Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft
File: WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft (raw, json)
Hash identifier: at7phL73S646cLLp6lWj1HGotUx4yJiLGbQNLCPSTA8=
Subject key identifier: 3D:8A:4A:B5:6A:4F:12:53:10:3D:A1:E3:D4:EE:09:03:74:7D:D4:82
Authority key identifier: 58:0D:DD:B5:11:60:3E:41:C2:B7:AB:BA:3D:24:9D:5E:F5:ED:4D:11
Certificate issuer: /CN=580dddb511603e41c2b7abba3d249d5ef5ed4d11
Certificate serial: 0197500ED66226C2574BE9B0B4582E758842
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WA3dtRFgPkHCt6u6PSSdXvXtTRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft
Manifest number: 02E6
Signing time: Sun 08 Jun 2025 15:00:39 +0000
Manifest this update: Sun 08 Jun 2025 15:00:39 +0000
Manifest next update: Mon 09 Jun 2025 15:00:39 +0000
Files and hashes: 1: WA3dtRFgPkHCt6u6PSSdXvXtTRE.crl (hash: Knz0F3jgJcNAaO0hwkrjo0q0PWmi/IJiVrbpSBx/bx8=)
2: e0MNfuXlfvKgRvC9CopzDlR6QJs.roa (hash: EP4IKQWQkDtxiqLTMMk/RcDKJIiLy3Rh0R6YqC1qh6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WA3dtRFgPkHCt6u6PSSdXvXtTRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:0e:d6:62:26:c2:57:4b:e9:b0:b4:58:2e:75:88:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=580dddb511603e41c2b7abba3d249d5ef5ed4d11
Validity
Not Before: Jun 8 15:00:39 2025 GMT
Not After : Jun 9 15:00:39 2025 GMT
Subject: CN=3d8a4ab56a4f1253103da1e3d4ee0903747dd482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7e:d6:d9:95:9e:36:e0:5d:05:11:72:91:8c:
4f:b5:64:67:00:ee:71:b8:ce:d5:2a:86:ab:37:6d:
1f:f8:2c:e0:f8:e0:fa:cd:df:40:ae:5a:e8:c5:9f:
0a:8f:83:8a:de:fb:67:99:a5:d5:32:d1:08:d7:b3:
66:7e:76:b2:8b:7a:a5:28:85:13:f3:9f:0e:68:18:
f9:26:71:34:f2:6a:68:fa:d7:d2:bc:e4:f9:37:98:
f1:ae:2d:89:27:5d:ae:a0:79:f8:01:72:e5:39:f7:
ec:40:b7:16:e3:a9:54:2a:8e:d5:0a:93:c4:33:0f:
6f:4f:f2:9d:b8:55:7c:e1:77:65:c3:06:79:83:98:
90:c8:d3:24:24:05:ab:a8:62:20:01:78:8d:87:67:
3b:21:74:6e:f4:df:0f:27:c6:55:17:c6:5d:2f:46:
5f:13:04:a7:76:af:c2:67:3f:3f:72:e7:60:0f:bd:
cd:c4:13:af:f1:37:5f:cd:d0:2e:40:da:c8:ce:0a:
82:bb:01:65:f0:bf:22:4a:70:09:8b:af:e8:3a:48:
15:58:a7:a5:ab:e9:72:9e:53:25:ec:4a:86:ce:c2:
99:5f:c5:87:f8:c1:4e:e7:12:54:8e:a5:63:55:50:
d2:46:83:10:b7:e0:28:c7:5a:f4:87:e0:8e:6c:3a:
eb:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:8A:4A:B5:6A:4F:12:53:10:3D:A1:E3:D4:EE:09:03:74:7D:D4:82
X509v3 Authority Key Identifier:
keyid:58:0D:DD:B5:11:60:3E:41:C2:B7:AB:BA:3D:24:9D:5E:F5:ED:4D:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WA3dtRFgPkHCt6u6PSSdXvXtTRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:f2:81:30:b1:52:b7:86:d0:87:63:dc:4e:b1:4e:70:d5:8c:
26:1e:df:1f:6e:43:77:8b:64:5e:20:d4:05:dc:ff:dc:06:72:
b4:df:3e:c8:31:5f:78:4f:75:56:19:03:27:23:93:e9:32:60:
a2:0e:a3:cd:84:4c:b5:09:c6:c6:d3:56:e9:0e:c7:1a:67:39:
7a:96:99:ff:8f:e8:9d:1f:c3:f2:61:33:ed:5c:03:a6:82:67:
45:73:34:d9:ae:15:ed:6b:6e:77:34:29:70:20:b5:0c:d9:c1:
ee:a8:76:8b:ff:87:bf:10:a5:8e:ca:b5:e8:2f:72:f7:4b:99:
53:41:d0:20:3f:cc:0b:62:fe:f5:88:8d:a7:c8:d2:d3:a5:27:
6a:c3:ab:1e:be:b5:7d:34:6f:a5:2c:13:fc:0d:94:9f:ee:3b:
6a:29:d3:58:2b:d3:c2:0d:43:ae:3d:3c:56:6b:2d:e3:f7:46:
3f:fd:84:f0:59:9d:0a:d1:33:72:26:d6:3a:1c:1f:fe:55:46:
cb:d9:a4:09:6c:97:9d:44:f2:be:f5:f9:91:20:83:15:c4:db:
e6:4d:f6:68:77:8a:fd:96:30:a9:ca:8f:22:dd:4c:fa:05:e4:
04:6b:ca:f5:81:9d:fa:94:88:4a:5b:17:e6:59:c2:35:30:3a:
17:f2:fb:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 17:27:32 2025 by rpki-client