Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.mft
File: wlEKilJdybHsCxVg0JCmQmjULsQ.mft (raw, json)
Hash identifier: iwnfphPNlqylefyAXZt/TUaZXnETHHVZntwEi2xUumU=
Subject key identifier: C7:95:E8:8E:88:6C:47:7E:3F:92:A9:E5:8E:40:D6:81:B5:CF:56:39
Authority key identifier: C2:51:0A:8A:52:5D:C9:B1:EC:0B:15:60:D0:90:A6:42:68:D4:2E:C4
Certificate issuer: /CN=c2510a8a525dc9b1ec0b1560d090a64268d42ec4
Certificate serial: 01974FA0FA4370E6B3F96C448AF8076F2A04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wlEKilJdybHsCxVg0JCmQmjULsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.mft
Manifest number: 152A
Signing time: Sun 08 Jun 2025 13:00:39 +0000
Manifest this update: Sun 08 Jun 2025 13:00:39 +0000
Manifest next update: Mon 09 Jun 2025 13:00:39 +0000
Files and hashes: 1: FaPK4dABXX1JUG-DgodpiiYFyXk.roa (hash: 8EnGZIA4ScfpCaGufhHcnmIDRY1lMTTgXZqEJ9E7v2g=)
2: bYeYVYEdCXCzK3hGWezO0ZNHveg.roa (hash: UaiyZMeOYv/TRvUCkbZ9PcMP5ygVyQhx0p+DkQtZkYA=)
3: wlEKilJdybHsCxVg0JCmQmjULsQ.crl (hash: AHLdCUqe+MZVcIYpsyVXK7K8U7R92R5VEkeFFoA+hH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wlEKilJdybHsCxVg0JCmQmjULsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:a0:fa:43:70:e6:b3:f9:6c:44:8a:f8:07:6f:2a:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2510a8a525dc9b1ec0b1560d090a64268d42ec4
Validity
Not Before: Jun 8 13:00:39 2025 GMT
Not After : Jun 9 13:00:39 2025 GMT
Subject: CN=c795e88e886c477e3f92a9e58e40d681b5cf5639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d0:b4:44:98:23:f0:ed:f3:5e:38:d0:f3:66:
6e:38:a2:90:56:35:30:38:51:8d:5a:cd:fd:7e:65:
c0:88:db:0c:2f:4f:3c:04:28:f0:e1:48:a4:73:81:
76:3f:8a:87:18:64:6f:2e:86:b2:20:57:48:d2:26:
38:e1:18:af:4f:29:b5:09:57:47:c4:f4:70:23:86:
1e:aa:df:43:69:1c:a0:8b:ab:01:cc:cd:dc:4f:4b:
8a:d5:87:a3:d8:dd:5b:95:1d:c0:ca:c2:36:eb:73:
0d:59:65:73:a6:8a:b5:84:56:d9:d9:0e:35:20:80:
f6:94:dd:97:0c:e9:bb:f3:3f:93:f4:12:da:ce:8e:
66:91:2e:2d:a7:e0:f1:4a:05:4f:90:08:18:d9:1b:
41:56:bc:fe:82:e0:fc:0d:76:10:d2:65:f5:30:ab:
3f:1b:5e:d8:10:1e:c4:d9:f3:30:9b:73:72:2e:bd:
01:b1:5c:f8:c4:df:bf:a1:70:62:c9:b9:c5:b5:0a:
cf:22:28:15:60:6a:a3:fa:8e:9e:08:82:f4:b2:8e:
62:8c:0a:bf:16:2a:74:31:c8:f8:2a:32:1f:c8:6e:
ee:21:b0:8a:2d:87:a8:6e:8e:d1:a6:7d:8a:9e:c1:
a8:35:08:f2:78:75:8f:97:35:f6:70:ec:83:24:1c:
55:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:95:E8:8E:88:6C:47:7E:3F:92:A9:E5:8E:40:D6:81:B5:CF:56:39
X509v3 Authority Key Identifier:
keyid:C2:51:0A:8A:52:5D:C9:B1:EC:0B:15:60:D0:90:A6:42:68:D4:2E:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wlEKilJdybHsCxVg0JCmQmjULsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:e6:20:6d:2d:15:4f:6b:f7:44:b4:19:54:4a:c0:04:37:9d:
a0:c1:8e:5e:17:0f:bd:09:6e:8a:00:d2:c5:cf:4c:b1:66:f1:
3c:3a:b8:f0:60:5a:b3:b0:b6:c7:a4:01:f9:f1:8e:02:f2:c8:
a4:45:01:e4:82:34:c9:b1:50:20:2a:12:9a:64:be:99:4f:da:
db:ce:a7:88:ad:8d:0a:fe:0f:58:96:ec:fe:52:3f:23:97:d6:
a1:c7:9e:b5:d1:8b:f9:01:0b:e0:fa:a3:ab:78:f3:d7:a3:ee:
79:51:7d:fa:ac:40:16:3c:1f:0f:54:32:58:3f:c1:10:02:a3:
5b:b1:22:44:45:44:c5:2e:ba:c4:28:b7:ea:25:17:3d:ff:85:
2a:fd:a1:83:c5:72:ea:b6:da:5e:ca:2b:3a:5c:15:c5:43:a9:
80:1b:6b:7a:ba:57:ac:96:2d:56:00:d1:25:cf:e6:15:bf:63:
46:8b:44:75:36:6c:a1:53:8c:9a:f4:20:aa:f7:06:34:87:87:
5b:cb:fa:00:5d:5d:75:cc:a6:54:ef:44:75:40:20:a7:c8:2e:
fa:0b:50:41:45:5a:01:df:03:38:d2:a8:50:70:0c:52:fa:0f:
01:89:36:cb:1f:7b:9d:e3:f0:42:3f:b0:68:a9:61:13:c3:ff:
69:53:74:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:17:02 2025 by rpki-client