Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.mft
File: wFlbbIrobPkGmro-um3fKmgjfwg.mft (raw, json)
Hash identifier: lWlWO62Lot+fauOYmrXnRIE0hBKoKHuFyEVhKzNjgRw=
Subject key identifier: D4:1D:FC:E3:54:52:28:79:E0:FB:E5:30:5E:6C:80:CD:0C:F4:1A:4F
Authority key identifier: C0:59:5B:6C:8A:E8:6C:F9:06:9A:BA:3E:BA:6D:DF:2A:68:23:7F:08
Certificate issuer: /CN=c0595b6c8ae86cf9069aba3eba6ddf2a68237f08
Certificate serial: 01974D7BAB1CA59708816159D73B57F4167C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wFlbbIrobPkGmro-um3fKmgjfwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.mft
Manifest number: 052A
Signing time: Sun 08 Jun 2025 03:00:39 +0000
Manifest this update: Sun 08 Jun 2025 03:00:39 +0000
Manifest next update: Mon 09 Jun 2025 03:00:39 +0000
Files and hashes: 1: 8UgkBAZONepNyI81FukUfi25Kao.roa (hash: rpUHlCnR+nUi3dHMj1nsfDs3V156wUfOtUa+u9zdDrQ=)
2: wFlbbIrobPkGmro-um3fKmgjfwg.crl (hash: 4zAKDex06HJzMSVNxQS8MJoIZDs0G8V9nXG9xTdO1iA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wFlbbIrobPkGmro-um3fKmgjfwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:7b:ab:1c:a5:97:08:81:61:59:d7:3b:57:f4:16:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0595b6c8ae86cf9069aba3eba6ddf2a68237f08
Validity
Not Before: Jun 8 03:00:39 2025 GMT
Not After : Jun 9 03:00:39 2025 GMT
Subject: CN=d41dfce354522879e0fbe5305e6c80cd0cf41a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a0:3e:74:aa:07:9c:50:bf:c1:e9:c4:e0:92:
ef:ba:01:68:8c:bb:08:eb:db:f1:32:29:ba:b8:12:
0b:82:dd:52:97:97:65:aa:52:f4:08:db:76:21:d7:
ba:3b:5c:93:f2:c0:11:49:03:6d:d8:52:e3:8a:fb:
ee:28:c2:77:54:ba:cb:ab:46:90:61:46:92:9f:fb:
0d:0f:45:42:9a:de:51:66:b3:40:9d:06:f1:9f:73:
b9:63:09:c8:a0:14:9e:80:07:ad:03:33:23:28:38:
93:58:8e:ef:f4:c4:b7:8b:39:e1:ed:e7:80:13:68:
3e:2a:e3:84:e5:85:66:51:1b:1d:99:05:ab:7a:5b:
55:24:8a:b5:63:e1:de:4a:2a:88:3e:2d:13:e0:8f:
7e:c2:83:e4:72:2b:4f:71:61:2b:85:e3:1a:6b:5a:
17:0a:82:5a:c7:78:68:75:aa:6c:2b:66:48:58:fd:
27:44:7a:50:ff:7a:07:0b:b7:2f:58:6c:35:d0:2c:
92:59:38:bb:70:eb:40:e2:29:57:ee:76:a0:ba:93:
28:61:8b:c0:6b:73:de:10:8e:67:bf:f4:e2:c1:d7:
91:b2:06:ca:c4:3d:08:4f:a5:1f:a3:dd:7c:27:6b:
4c:a4:86:e4:06:cb:2d:18:8f:71:d1:7e:02:11:58:
c5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:1D:FC:E3:54:52:28:79:E0:FB:E5:30:5E:6C:80:CD:0C:F4:1A:4F
X509v3 Authority Key Identifier:
keyid:C0:59:5B:6C:8A:E8:6C:F9:06:9A:BA:3E:BA:6D:DF:2A:68:23:7F:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wFlbbIrobPkGmro-um3fKmgjfwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:9d:e8:38:a8:45:8d:a8:56:6d:06:0d:d0:1d:d4:b9:a0:c9:
2b:e5:6f:c2:c8:d8:74:c9:28:ab:88:b7:1a:03:70:f6:27:0e:
88:13:78:5a:e2:8b:80:d7:c5:e0:ef:6d:ac:b9:f7:2d:6e:2a:
a6:c7:c5:f8:3a:7e:f5:c6:1a:03:a2:21:33:ea:91:a7:ec:e4:
43:76:bc:c6:ec:ee:88:53:69:b1:9b:52:b9:b0:0f:bc:16:9e:
8c:d7:3a:9f:20:e6:8e:25:e7:93:7c:16:b0:2a:b0:3c:e3:28:
02:70:ac:0f:b0:f4:44:51:e0:76:4e:b7:c9:11:77:95:da:d2:
58:6b:45:74:30:81:2c:7e:31:32:0b:a4:a6:2e:e9:53:3e:da:
40:28:d5:cb:6c:ed:1c:fc:26:53:f6:05:cc:7d:4d:a9:64:a4:
54:30:2b:37:49:f0:0d:91:67:8c:94:07:47:cb:55:8f:fd:3a:
e0:8d:97:d0:af:66:cb:be:54:c2:9f:16:df:0e:32:93:1b:23:
e1:63:e0:81:4d:bf:8b:fa:28:ed:9c:2f:b8:d8:63:43:de:2a:
06:f9:2b:30:5e:30:57:f4:fe:9f:21:65:c9:7d:fd:09:e0:58:
9e:81:e8:52:fc:92:62:58:8e:56:1c:ef:b9:12:95:b7:0e:7d:
86:67:2c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:55:53 2025 by rpki-client