Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.mft
File: WF2Wj1vhzmceINWDHBcAAfNy090.mft (raw, json)
Hash identifier: 05bk+6xNXiTufZd1VCOFZcrV9i//0omfnOZgfb6KunM=
Subject key identifier: C1:1F:F6:AF:75:FA:5B:24:CC:20:4F:2C:60:5E:6F:B4:FB:FF:FF:8C
Authority key identifier: 58:5D:96:8F:5B:E1:CE:67:1E:20:D5:83:1C:17:00:01:F3:72:D3:DD
Certificate issuer: /CN=585d968f5be1ce671e20d5831c170001f372d3dd
Certificate serial: 01974D44C07C72B5C9528F7653FAD08EEB05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WF2Wj1vhzmceINWDHBcAAfNy090.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.mft
Manifest number: 152D
Signing time: Sun 08 Jun 2025 02:00:40 +0000
Manifest this update: Sun 08 Jun 2025 02:00:40 +0000
Manifest next update: Mon 09 Jun 2025 02:00:40 +0000
Files and hashes: 1: WF2Wj1vhzmceINWDHBcAAfNy090.crl (hash: WB7fvAA9Xwo0lCkp8QQ/PQuOJ1iqMKwKYBSnY6UmM1Q=)
2: kMkaJavkPA06Y44CWRSY630HVLw.roa (hash: T85LjnoIHLJZIbJyI8O+ldJqpb1UlV1mAtOahfZHzpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.mft
rsync://rpki.ripe.net/repository/DEFAULT/WF2Wj1vhzmceINWDHBcAAfNy090.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 02:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:44:c0:7c:72:b5:c9:52:8f:76:53:fa:d0:8e:eb:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=585d968f5be1ce671e20d5831c170001f372d3dd
Validity
Not Before: Jun 8 02:00:40 2025 GMT
Not After : Jun 9 02:00:40 2025 GMT
Subject: CN=c11ff6af75fa5b24cc204f2c605e6fb4fbffff8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:36:92:91:6b:d6:64:dd:79:3d:58:6f:d9:ef:
df:36:60:a4:2f:70:b0:7b:32:06:42:d3:b3:26:59:
75:89:10:20:ec:22:c6:85:7b:3a:ea:a1:c9:7a:6b:
0e:c1:b2:f3:be:33:0c:1e:e9:98:58:5b:7a:74:51:
e0:7f:74:78:da:44:bf:5f:5c:5e:83:b5:4a:82:29:
4e:aa:33:09:95:55:d3:b6:31:0f:10:4f:d5:ba:57:
e7:c7:7a:13:c3:03:b0:1e:ef:00:1f:65:7b:76:85:
78:3d:e4:5d:b9:c8:1e:79:78:3e:91:f8:9d:04:87:
67:03:54:bd:15:93:bc:ef:32:a5:17:ba:f2:16:52:
97:bc:ea:b6:df:53:94:9e:ea:a7:34:1f:89:69:c8:
77:9c:31:60:37:f4:02:27:26:e3:cd:2d:2e:97:5d:
9c:46:0d:cf:28:dc:78:e8:4b:29:b9:76:93:68:f4:
a2:c2:88:c1:0e:b3:95:0c:64:8f:26:47:21:a6:94:
a5:c0:4a:52:08:03:32:69:cd:9e:41:9e:9b:7b:3d:
bb:6d:1b:1c:f7:ea:58:5d:1e:fa:07:95:35:ac:b5:
a1:16:18:09:33:65:02:c7:e7:74:5e:3e:73:b3:bc:
b4:d7:82:73:29:c5:24:0f:a3:5b:0e:b3:35:86:32:
9c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:1F:F6:AF:75:FA:5B:24:CC:20:4F:2C:60:5E:6F:B4:FB:FF:FF:8C
X509v3 Authority Key Identifier:
keyid:58:5D:96:8F:5B:E1:CE:67:1E:20:D5:83:1C:17:00:01:F3:72:D3:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WF2Wj1vhzmceINWDHBcAAfNy090.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:6b:ad:5f:b3:54:33:f5:9d:77:66:95:3a:96:d7:99:d2:35:
03:1d:82:74:41:bb:8c:bb:b4:a9:95:78:6a:c4:cc:be:e9:9c:
c6:3f:c0:e3:8a:cc:4c:7a:f8:c4:50:e9:09:f9:3a:15:79:3e:
90:aa:63:e0:66:e4:d9:f1:b6:6f:a8:d6:63:90:98:ed:2a:d5:
5b:40:ff:35:8f:0d:3a:2e:75:79:3b:cf:57:36:2d:cf:e4:10:
fa:5a:5e:99:48:dc:41:70:eb:8f:ae:70:7e:7d:89:1c:b8:69:
c0:e1:ff:7f:96:1b:95:ea:ff:48:a7:4f:ac:3d:87:1c:35:64:
ee:d5:90:50:e9:33:50:b7:6f:e0:90:b7:4a:62:3b:b3:3f:fc:
ae:fc:f4:39:40:c4:95:a4:de:87:1d:5c:50:a1:2f:0e:74:c5:
88:5f:34:9a:6a:50:64:1c:63:83:87:69:ed:d9:ff:3a:63:a1:
58:6c:b2:24:b8:50:0c:fb:ad:b6:04:eb:a0:72:49:a3:ec:f0:
04:65:bc:5f:f7:79:05:00:21:54:bb:b3:ba:37:47:12:77:16:
ad:35:3a:3d:f9:a7:9a:32:74:14:7b:b3:63:7e:ae:04:8b:80:
90:d3:ef:df:19:e1:89:35:cb:81:10:4f:05:12:f2:b5:d1:07:
23:97:ff:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 10:26:04 2025 by rpki-client