Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.mft
File: woWhR044Yn4wGlUb4076RYKlzzk.mft (raw, json)
Hash identifier: 6Uob69dXlO7oSb0wggs/p6eTqfdGUigXMgTNW/SmnhY=
Subject key identifier: FB:A0:12:90:A0:24:C8:93:50:5A:0A:F1:F0:F6:3E:75:2F:89:BA:33
Authority key identifier: C2:85:A1:47:4E:38:62:7E:30:1A:55:1B:E3:4E:FA:45:82:A5:CF:39
Certificate issuer: /CN=c285a1474e38627e301a551be34efa4582a5cf39
Certificate serial: 01974AE837BEBDE2340422ED626ED2E09143
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/woWhR044Yn4wGlUb4076RYKlzzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 15:00:21 +0000
Manifest this update: Sat 07 Jun 2025 15:00:21 +0000
Manifest next update: Sun 08 Jun 2025 15:00:21 +0000
Files and hashes: 1: BVOoOEB4gLobrgdxyI5-9zlLWgE.roa (hash: pTz91HcnSysQwLiCozFtJaXWh/WUZ9JSyAK8aIEd67c=)
2: TKlbM4JoTI14SvlWl9KxKwEmigw.roa (hash: YEHXScxruB3ZAlC0fbNpVAnfjw2qlaMRSrlrmf/M0XY=)
3: woWhR044Yn4wGlUb4076RYKlzzk.crl (hash: 6x0uSPgCA2gHRiWzbev2Bvnsp7horE9dS3EryzSP41M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/woWhR044Yn4wGlUb4076RYKlzzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:37:be:bd:e2:34:04:22:ed:62:6e:d2:e0:91:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c285a1474e38627e301a551be34efa4582a5cf39
Validity
Not Before: Jun 7 15:00:21 2025 GMT
Not After : Jun 8 15:00:21 2025 GMT
Subject: CN=fba01290a024c893505a0af1f0f63e752f89ba33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0c:8e:a7:3e:a4:03:bd:c7:07:ac:5d:65:b4:
de:4e:e7:5c:6a:87:e1:91:22:f4:87:eb:7d:7d:cc:
1c:68:e9:55:3f:8d:b1:c6:d2:72:e2:71:6a:d2:14:
9b:f1:97:b2:ac:c8:5f:f8:21:6d:ec:82:45:7a:57:
08:f9:56:1e:ec:09:6c:ec:bd:5f:50:9e:fd:c5:06:
29:17:f5:ea:4b:5a:fb:33:d3:11:f4:91:30:0a:fc:
40:34:98:b5:c7:e2:8e:e2:7b:45:8e:e4:55:09:8b:
6d:b2:1d:3b:7e:a7:8d:29:cc:38:b7:b0:88:12:13:
03:2b:b3:d0:82:e1:3a:6e:80:d5:76:ed:76:ac:de:
9a:3c:03:51:ce:88:ea:dc:80:99:ca:95:03:0b:af:
8e:92:26:06:65:09:23:b5:1a:6e:69:dd:ec:de:f6:
d8:65:a8:9c:18:f8:40:55:28:52:42:ad:bf:39:1d:
20:0a:de:6c:36:75:83:e9:8b:af:b9:b9:f0:45:4e:
4b:5f:0e:ee:9e:6d:eb:46:12:55:90:2d:f4:f8:a6:
cc:6a:85:3e:26:24:21:2f:46:d4:1b:ee:18:c7:76:
c2:fe:70:63:eb:1b:45:e7:0f:91:e8:64:3f:b8:6a:
9e:7d:cc:c3:a9:61:48:00:89:84:67:62:17:f8:b4:
04:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A0:12:90:A0:24:C8:93:50:5A:0A:F1:F0:F6:3E:75:2F:89:BA:33
X509v3 Authority Key Identifier:
keyid:C2:85:A1:47:4E:38:62:7E:30:1A:55:1B:E3:4E:FA:45:82:A5:CF:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/woWhR044Yn4wGlUb4076RYKlzzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:28:79:9c:8d:ba:8a:aa:0e:24:a3:8d:e3:0b:83:c2:ce:ba:
c2:99:17:7c:a8:b9:f3:cd:f1:9e:3c:6a:bc:15:10:c8:6e:24:
79:57:f1:91:a0:d2:ef:bd:6f:49:68:35:7e:ba:7e:bc:f5:7c:
2c:ea:28:80:91:8b:92:34:a4:88:f4:76:34:cb:44:25:cb:42:
42:01:75:05:24:44:61:c9:85:fa:55:04:37:8c:e0:05:a1:78:
e7:03:e0:fc:42:85:5f:af:cc:a6:68:7b:86:d7:87:e8:9d:7d:
5f:77:60:25:08:df:00:14:11:2b:14:e6:ca:70:39:66:59:c3:
e2:72:78:84:bd:25:8d:86:35:29:6c:4f:3c:34:b4:60:f8:70:
24:07:0a:c1:aa:cd:f0:6b:66:d9:df:43:50:17:ab:a5:b0:a1:
18:34:22:0b:94:c8:c7:42:12:5d:24:ab:4f:8e:bd:17:98:a0:
c1:57:f6:5a:75:de:4c:d3:ff:62:8b:7b:df:93:b5:68:51:c0:
cf:f6:62:20:68:4f:56:e2:f3:47:7c:60:12:5e:d9:2a:fd:61:
6e:fd:1e:36:fd:fe:f6:13:16:b0:8f:cc:87:56:3c:2e:63:a4:
f3:69:1d:a3:5e:bb:0e:e1:27:74:71:31:aa:77:85:2c:20:79:
bc:d6:ec:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:24:29 2025 by rpki-client