Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/wDwpVm71n88akNgtCK4QxjD5S4g.mft
File: wDwpVm71n88akNgtCK4QxjD5S4g.mft (raw, json)
Hash identifier: Myl3mvQIUV3EqS5dJBbOnmaFhvMy+P1Nu3TwW8bkmbg=
Subject key identifier: 3E:42:B2:C7:B7:F1:B7:28:8C:68:87:6A:6F:78:F5:58:3A:D2:9B:5F
Authority key identifier: C0:3C:29:56:6E:F5:9F:CF:1A:90:D8:2D:08:AE:10:C6:30:F9:4B:88
Certificate issuer: /CN=c03c29566ef59fcf1a90d82d08ae10c630f94b88
Certificate serial: 01975CEEF9B1CB1A60BE9836F86EB20BE871
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wDwpVm71n88akNgtCK4QxjD5S4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/wDwpVm71n88akNgtCK4QxjD5S4g.mft
Manifest number: 0BED
Signing time: Wed 11 Jun 2025 03:00:54 +0000
Manifest this update: Wed 11 Jun 2025 03:00:54 +0000
Manifest next update: Thu 12 Jun 2025 03:00:54 +0000
Files and hashes: 1: uzj0M_v78Wm5cOmGNR7lI0TOqoE.roa (hash: Cc5JUHGDDrTaWZVeYu5I0BROPsTv83fnO7z2DC5tGzs=)
2: wDwpVm71n88akNgtCK4QxjD5S4g.crl (hash: gIotOWhNdPZTQeqe93HdtSY/K210E3qtPQUtR/1Eyg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/wDwpVm71n88akNgtCK4QxjD5S4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/wDwpVm71n88akNgtCK4QxjD5S4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/wDwpVm71n88akNgtCK4QxjD5S4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:ee:f9:b1:cb:1a:60:be:98:36:f8:6e:b2:0b:e8:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c03c29566ef59fcf1a90d82d08ae10c630f94b88
Validity
Not Before: Jun 11 03:00:54 2025 GMT
Not After : Jun 12 03:00:54 2025 GMT
Subject: CN=3e42b2c7b7f1b7288c68876a6f78f5583ad29b5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c0:c8:4d:ca:3e:85:06:f8:aa:e5:ee:f8:89:
a1:88:42:a4:37:b0:a8:09:90:30:cc:fa:df:2c:12:
78:69:43:5c:c0:07:54:74:12:2d:1c:c3:9e:af:cf:
47:13:3b:15:2b:37:65:11:05:bc:a3:4b:96:f9:67:
43:f2:a1:04:32:d7:13:e5:6e:3e:e4:16:10:a6:3c:
f1:fb:41:e8:65:76:36:cf:fd:54:07:84:df:0e:e2:
d7:91:26:31:ea:78:d6:66:df:94:95:a4:e1:35:bd:
1d:04:6c:ef:d3:45:1c:f5:30:19:58:f1:4a:74:b5:
8a:d1:02:30:8c:ea:73:5e:5b:3c:3d:53:36:7f:de:
ca:e6:a2:89:4c:2e:4b:e9:70:62:97:d1:3f:23:32:
1a:82:05:48:db:df:1c:8b:37:4e:c8:28:ac:a1:ac:
70:17:03:5e:38:e5:08:d1:c7:6c:a9:05:71:a4:71:
80:89:e9:1e:74:5d:40:96:77:ab:05:a6:2c:54:5b:
99:c6:46:ed:36:61:c0:41:c1:e5:72:40:38:18:93:
2d:b4:cd:99:40:25:74:d8:a1:b3:c3:4e:f8:0b:62:
fc:80:d7:f1:b2:8d:4b:98:de:e7:3e:b1:2c:f5:48:
83:fc:df:80:91:0a:1a:fe:c7:6b:3f:27:20:32:29:
39:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:42:B2:C7:B7:F1:B7:28:8C:68:87:6A:6F:78:F5:58:3A:D2:9B:5F
X509v3 Authority Key Identifier:
keyid:C0:3C:29:56:6E:F5:9F:CF:1A:90:D8:2D:08:AE:10:C6:30:F9:4B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDwpVm71n88akNgtCK4QxjD5S4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/wDwpVm71n88akNgtCK4QxjD5S4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/wDwpVm71n88akNgtCK4QxjD5S4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:b6:d9:2f:0f:81:40:5e:9f:30:29:58:f4:6b:2b:63:27:56:
8f:96:a7:d6:1d:d3:8c:cc:7f:31:21:83:b8:63:5a:bb:49:13:
de:6a:cd:1b:4f:52:90:d1:a7:5a:3e:10:89:c7:9a:c2:41:75:
54:b9:b5:9e:1b:24:1f:ab:af:7c:5b:08:92:ae:4c:33:6d:24:
13:06:09:d0:54:40:68:c5:a7:20:0c:b1:a0:c0:33:2d:24:13:
fb:a2:d5:0e:d8:3d:af:a7:88:cc:e8:35:c5:45:4d:2a:f7:55:
e1:01:fb:7c:83:22:59:dd:8f:f1:36:3e:95:83:e3:57:71:29:
d5:70:ba:bd:f0:1f:b7:6c:81:2e:6f:08:a8:c3:9a:12:ca:97:
d7:90:3d:42:bc:14:a1:4b:1f:fd:57:2a:d2:11:58:30:d3:a3:
5e:53:4d:27:12:61:d7:c2:04:6b:55:83:4f:3a:a5:de:79:20:
e7:76:38:eb:e9:91:67:bb:52:c6:1c:f8:36:26:f7:70:f8:c8:
29:45:4a:bf:1b:fd:66:d5:70:1e:7c:60:5a:b8:40:27:d6:83:
6a:04:f7:81:02:94:ed:5d:4a:17:d6:a4:2f:ed:3f:d0:49:b3:
03:30:49:99:8b:2e:b2:2f:80:13:61:e8:5b:ac:ff:9a:5a:f3:
d5:a0:15:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 07:24:25 2025 by rpki-client