Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.mft
File: wBQuXVz6pFIWa8e1WmVVj1JNZ1E.mft (raw, json)
Hash identifier: NCbMeAPPHgalM7ZLe2bWllE7oEz1+5GTZdlRLXSETKs=
Subject key identifier: 69:9B:A6:E1:2A:A1:BE:68:2B:94:F8:C9:1C:69:4A:A4:6C:12:93:B0
Authority key identifier: C0:14:2E:5D:5C:FA:A4:52:16:6B:C7:B5:5A:65:55:8F:52:4D:67:51
Certificate issuer: /CN=c0142e5d5cfaa452166bc7b55a65558f524d6751
Certificate serial: 01974E57829200E70B8E6BFEEC9022246793
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.mft
Manifest number: 1580
Signing time: Sun 08 Jun 2025 07:00:47 +0000
Manifest this update: Sun 08 Jun 2025 07:00:47 +0000
Manifest next update: Mon 09 Jun 2025 07:00:47 +0000
Files and hashes: 1: sNmSuLPwop12596I--vLe1Fw_L8.roa (hash: rnnFcpfS8qT33aKuf/kRcr+W7tCgIM7nW6QVvMfILWQ=)
2: wBQuXVz6pFIWa8e1WmVVj1JNZ1E.crl (hash: Nf8VOsnP6uJF6l37zV0y1glZ4pmGOaUXACMac4CpHWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:82:92:00:e7:0b:8e:6b:fe:ec:90:22:24:67:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0142e5d5cfaa452166bc7b55a65558f524d6751
Validity
Not Before: Jun 8 07:00:47 2025 GMT
Not After : Jun 9 07:00:47 2025 GMT
Subject: CN=699ba6e12aa1be682b94f8c91c694aa46c1293b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ec:dc:0f:79:2a:57:09:67:6d:d5:69:67:16:
cb:8b:c4:d7:63:cd:2b:59:ab:a2:17:5f:80:fd:2a:
59:5b:45:90:1c:a4:7d:d6:e6:f9:9a:fd:4a:93:d3:
d1:77:d6:5f:cf:19:a5:e7:f2:a0:7e:24:a3:2a:eb:
a6:18:06:38:ca:60:3c:d5:20:c5:6b:bc:b4:8f:76:
79:da:4d:64:35:d8:b3:34:c1:63:98:a6:64:97:21:
95:8a:d9:a5:b2:88:06:e1:74:87:b8:50:0e:96:b6:
b0:c7:b9:66:46:8f:f6:cb:86:a0:8b:41:dd:e7:3a:
94:17:2b:f3:b1:be:b7:c2:ff:31:d4:62:d3:29:58:
81:a4:3a:eb:b9:ea:80:28:95:66:5b:46:df:9f:a3:
a3:51:39:04:e1:38:aa:89:8c:4c:b6:f0:c1:83:f8:
a3:51:18:48:55:46:1c:1b:d2:e1:ef:1e:30:ed:b4:
c2:bd:1a:fd:5a:57:db:b3:b5:a1:62:74:1a:ea:65:
ef:34:14:04:52:68:f1:07:30:c7:e7:e4:8d:b0:df:
87:af:08:de:1f:66:76:0a:bd:ec:08:2f:80:4b:2e:
c3:e2:3f:b1:13:cb:ef:74:b8:64:06:6b:1e:28:47:
68:48:ab:c0:3a:26:9e:26:dc:6c:12:ee:6d:1a:79:
5c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:9B:A6:E1:2A:A1:BE:68:2B:94:F8:C9:1C:69:4A:A4:6C:12:93:B0
X509v3 Authority Key Identifier:
keyid:C0:14:2E:5D:5C:FA:A4:52:16:6B:C7:B5:5A:65:55:8F:52:4D:67:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:08:e7:a4:91:c1:fc:f1:34:65:c5:57:ed:f5:b4:75:4f:63:
fb:8e:ff:aa:f3:6f:c6:f4:a8:e2:6b:72:f3:31:a7:d2:b4:0b:
3c:cd:68:d3:24:15:6a:d1:c0:1e:42:16:cf:46:21:d8:bf:ac:
29:14:7d:32:ab:cf:b3:fa:17:61:d5:81:ef:42:59:8c:43:3c:
61:98:85:d7:f6:c1:f5:33:13:e0:24:6f:1c:de:66:4b:e3:e2:
eb:71:f9:7f:1a:27:b4:40:df:8e:57:d4:de:9d:bd:8b:0b:92:
63:cb:ad:1d:b9:c0:54:5b:15:33:21:09:18:f5:d3:eb:fa:96:
94:53:4f:9b:01:ef:1d:01:4f:55:3c:b5:a2:bf:de:29:85:8a:
e9:5b:af:e3:bc:e6:09:ae:d2:fc:d1:31:66:f3:0f:6a:62:f4:
fe:74:c4:66:cd:77:20:0a:00:d1:7e:22:91:40:7f:4f:aa:ab:
8e:f5:b3:f7:06:72:e1:d9:e1:6f:b2:c9:4c:d2:6b:ef:72:38:
05:00:d9:82:fc:a2:de:d6:64:32:d9:43:6f:40:fc:57:8f:30:
27:e2:f3:48:b4:da:e1:7b:2b:e0:c9:c9:c5:3d:85:e0:18:e0:
82:a6:bd:c1:a2:d8:fd:f5:98:58:b9:7f:11:f0:c3:d7:8b:56:
d7:07:8e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:51:16 2025 by rpki-client