Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.mft
File: wDxpSwadoTLPTEvXwdIiloY7F20.mft (raw, json)
Hash identifier: ap7to7aaaqykdAZOrtnOP+ghhbD6L/rj+rpDF4h+k4k=
Subject key identifier: 9F:4F:3D:39:21:45:EB:A1:A8:D3:EE:01:1E:25:AF:B6:6A:23:FF:D8
Authority key identifier: C0:3C:69:4B:06:9D:A1:32:CF:4C:4B:D7:C1:D2:22:96:86:3B:17:6D
Certificate issuer: /CN=c03c694b069da132cf4c4bd7c1d22296863b176d
Certificate serial: 01975912047010DE481F4E3FD4DE210CC348
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wDxpSwadoTLPTEvXwdIiloY7F20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.mft
Manifest number: 01FA
Signing time: Tue 10 Jun 2025 09:00:42 +0000
Manifest this update: Tue 10 Jun 2025 09:00:42 +0000
Manifest next update: Wed 11 Jun 2025 09:00:42 +0000
Files and hashes: 1: D83JF5HJmZ_nDCEolR80xNvS-M8.roa (hash: 2gVW9uQvzf9z69pIhSOEl0MnJWNxJhApE/Mz251JqN8=)
2: wDxpSwadoTLPTEvXwdIiloY7F20.crl (hash: XQfijLGqZTAFaC6xB27+Hi94qULn3FAz1IMrDh86vz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.mft
rsync://rpki.ripe.net/repository/DEFAULT/wDxpSwadoTLPTEvXwdIiloY7F20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 09:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:12:04:70:10:de:48:1f:4e:3f:d4:de:21:0c:c3:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c03c694b069da132cf4c4bd7c1d22296863b176d
Validity
Not Before: Jun 10 09:00:42 2025 GMT
Not After : Jun 11 09:00:42 2025 GMT
Subject: CN=9f4f3d392145eba1a8d3ee011e25afb66a23ffd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:bd:21:27:05:25:8b:56:8c:eb:7e:e6:23:4a:
20:00:c3:51:78:ac:0e:51:93:3c:6c:cf:83:6a:b9:
de:2f:96:fd:1a:63:00:46:56:fa:30:d2:63:a9:d9:
a1:d5:75:78:57:75:9b:9b:0c:ec:f5:ca:00:18:33:
dc:5f:0f:7e:57:34:58:f6:56:7b:df:16:03:12:fa:
9a:be:8e:60:4c:b1:ff:4e:88:81:82:cb:c3:ed:07:
12:5b:fe:32:d4:e8:12:a0:e4:a9:a6:68:96:bd:ab:
40:d1:44:04:a5:a0:5a:94:b3:12:88:78:47:56:41:
3c:d5:ce:54:23:fe:f1:06:ff:72:06:0f:54:af:20:
2a:ea:8a:70:ba:1c:bc:62:eb:38:e4:6d:ab:98:2b:
e2:3e:75:c5:7f:f7:24:67:74:b8:db:88:dd:fe:86:
3e:3d:a5:97:1a:c6:3a:f8:15:f7:32:17:8f:ed:57:
5a:8b:12:6d:50:e1:8d:a8:9d:b5:62:3d:4b:4d:4e:
9c:c0:f2:b4:5e:06:a4:af:ad:d6:88:7b:a8:01:78:
9b:08:d3:f2:e3:2c:c4:71:a8:4a:60:90:88:06:43:
5f:55:48:f3:3c:5b:47:f8:1a:0b:2b:a3:6a:72:81:
0b:03:7d:c0:d3:a3:f1:8b:4d:61:58:9f:4b:e3:82:
a0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:4F:3D:39:21:45:EB:A1:A8:D3:EE:01:1E:25:AF:B6:6A:23:FF:D8
X509v3 Authority Key Identifier:
keyid:C0:3C:69:4B:06:9D:A1:32:CF:4C:4B:D7:C1:D2:22:96:86:3B:17:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDxpSwadoTLPTEvXwdIiloY7F20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:d7:2b:e7:cb:ab:f8:e1:24:4b:1c:ba:19:21:f3:92:9b:77:
89:bf:c1:aa:48:8c:a9:3f:e9:c5:8e:36:b5:4f:2f:bc:46:97:
84:7b:e2:44:d4:89:84:38:f7:03:da:76:e2:55:87:5e:3a:f6:
f6:9a:93:c4:df:88:6d:be:75:07:6c:68:a4:8a:b7:7f:e3:4a:
c5:db:a3:4c:25:74:4a:70:d0:55:6f:d4:0b:c3:e9:45:4e:d4:
b9:68:56:0e:ff:c6:a4:ab:de:df:65:fa:e8:a9:d8:b0:97:07:
71:b2:4e:d9:fb:e5:d6:79:78:b5:62:5b:9f:bb:55:ad:93:da:
4c:a9:5a:e8:7b:2f:f8:fa:c3:52:1a:23:13:a5:c6:c5:00:e4:
2a:28:a9:31:e1:70:a7:16:25:89:3e:fe:54:27:31:3b:89:f8:
ce:87:98:8f:66:0c:8f:33:27:d1:6a:80:54:f6:6e:f4:f3:64:
11:f8:06:2a:cc:94:91:7c:77:a9:90:e4:02:c2:22:f4:19:97:
51:e0:88:92:b2:29:47:e9:fd:92:28:ad:e7:d6:af:53:2b:0e:
c0:f8:da:38:90:1b:f0:a4:5b:00:2a:2b:fd:0b:1d:6f:48:b8:
d7:cf:1d:38:95:c3:5f:9e:f7:11:52:b6:bd:7b:2c:16:49:60:
e4:ed:db:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdZEgRwEN5IH04/1N4hDMNIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwM2M2OTRiMDY5ZGExMzJjZjRjNGJkN2MxZDIyMjk2ODYz
YjE3NmQwHhcNMjUwNjEwMDkwMDQyWhcNMjUwNjExMDkwMDQyWjAzMTEwLwYDVQQD
Eyg5ZjRmM2QzOTIxNDVlYmExYThkM2VlMDExZTI1YWZiNjZhMjNmZmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjr0hJwUli1aM637mI0ogAMNReKwO
UZM8bM+DarneL5b9GmMARlb6MNJjqdmh1XV4V3Wbmwzs9coAGDPcXw9+VzRY9lZ7
3xYDEvqavo5gTLH/ToiBgsvD7QcSW/4y1OgSoOSppmiWvatA0UQEpaBalLMSiHhH
VkE81c5UI/7xBv9yBg9UryAq6opwuhy8Yus45G2rmCviPnXFf/ckZ3S424jd/oY+
PaWXGsY6+BX3MheP7VdaixJtUOGNqJ21Yj1LTU6cwPK0Xgakr63WiHuoAXibCNPy
4yzEcahKYJCIBkNfVUjzPFtH+BoLK6NqcoELA33A06Pxi01hWJ9L44KgmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ9PPTkhReuhqNPuAR4lr7ZqI//YMB8GA1UdIwQY
MBaAFMA8aUsGnaEyz0xL18HSIpaGOxdtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0R4cFN3YWRvVExQVEV2WHdkSWlsb1k3RjIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9hNGY0YzItZWUzNS00M2UwLThiYWQt
NDRkMGQwODkxOTg5LzEvd0R4cFN3YWRvVExQVEV2WHdkSWlsb1k3RjIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9hNGY0YzItZWUzNS00M2UwLThiYWQtNDRkMGQwODkxOTg5
LzEvd0R4cFN3YWRvVExQVEV2WHdkSWlsb1k3RjIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB9cr58ur
+OEkSxy6GSHzkpt3ib/BqkiMqT/pxY42tU8vvEaXhHviRNSJhDj3A9p24lWHXjr2
9pqTxN+Ibb51B2xopIq3f+NKxdujTCV0SnDQVW/UC8PpRU7UuWhWDv/GpKve32X6
6KnYsJcHcbJO2fvl1nl4tWJbn7tVrZPaTKla6Hsv+PrDUhojE6XGxQDkKiipMeFw
pxYliT7+VCcxO4n4zoeYj2YMjzMn0WqAVPZu9PNkEfgGKsyUkXx3qZDkAsIi9BmX
UeCIkrIpR+n9kiit59avUysOwPjaOJAb8KRbACor/Qsdb0i4188dOJXDX573EVK2
vXssFklg5O3bRw==
-----END CERTIFICATE-----
Generated at Tue Jun 10 16:25:17 2025 by rpki-client