Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.mft
File: wBekqCFysgav7hwT0pbuJgOFtXE.mft (raw, json)
Hash identifier: RX27Hq3B0DlL1sXZR1zIo6CTXhiSP4FVfzG2SEVuFUk=
Subject key identifier: 16:29:49:43:A3:DD:BF:92:C3:3E:76:7C:A5:BA:9F:D6:EA:55:81:82
Authority key identifier: C0:17:A4:A8:21:72:B2:06:AF:EE:1C:13:D2:96:EE:26:03:85:B5:71
Certificate issuer: /CN=c017a4a82172b206afee1c13d296ee260385b571
Certificate serial: 0197621561C99ADEAC727ABE5A69C177DE1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBekqCFysgav7hwT0pbuJgOFtXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.mft
Manifest number: 158A
Signing time: Thu 12 Jun 2025 03:00:57 +0000
Manifest this update: Thu 12 Jun 2025 03:00:57 +0000
Manifest next update: Fri 13 Jun 2025 03:00:57 +0000
Files and hashes: 1: dCiNIBkWF2RsTfBzLCoJZdfeZWw.roa (hash: YbTpFGUkZZd0ope4WSof9klg7VlGCuc2kGLkcWvVqI4=)
2: wBekqCFysgav7hwT0pbuJgOFtXE.crl (hash: h76vevhBm4wLH/k9aLj+MODT1BNZq5QBUHHAQVfnTUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wBekqCFysgav7hwT0pbuJgOFtXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 21:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:62:15:61:c9:9a:de:ac:72:7a:be:5a:69:c1:77:de:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c017a4a82172b206afee1c13d296ee260385b571
Validity
Not Before: Jun 12 03:00:57 2025 GMT
Not After : Jun 13 03:00:57 2025 GMT
Subject: CN=16294943a3ddbf92c33e767ca5ba9fd6ea558182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:06:d9:ab:26:0b:cf:f9:d4:e8:ea:70:38:9c:
98:2c:36:a4:f9:64:ce:61:c2:b6:74:c9:70:fd:82:
51:a4:39:7d:87:ff:06:07:9b:5f:90:a5:54:92:1d:
ea:c5:c2:25:36:9a:cc:c0:c0:66:99:83:49:4b:91:
05:ef:06:e8:c3:be:a9:94:21:de:2d:06:08:5c:d7:
d1:41:82:7a:a2:2f:d3:2a:2f:27:21:ae:bf:67:cd:
d6:42:da:e5:40:24:7d:d5:f8:1a:f8:88:3c:90:fc:
34:95:4e:b5:5f:f8:61:bf:ee:87:07:70:4c:22:24:
2a:6c:15:5d:0b:bf:7c:16:1c:42:20:9c:16:bb:86:
b5:8a:ea:93:f3:9e:6e:fa:6e:44:67:77:45:b2:c0:
93:ef:75:61:c8:c1:30:f8:90:cb:11:d8:22:99:fb:
80:6a:f2:74:ad:c1:50:6f:f7:70:04:35:fd:b6:44:
da:59:28:f8:b4:cd:63:fd:9d:23:b6:09:94:56:72:
13:e9:b8:a5:43:7c:bd:90:c8:2d:92:f8:a6:4d:fc:
ae:1a:fd:9a:0d:3d:28:9e:23:91:95:3c:8f:3a:3e:
55:ef:f5:c8:64:a7:b3:0f:89:d1:7c:bd:b0:ea:44:
89:c8:e7:5b:59:a3:01:0b:c8:82:33:c8:21:3d:eb:
9a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:29:49:43:A3:DD:BF:92:C3:3E:76:7C:A5:BA:9F:D6:EA:55:81:82
X509v3 Authority Key Identifier:
keyid:C0:17:A4:A8:21:72:B2:06:AF:EE:1C:13:D2:96:EE:26:03:85:B5:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBekqCFysgav7hwT0pbuJgOFtXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:6d:73:05:ec:1c:0a:5a:1b:53:2c:85:1c:38:c5:ad:d5:50:
78:95:a1:55:f9:3b:91:e9:13:62:59:85:b3:23:8b:50:64:2d:
b4:d9:e0:25:22:19:ab:63:61:b1:bd:47:be:12:67:bf:93:61:
be:8a:7d:29:33:d0:d1:6d:94:de:8e:0c:65:05:42:65:af:fe:
32:91:1c:c9:f2:df:8e:b1:99:09:2e:c9:cf:38:72:c9:f1:a2:
d1:12:37:7c:6c:34:7e:91:f7:13:e0:f0:0c:f6:81:cc:b9:03:
95:22:2a:e4:87:8a:a8:c7:08:dc:f0:a5:16:1b:79:b0:e5:d9:
30:e9:41:c2:ad:05:57:e4:cf:75:7f:c8:9b:bb:b3:5c:12:19:
ee:a8:b1:04:1f:65:61:81:27:07:2f:25:29:cc:39:ee:8f:bb:
b4:20:76:4a:d9:bf:e9:48:52:19:77:3f:3d:75:d8:0c:1b:7c:
1a:c8:cc:0d:88:39:7f:a3:85:39:9d:cb:65:98:6a:28:9a:c0:
dd:59:29:66:f5:c8:32:ed:21:54:e0:48:8d:c8:8c:9f:27:c0:
f2:23:fd:15:0f:33:bf:3a:de:95:b7:52:57:1f:3b:0b:37:7c:
18:a3:f8:06:e7:2c:58:4a:0b:a2:9a:b7:76:64:7d:f8:34:6e:
61:96:c0:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 06:28:01 2025 by rpki-client