Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.mft
File: wqKcxRgBD3Z2NT_ylmRNm9SjVcs.mft (raw, json)
Hash identifier: Oa/QHOsI6V4H0dl5K/jJ3cwmpVgXNUD91buRTtZ9gqY=
Subject key identifier: 84:DF:44:9E:94:15:D3:36:92:B4:40:D0:0A:6D:84:66:20:01:11:89
Authority key identifier: C2:A2:9C:C5:18:01:0F:76:76:35:3F:F2:96:64:4D:9B:D4:A3:55:CB
Certificate issuer: /CN=c2a29cc518010f7676353ff296644d9bd4a355cb
Certificate serial: 01974C68FAE1D20EE20DF9359010694AD7F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.mft
Manifest number: 056C
Signing time: Sat 07 Jun 2025 22:00:37 +0000
Manifest this update: Sat 07 Jun 2025 22:00:37 +0000
Manifest next update: Sun 08 Jun 2025 22:00:37 +0000
Files and hashes: 1: ZWfwRz9SdF5HlUEU_xQsfm2pEuc.roa (hash: FPKU4sBZtKV03dopSyyPb4q2mr5BiiBfqidcOPbFyqg=)
2: o4qbcCQCij_4lrM4fuG-GZzDpjs.roa (hash: OQOBy/7xXgD89cYeKeQCwe26Q3oYa0ii7bEbJEXvS2M=)
3: wqKcxRgBD3Z2NT_ylmRNm9SjVcs.crl (hash: mmp25dk+9HvZWpa/DCyk4rhT9aFHXxD6k1xYM6Oq3lM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:68:fa:e1:d2:0e:e2:0d:f9:35:90:10:69:4a:d7:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2a29cc518010f7676353ff296644d9bd4a355cb
Validity
Not Before: Jun 7 22:00:37 2025 GMT
Not After : Jun 8 22:00:37 2025 GMT
Subject: CN=84df449e9415d33692b440d00a6d846620011189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5d:7d:c5:81:1b:73:9f:f6:73:1d:16:c1:be:
1e:11:fa:04:96:0b:cd:cc:c2:dd:a1:ff:d7:f0:19:
ac:8e:df:89:f3:a6:ab:7b:5a:fb:bf:79:d7:0d:c9:
a3:50:5b:51:db:ca:c8:2c:f1:7c:af:c4:3a:da:da:
0c:0c:62:bb:27:01:8f:06:83:20:4e:a2:99:19:a2:
00:9a:6a:a4:67:bc:f2:64:84:dc:9c:9a:c8:1a:0b:
cd:08:49:a1:a5:6a:85:d5:bf:d1:87:13:0f:18:9c:
50:b3:f9:ab:18:5a:28:80:7c:0a:43:11:7c:99:c8:
bc:99:f1:83:4f:96:10:97:a0:a0:24:f3:5e:2d:a0:
46:74:26:99:2c:72:32:c0:4e:7c:b2:0e:1f:3c:72:
e7:48:08:d9:e9:c6:18:ad:e5:68:91:5e:68:38:94:
b2:cd:b6:a6:38:7f:7a:c7:39:0f:74:4e:d5:fc:32:
b7:3f:ae:c9:21:4e:52:b6:65:92:a7:5a:a4:e1:4c:
1d:02:58:51:c0:c4:74:c5:57:64:76:4c:71:a5:e4:
69:62:5c:97:37:22:81:34:25:9c:dd:28:96:c3:d2:
aa:b5:82:98:3f:f0:1d:5b:b5:b8:44:b5:39:90:e7:
b5:9d:39:11:a2:8d:bd:5a:13:0f:70:26:93:b5:39:
1f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:DF:44:9E:94:15:D3:36:92:B4:40:D0:0A:6D:84:66:20:01:11:89
X509v3 Authority Key Identifier:
keyid:C2:A2:9C:C5:18:01:0F:76:76:35:3F:F2:96:64:4D:9B:D4:A3:55:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:ca:a6:07:87:e5:a9:a8:f3:6e:5c:d3:b2:0b:7c:64:12:20:
4e:6e:62:54:b5:3c:06:f2:57:e9:d6:80:6a:72:c0:77:73:1f:
0e:8a:b7:62:a6:31:fa:6e:c4:ec:29:76:cf:ec:7f:4a:91:79:
0f:73:c5:c5:0f:50:0e:90:72:c2:11:7a:b8:58:8b:ad:89:0c:
5f:16:ec:04:e4:6e:6e:08:55:9f:f7:ff:77:07:41:ca:bd:46:
e3:ed:c8:1a:46:19:e9:31:0b:c2:66:ad:27:23:b6:85:f2:0f:
58:9f:37:b6:2e:65:18:46:ab:d7:1a:10:c1:69:e3:2a:19:32:
96:80:ee:38:51:51:1d:3e:8f:e7:fd:4b:28:f2:e4:7f:bb:ca:
51:56:66:59:59:61:05:fc:ad:cd:f2:a3:df:eb:27:45:f6:04:
57:13:c7:2f:e5:34:c1:49:c8:0c:9a:42:01:fe:3f:57:fa:1f:
ce:cd:21:71:ac:b7:34:f6:d3:81:31:34:8e:60:8a:e9:c5:46:
45:4e:a9:4c:99:5b:d3:0c:a4:ab:9e:65:24:82:5c:02:f2:88:
44:20:22:cb:82:31:62:b4:9c:28:22:d0:66:b8:1a:2b:f0:5b:
7a:c3:52:72:41:27:f0:ec:31:1c:d9:ae:75:95:6a:7b:2b:cd:
8a:33:3e:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdMaPrh0g7iDfk1kBBpStfzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyYTI5Y2M1MTgwMTBmNzY3NjM1M2ZmMjk2NjQ0ZDliZDRh
MzU1Y2IwHhcNMjUwNjA3MjIwMDM3WhcNMjUwNjA4MjIwMDM3WjAzMTEwLwYDVQQD
Eyg4NGRmNDQ5ZTk0MTVkMzM2OTJiNDQwZDAwYTZkODQ2NjIwMDExMTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtV19xYEbc5/2cx0Wwb4eEfoElgvN
zMLdof/X8Bmsjt+J86are1r7v3nXDcmjUFtR28rILPF8r8Q62toMDGK7JwGPBoMg
TqKZGaIAmmqkZ7zyZITcnJrIGgvNCEmhpWqF1b/RhxMPGJxQs/mrGFoogHwKQxF8
mci8mfGDT5YQl6CgJPNeLaBGdCaZLHIywE58sg4fPHLnSAjZ6cYYreVokV5oOJSy
zbamOH96xzkPdE7V/DK3P67JIU5StmWSp1qk4UwdAlhRwMR0xVdkdkxxpeRpYlyX
NyKBNCWc3SiWw9KqtYKYP/AdW7W4RLU5kOe1nTkRoo29WhMPcCaTtTkfkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFITfRJ6UFdM2krRA0ApthGYgARGJMB8GA1UdIwQY
MBaAFMKinMUYAQ92djU/8pZkTZvUo1XLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3FLY3hSZ0JEM1oyTlRfeWxtUk5tOVNqVmNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8zOWVkZTEtYmZlMS00NzJlLTg3NGMt
N2MxZjBjZGZjZTc3LzEvd3FLY3hSZ0JEM1oyTlRfeWxtUk5tOVNqVmNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi8zOWVkZTEtYmZlMS00NzJlLTg3NGMtN2MxZjBjZGZjZTc3
LzEvd3FLY3hSZ0JEM1oyTlRfeWxtUk5tOVNqVmNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUsqmB4fl
qajzblzTsgt8ZBIgTm5iVLU8BvJX6daAanLAd3MfDoq3YqYx+m7E7Cl2z+x/SpF5
D3PFxQ9QDpBywhF6uFiLrYkMXxbsBORubghVn/f/dwdByr1G4+3IGkYZ6TELwmat
JyO2hfIPWJ83ti5lGEar1xoQwWnjKhkyloDuOFFRHT6P5/1LKPLkf7vKUVZmWVlh
BfytzfKj3+snRfYEVxPHL+U0wUnIDJpCAf4/V/ofzs0hcay3NPbTgTE0jmCK6cVG
RU6pTJlb0wykq55lJIJcAvKIRCAiy4IxYrScKCLQZrgaK/BbesNSckEn8OwxHNmu
dZVqeyvNijM+sQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 04:16:31 2025 by rpki-client