22:84:38:da:f7:63:fd:
fd:e3:ae:2b:a2:2f:ea:86:64:e8:90:fc:8f:86:00:
3c:70:fe:64:02:79:80:64:7e:b9:56:e9:8f:9a:1e:
89:20:03:13:8c:f4:21:3d:69:ef:9f:2f:4e:d3:c0:
f9:91:0d:d3:fd:29:a6:b5:a8:a6:87:77:fa:9a:ac:
14:a9:d0:f0:dd:63:2a:45:d6:63:5a:a1:3d:71:55:
ea:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:30:95:23:1E:2C:FC:2C:9F:43:1E:B7:29:80:A4:68:68:CA:C3:37
X509v3 Authority Key Identifier:
keyid:C0:17:A4:A8:21:72:B2:06:AF:EE:1C:13:D2:96:EE:26:03:85:B5:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBekqCFysgav7hwT0pbuJgOFtXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:fb:01:d4:30:20:ea:70:65:4d:3a:02:9b:08:3a:1a:bd:9e:
65:c6:17:62:9b:93:3f:d2:eb:38:b5:bc:0a:dc:5e:01:36:c0:
44:80:81:9b:b6:1a:01:31:74:b5:d8:67:44:82:eb:4a:a6:cf:
f4:13:5d:94:24:61:61:02:70:f9:f6:75:ce:0c:93:9e:e5:e8:
53:cb:34:cd:43:76:30:a6:e1:6b:09:8b:17:1a:14:af:98:63:
ac:25:85:aa:7e:6b:8d:f6:0c:29:bd:e0:66:39:15:ad:a3:ab:
8b:64:fc:d9:cb:8e:32:38:90:ff:75:fb:48:47:02:58:e5:0e:
9f:28:50:a0:65:98:ea:11:9e:f9:3c:e5:d4:70:34:d4:50:ec:
9b:88:9c:8c:f8:33:dd:4d:7a:c4:6a:79:85:5f:2c:49:6b:af:
c0:c1:dd:27:3d:7c:18:33:23:0d:88:86:eb:81:16:05:55:ef:
5d:b8:5d:ad:94:26:c1:a6:7e:0c:ee:e5:da:4e:e3:8a:6a:53:
8f:a4:46:d5:3c:0e:dd:b2:fb:12:cc:cc:50:c3:b7:ed:24:42:
f5:83:26:9d:96:8d:6c:de:e9:81:62:06:40:8f:df:58:fb:d7:
01:b9:ac:a4:35:bf:56:37:86:30:38:31:2d:5d:2e:ab:77:62:
8f:44:b4:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 07:26:50 2025 by rpki-client