Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.mft
File: wq_BTc5FCwXshsfFMHDNa7bbx-4.mft (raw, json)
Hash identifier: QEMsA3BnkPTjO/Nic0wTli1uQ7o3Y9feuUHvVfWDrho=
Subject key identifier: BF:DD:F0:AF:E8:00:FB:54:73:2C:F1:0E:74:38:50:8C:F0:F2:03:72
Authority key identifier: C2:AF:C1:4D:CE:45:0B:05:EC:86:C7:C5:30:70:CD:6B:B6:DB:C7:EE
Certificate issuer: /CN=c2afc14dce450b05ec86c7c53070cd6bb6dbc7ee
Certificate serial: 019749D60A419A9F5AFF54A957A411448AA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wq_BTc5FCwXshsfFMHDNa7bbx-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.mft
Manifest number: 1580
Signing time: Sat 07 Jun 2025 10:00:53 +0000
Manifest this update: Sat 07 Jun 2025 10:00:53 +0000
Manifest next update: Sun 08 Jun 2025 10:00:53 +0000
Files and hashes: 1: 9R7u9NYY_fdGGu9OLtebIHbh-p8.roa (hash: EvXc+WkKL+opgKBNfenegjbhQJ0LX3U13qSmBaz/xEY=)
2: L9HnYDWvNpMZS4pIu5zArdvE5v8.roa (hash: 0/PRNPNH9PE5TqzwlxbNtq6foN9oanZ3LsojHdx7xuw=)
3: khRg4MYEnETJ2jPimtqut6SDcfI.roa (hash: Nu5ttQZeyOdAqpRtT8J7JzoHpXrE1o2QevNWAJZ6hBk=)
4: wq_BTc5FCwXshsfFMHDNa7bbx-4.crl (hash: ovcXxgEDuCshK9uRgx3JURQKy2qLrSuoXt5rSR8dhyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wq_BTc5FCwXshsfFMHDNa7bbx-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d6:0a:41:9a:9f:5a:ff:54:a9:57:a4:11:44:8a:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2afc14dce450b05ec86c7c53070cd6bb6dbc7ee
Validity
Not Before: Jun 7 10:00:53 2025 GMT
Not After : Jun 8 10:00:53 2025 GMT
Subject: CN=bfddf0afe800fb54732cf10e7438508cf0f20372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d0:9f:70:dd:ab:d9:c0:d6:88:0d:7a:1b:4d:
b7:25:b9:15:a3:a6:7d:a5:21:71:ca:34:9d:55:f7:
f2:8f:4d:1e:47:44:12:55:a5:91:20:a3:d8:aa:fa:
54:5a:26:c8:f9:b2:eb:fd:e0:42:92:00:75:75:1b:
0d:2e:65:d2:41:80:01:3d:1d:8c:b2:e0:e3:9e:03:
bb:b3:8c:ad:cb:90:f0:48:54:b6:41:0b:d1:50:03:
39:4c:ad:57:d5:60:a3:90:e5:4c:7a:d2:bc:dd:5b:
bf:a8:51:eb:aa:35:ee:b2:d5:f5:3b:f7:ff:cd:0e:
8f:ae:e2:74:8f:13:91:4b:5d:89:b8:3f:06:f8:61:
4e:4c:ff:17:83:1b:6d:7e:e6:fc:52:15:2e:ce:fe:
f6:42:5f:30:e8:c8:b2:1c:6e:12:9e:4a:48:1e:80:
84:a0:57:4d:e1:21:9b:b1:13:59:db:68:42:c1:89:
ef:8e:68:9c:8c:19:71:58:55:49:29:e7:38:4d:bb:
5f:11:ff:b7:dd:ef:c5:ad:d2:18:fd:50:cd:d4:c4:
f7:3d:dd:dc:80:45:a1:6b:44:11:57:33:6a:3d:b6:
5f:ee:fa:63:a7:b1:fa:5a:f8:b1:ac:88:e7:53:8b:
dd:d0:f7:73:97:fe:a7:65:b0:86:bc:52:83:dd:61:
7c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:DD:F0:AF:E8:00:FB:54:73:2C:F1:0E:74:38:50:8C:F0:F2:03:72
X509v3 Authority Key Identifier:
keyid:C2:AF:C1:4D:CE:45:0B:05:EC:86:C7:C5:30:70:CD:6B:B6:DB:C7:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wq_BTc5FCwXshsfFMHDNa7bbx-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:94:3e:6b:1f:fc:89:6f:0a:da:1a:ad:a5:42:a0:0f:f8:3d:
ed:4b:9c:4e:c9:42:18:de:48:22:61:fc:8b:07:5d:8a:72:4c:
a4:a9:4d:07:ac:14:68:64:c5:0c:ac:fe:b0:9e:d4:8a:fc:ca:
50:c6:21:4b:66:4a:b4:0d:11:9f:48:b0:a9:46:a6:ec:c5:3d:
19:70:5b:06:33:47:33:bb:9d:b4:9e:19:bc:11:b6:26:2d:ca:
29:0f:6f:11:1f:ec:f8:b8:fa:37:a2:f2:86:47:c4:1f:54:84:
bd:58:bb:f3:f3:3c:08:97:f1:42:39:0a:24:0c:c8:5b:ee:3b:
61:04:30:72:0b:78:d2:b7:e7:8f:7d:c4:92:2a:fc:79:14:63:
c2:98:0e:1a:48:4c:ad:1f:77:f8:04:62:38:2d:41:a6:d4:69:
4d:fe:b2:1e:58:89:1f:f1:8c:3f:67:9a:ac:af:8f:e7:13:a9:
19:4c:74:ca:97:85:c1:b2:cf:ac:15:76:06:77:2d:68:1a:cb:
a0:e6:04:2f:bf:59:43:e0:31:12:59:fe:a1:03:91:cc:d5:46:
c7:33:d1:56:5f:10:8c:4f:f2:d4:99:70:d5:89:38:4b:42:7c:
d9:53:c4:a0:1b:49:20:2e:2a:63:4d:bc:b8:bb:f0:cf:77:0f:
39:0d:5f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:53:43 2025 by rpki-client