Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.mft
File: 1-WKXdSg3M6RcRUuNe-WmbfDbGhc.mft (raw, json)
Hash identifier: E85Ex94sfsCvYzRJe+XxJ2I3YcyW0GuG8Z4yup6VzhU=
Subject key identifier: 73:CC:FF:06:1E:14:07:87:D6:19:CA:17:D8:AB:6E:E8:E6:16:96:B6
Authority key identifier: F9:62:97:75:28:37:33:A4:5C:45:4B:8D:7B:E5:A6:6D:F0:DB:1A:17
Certificate issuer: /CN=f9629775283733a45c454b8d7be5a66df0db1a17
Certificate serial: 019749D5A7F97C0BA33D3FEC4D5EF0A22559
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.mft
Manifest number: 0E8A
Signing time: Sat 07 Jun 2025 10:00:28 +0000
Manifest this update: Sat 07 Jun 2025 10:00:28 +0000
Manifest next update: Sun 08 Jun 2025 10:00:28 +0000
Files and hashes: 1: 1-WKXdSg3M6RcRUuNe-WmbfDbGhc.crl (hash: O0LFTV1toQFy02ANFvRL9iDlWlRE9w+15VCOQvyP7eU=)
2: NHhXoxxdMNakey6qmBeac9wJBd4.roa (hash: +reJ5PfpdsvDjpTAS5jPNWl9ybmFWN+FQOCbnBXMIy8=)
3: iobCcR3UyoYrtXm2S8hRWxvM3zg.roa (hash: 3usXJWbHzs8K4G1qHJnvLDQutknaGmUnq2D6gx78C1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 10:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:a7:f9:7c:0b:a3:3d:3f:ec:4d:5e:f0:a2:25:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9629775283733a45c454b8d7be5a66df0db1a17
Validity
Not Before: Jun 7 10:00:28 2025 GMT
Not After : Jun 8 10:00:28 2025 GMT
Subject: CN=73ccff061e140787d619ca17d8ab6ee8e61696b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:08:49:29:61:31:c6:e0:3b:14:09:81:89:f5:
fb:67:e4:f5:6e:13:60:d9:88:ae:28:8c:1e:5f:20:
d5:66:10:6a:0f:a4:95:74:bb:6d:fc:50:0c:0f:f5:
c4:b1:16:5b:d0:be:86:4e:7e:d0:a4:b2:26:f6:65:
c4:12:95:7f:1e:b9:17:ef:7c:6a:ad:97:be:3a:86:
ef:d8:59:17:41:01:51:2e:43:7a:86:83:d9:fd:b2:
e2:4e:6d:6a:7e:f8:e2:c5:ac:3a:7f:c7:12:0e:90:
87:e5:73:80:22:19:fd:8a:dc:b3:82:97:28:0f:bd:
46:10:4b:e1:b5:b1:03:fa:69:e4:15:f4:de:3c:6b:
f2:47:44:bf:6c:eb:56:e3:05:aa:74:1b:6e:a6:d8:
ef:f4:38:ee:70:07:f1:d8:dd:27:24:da:6c:3e:72:
fe:20:29:53:25:f8:e3:5b:71:f5:e1:fe:00:72:dd:
be:68:7e:31:7c:ad:b7:fd:ed:a1:36:28:b5:4a:37:
4d:1c:df:08:7a:52:c9:e3:27:9a:f5:2b:ac:10:bf:
d3:2b:3b:21:46:30:fc:d4:15:aa:73:46:99:03:d9:
93:05:49:f1:97:92:db:48:60:7d:51:3d:56:f6:80:
ee:fd:c8:23:97:a2:3a:49:8d:1c:33:fc:8d:67:c2:
6c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:CC:FF:06:1E:14:07:87:D6:19:CA:17:D8:AB:6E:E8:E6:16:96:B6
X509v3 Authority Key Identifier:
keyid:F9:62:97:75:28:37:33:A4:5C:45:4B:8D:7B:E5:A6:6D:F0:DB:1A:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:2a:1f:60:b6:25:7f:8a:10:16:bb:18:7a:5e:26:77:f5:09:
86:a3:ca:d5:f1:3f:54:aa:db:d0:bd:50:c2:17:a3:ed:e1:27:
00:f5:6b:e7:c4:0f:43:12:1e:c5:89:41:8c:19:54:dc:d8:99:
36:23:0d:1f:b3:de:f5:ee:72:2f:7b:d9:1f:6e:ad:0e:67:09:
7e:71:11:d5:ed:66:56:52:24:48:d3:0d:a4:4b:c2:05:69:64:
76:85:ea:12:27:6b:92:30:6c:b6:6a:31:5e:37:21:be:13:57:
a8:5f:c1:cf:c8:91:d3:07:38:e3:87:14:f7:10:7a:2a:34:85:
1a:5f:3c:40:20:74:cb:6d:33:ee:75:27:cd:cb:33:9c:5e:d7:
ba:a1:72:a3:11:42:bd:1d:e0:b9:30:25:77:54:da:95:02:42:
c7:89:3e:7a:a8:7e:d2:b5:5c:7e:f1:fa:65:20:48:43:5b:f3:
94:51:c3:8b:39:6f:2a:f5:3e:65:1d:c9:f3:3a:be:e0:50:57:
7e:46:6f:45:b0:15:d4:fc:3c:8b:9d:f1:cb:57:43:b5:fa:8f:
fb:e4:3a:cc:5e:14:40:90:d0:47:62:81:bf:3d:fc:66:81:ed:
3b:75:62:bf:7e:c4:80:59:37:06:1f:ff:89:45:6d:98:f3:be:
6a:38:15:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:09:15 2025 by rpki-client