Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft
File: WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft (raw, json)
Hash identifier: Ds277KIkDeB69sP1C1sJTeAsuH0M8LW+NPcPWQbnMrI=
Subject key identifier: E3:CC:61:E0:74:E6:55:60:8B:C6:8A:2F:38:74:2C:E4:BA:8A:8A:76
Authority key identifier: 59:78:5A:21:E2:D0:7C:68:FF:31:75:58:C6:9E:F1:18:CC:75:80:5A
Certificate issuer: /CN=59785a21e2d07c68ff317558c69ef118cc75805a
Certificate serial: 01975D93BB54F64E8FB5B7223DFDBE3C1A77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXhaIeLQfGj_MXVYxp7xGMx1gFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft
Manifest number: 0C2B
Signing time: Wed 11 Jun 2025 06:00:52 +0000
Manifest this update: Wed 11 Jun 2025 06:00:52 +0000
Manifest next update: Thu 12 Jun 2025 06:00:52 +0000
Files and hashes: 1: WXhaIeLQfGj_MXVYxp7xGMx1gFo.crl (hash: YetWQwGFKE0hloagvsp/sw6RjFEty5i5JnrqJTFIFQc=)
2: pBfkqeCcf8kyWik2qeWgXpT9J0w.roa (hash: x6edmQyN+AuRQRVkdUM3z3US8XBwQrqEnFPt4p+BBqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXhaIeLQfGj_MXVYxp7xGMx1gFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:93:bb:54:f6:4e:8f:b5:b7:22:3d:fd:be:3c:1a:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59785a21e2d07c68ff317558c69ef118cc75805a
Validity
Not Before: Jun 11 06:00:52 2025 GMT
Not After : Jun 12 06:00:52 2025 GMT
Subject: CN=e3cc61e074e655608bc68a2f38742ce4ba8a8a76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:8d:b0:1a:7e:fe:bc:8e:91:68:a1:0c:d5:29:
30:2e:2f:0d:c7:8d:f0:cf:de:79:ac:3b:ce:d4:a0:
36:3f:a0:a2:36:3a:48:ae:28:de:56:e9:aa:48:b2:
a1:6d:5f:e6:b3:91:e7:50:6b:03:b0:68:8b:61:44:
19:06:99:b5:d6:5b:09:f3:a5:f4:48:20:3d:6e:52:
b8:a0:90:41:76:65:38:33:51:cc:23:b1:c3:06:84:
5c:71:92:33:f2:cb:2e:ba:8f:9e:59:61:ab:98:7f:
8b:ba:41:f7:3a:7e:65:b6:f7:5d:78:6e:48:e8:e4:
da:b1:5f:e4:cb:9c:66:83:91:3d:7e:f5:4d:cd:f9:
e0:63:94:dd:85:89:3a:2c:3e:57:9f:53:31:27:38:
3a:84:02:44:27:db:66:bd:aa:06:8c:7b:8a:1b:37:
d2:b6:94:cf:77:68:73:6e:e6:94:ae:c9:9d:3d:10:
3b:92:2c:8e:fe:68:c6:bc:6e:a0:b4:53:2a:a2:65:
87:93:e6:cc:d8:8f:2f:14:72:57:03:50:72:3e:3b:
56:6e:b1:75:f9:93:54:e7:18:54:29:1d:3d:db:c6:
0d:0d:f8:33:d1:d9:20:14:7f:ee:84:63:34:1f:78:
62:ac:2c:19:f1:5c:74:a7:ab:11:bc:79:7a:25:ff:
ee:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:CC:61:E0:74:E6:55:60:8B:C6:8A:2F:38:74:2C:E4:BA:8A:8A:76
X509v3 Authority Key Identifier:
keyid:59:78:5A:21:E2:D0:7C:68:FF:31:75:58:C6:9E:F1:18:CC:75:80:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXhaIeLQfGj_MXVYxp7xGMx1gFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:ac:8f:61:0f:51:ea:84:50:28:40:34:05:c4:1d:40:3a:57:
0e:2e:17:87:8e:e1:af:44:73:c2:38:cd:f0:20:06:51:6d:03:
13:75:32:14:24:70:38:17:a0:da:d1:4e:40:c5:e0:e4:52:09:
29:ef:9b:c7:41:7f:d4:b9:c3:ba:de:83:db:bb:0d:1a:56:47:
52:60:cf:85:22:95:2c:93:04:cd:7c:02:a5:ad:63:ed:dc:5f:
1b:8d:0f:6a:aa:e8:74:67:6c:ff:02:a2:9e:37:7c:66:61:6a:
5c:91:ca:0e:48:b8:f8:cc:ac:f5:94:77:6b:0b:1d:0f:3b:aa:
31:78:7c:86:1c:47:3b:fb:8d:26:59:78:8d:11:6b:3f:cd:99:
b2:0f:e1:98:9c:ae:ac:6c:95:a4:4b:c7:86:d3:6c:a7:60:2b:
84:94:5f:4e:64:b0:1d:46:ca:b4:f4:9c:34:01:70:9b:11:e8:
73:07:9a:b0:c8:19:bf:b9:9e:14:b3:7f:b2:f7:f9:8e:cd:70:
2d:0f:ba:29:a8:dc:11:ca:9e:e0:b5:6a:66:55:45:29:d7:ee:
c3:fb:27:5c:31:53:e1:b8:4d:9d:57:65:83:08:6c:0e:d5:ab:
87:26:57:2c:96:d1:4e:64:73:43:71:68:a9:eb:28:39:76:24:
72:f4:05:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 07:46:29 2025 by rpki-client