Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.mft
File: wnRsy35zqcww7wTt188WzB2UaJQ.mft (raw, json)
Hash identifier: bQjfpLfarlzOdwnXozZhigSZCNkJlpIFUoph/Qy584o=
Subject key identifier: FF:9F:E5:F8:C8:06:FE:E0:B8:B2:28:84:DB:71:44:5D:CA:30:00:F0
Authority key identifier: C2:74:6C:CB:7E:73:A9:CC:30:EF:04:ED:D7:CF:16:CC:1D:94:68:94
Certificate issuer: /CN=c2746ccb7e73a9cc30ef04edd7cf16cc1d946894
Certificate serial: 019753EBB194036CEDA512D358DF093AB317
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnRsy35zqcww7wTt188WzB2UaJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.mft
Manifest number: 0FE0
Signing time: Mon 09 Jun 2025 09:00:44 +0000
Manifest this update: Mon 09 Jun 2025 09:00:44 +0000
Manifest next update: Tue 10 Jun 2025 09:00:44 +0000
Files and hashes: 1: MaNg2WPI-q4to7SVp52zO_QNsfw.roa (hash: HsUZQaqhFj/mJrXYPb29143giiHL5X0iJfJWhLhO0VU=)
2: wnRsy35zqcww7wTt188WzB2UaJQ.crl (hash: kqxbvUvS3zeoPxVF1QpYeQgP3My46LZCKCuhssm2ORA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wnRsy35zqcww7wTt188WzB2UaJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:eb:b1:94:03:6c:ed:a5:12:d3:58:df:09:3a:b3:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2746ccb7e73a9cc30ef04edd7cf16cc1d946894
Validity
Not Before: Jun 9 09:00:44 2025 GMT
Not After : Jun 10 09:00:44 2025 GMT
Subject: CN=ff9fe5f8c806fee0b8b22884db71445dca3000f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:95:39:b0:20:a1:fa:ed:f6:eb:cc:53:29:43:
49:71:73:00:46:04:90:73:c9:d4:09:c3:d8:7c:4d:
22:62:29:30:44:40:9a:e4:e5:d2:53:c9:de:d0:8e:
2d:55:e1:6f:c2:7f:81:ec:32:d0:f7:6e:59:ba:7a:
38:f7:ac:d9:a9:97:5e:a0:81:79:2a:91:c0:7d:54:
be:02:f7:64:e6:4f:fc:a5:5e:e2:3e:b0:ea:7b:22:
95:ce:54:79:dc:c3:b4:19:65:7a:a0:a4:c8:fe:91:
16:bd:03:99:15:c2:d5:a9:d8:03:0c:82:65:da:d0:
c6:8e:21:6a:62:18:1f:92:33:d4:de:0a:9c:79:37:
e0:5c:58:e0:6c:4f:8f:66:6b:f4:b6:4d:2f:11:61:
6c:8a:d8:34:1f:a2:18:3b:41:b5:7a:e7:89:9f:2f:
d5:44:c5:1b:27:24:92:74:63:cf:cd:14:97:8c:93:
ed:90:dd:cf:1f:48:46:ae:75:47:ea:1c:33:42:e6:
b3:bc:16:bf:c3:ae:5f:7d:c5:0d:e7:9c:25:61:1c:
e3:e5:50:d6:59:9e:f7:de:8d:1b:9f:bc:45:b8:8b:
ec:92:2f:2d:6e:87:ec:9a:e0:b5:1f:04:00:f1:c1:
17:9e:d4:2e:0b:3b:48:4a:1a:84:52:f9:13:86:fb:
5a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:9F:E5:F8:C8:06:FE:E0:B8:B2:28:84:DB:71:44:5D:CA:30:00:F0
X509v3 Authority Key Identifier:
keyid:C2:74:6C:CB:7E:73:A9:CC:30:EF:04:ED:D7:CF:16:CC:1D:94:68:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnRsy35zqcww7wTt188WzB2UaJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:a0:39:2d:df:b0:8b:17:1a:29:4f:fa:c8:d6:e8:a6:66:ee:
28:14:c6:49:2c:77:7a:8d:96:47:ff:a8:df:d0:b9:ca:60:94:
f1:53:1b:d5:7a:7f:38:b8:4e:93:28:db:99:d0:4e:ad:87:07:
06:8a:e1:5d:94:ff:9c:a1:03:d3:22:e2:6f:fd:a4:93:3e:fa:
dc:8c:62:01:cd:53:9a:08:83:fd:ec:a2:09:33:47:e2:ad:25:
2d:86:e3:ba:c8:d1:1e:a8:03:1f:00:ba:31:d0:7a:65:57:c0:
24:ed:28:fd:8f:b5:b6:f7:c7:f9:f4:2b:22:b4:df:fa:63:48:
0e:1c:e2:c7:30:98:58:5c:4d:b7:ca:f6:83:4e:ef:82:da:0c:
a2:06:a0:a8:43:d9:3b:09:40:cc:f7:56:00:6f:12:8f:09:63:
0f:8c:f0:b1:21:a3:f1:5c:f5:5c:3d:62:ae:65:48:ad:83:d9:
2b:ab:9f:79:2d:e2:19:d9:d9:f4:b7:87:8e:8f:20:47:b0:19:
a9:9d:fd:50:58:7b:81:b2:a4:a1:33:da:bf:a7:ed:dc:8a:14:
4f:82:f2:d3:f2:84:f4:52:ec:74:75:cf:32:87:3a:1a:d3:50:
8f:1d:60:e1:f6:b8:a5:e6:41:01:0e:98:87:3c:ef:69:d6:ba:
30:b5:6a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:24:15 2025 by rpki-client