Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
File: wBZuIWw2DDbg91sNORI9utQiZOk.mft (raw, json)
Hash identifier: oeGJbznkTOsh79vEkcqUpoBT0QFQ6VT/QOV9M4E+qxk=
Subject key identifier: D4:22:F7:22:19:D5:36:E3:37:A6:EC:BD:79:4A:44:01:EB:88:DE:77
Authority key identifier: C0:16:6E:21:6C:36:0C:36:E0:F7:5B:0D:39:12:3D:BA:D4:22:64:E9
Certificate issuer: /CN=c0166e216c360c36e0f75b0d39123dbad42264e9
Certificate serial: 0197518FA9D420FEF848EF7AF256D9845655
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBZuIWw2DDbg91sNORI9utQiZOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
Manifest number: 1582
Signing time: Sun 08 Jun 2025 22:00:58 +0000
Manifest this update: Sun 08 Jun 2025 22:00:58 +0000
Manifest next update: Mon 09 Jun 2025 22:00:58 +0000
Files and hashes: 1: Wxr7kgALDgcsOOCQfZoACHYOwbQ.roa (hash: B9f7m4dPaZeRMrrY3iGXe7xjmu9+7nX6lw2kW7YcneQ=)
2: wBZuIWw2DDbg91sNORI9utQiZOk.crl (hash: 8LCybGM+qna7yQV2pKqXT3qDOuUYiQjYnV5HX4o4tB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wBZuIWw2DDbg91sNORI9utQiZOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:8f:a9:d4:20:fe:f8:48:ef:7a:f2:56:d9:84:56:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0166e216c360c36e0f75b0d39123dbad42264e9
Validity
Not Before: Jun 8 22:00:58 2025 GMT
Not After : Jun 9 22:00:58 2025 GMT
Subject: CN=d422f72219d536e337a6ecbd794a4401eb88de77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:2d:a8:0c:d8:19:fc:9b:fa:db:25:95:c3:cc:
5b:3e:2a:6e:f0:a5:b1:73:c3:1b:ad:0e:e9:8a:ea:
f5:13:e2:29:80:4a:15:f1:b9:2e:f1:a9:18:5e:4a:
33:8b:3e:59:6d:86:13:cc:aa:14:9e:3c:af:42:41:
e6:19:47:71:2a:31:51:fe:83:34:0f:d8:d0:cb:c9:
86:a0:a8:c7:1c:2f:74:95:5e:8c:07:5e:51:c7:c5:
8e:9f:11:db:a8:ac:bc:43:95:77:a1:1c:c8:e6:95:
1a:d2:67:c8:f6:4d:da:6f:ba:ba:2a:e1:e2:e9:f6:
a1:94:70:a4:2e:6b:2d:43:4b:43:33:ab:1d:00:ee:
3c:1e:05:1d:11:8c:21:f9:7c:b5:9b:74:5c:b0:db:
9b:47:d9:00:a1:56:05:15:77:08:a6:a4:23:e2:c6:
cf:37:c2:d1:e2:40:a4:76:5a:fd:2f:c2:9c:4e:6d:
92:45:0c:b0:a6:58:d9:91:57:d2:16:50:00:89:8f:
c2:eb:79:05:17:9e:0c:ae:dd:16:a6:ab:a2:40:93:
38:45:c4:22:db:c5:fa:6f:b6:5a:b2:80:04:ba:4e:
01:24:72:bc:ad:0f:4a:c5:3e:19:35:91:33:bc:5b:
b1:84:87:97:d6:47:d6:b3:29:4e:5a:23:7c:59:17:
e3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:22:F7:22:19:D5:36:E3:37:A6:EC:BD:79:4A:44:01:EB:88:DE:77
X509v3 Authority Key Identifier:
keyid:C0:16:6E:21:6C:36:0C:36:E0:F7:5B:0D:39:12:3D:BA:D4:22:64:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBZuIWw2DDbg91sNORI9utQiZOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:81:38:a9:75:22:54:d4:19:3d:7f:49:c9:b2:b1:89:4b:bc:
fc:e7:22:9b:11:17:5a:44:83:cb:bf:bb:c7:4a:01:87:1e:b3:
df:29:ce:48:2f:e1:61:09:d9:e5:4f:3b:bc:c0:df:90:cf:18:
f5:2b:3c:e1:24:bb:4e:a2:f0:04:bf:04:61:99:ee:3b:1d:12:
6d:be:b5:12:36:e9:7b:a0:f5:89:3a:d3:04:b7:e0:a6:a5:1a:
38:48:a0:c0:d1:37:5b:ee:82:da:17:a4:68:23:3c:9c:51:ad:
5f:ce:aa:10:33:a8:f1:35:ef:06:a7:ca:47:01:09:27:a6:61:
47:3a:dc:7d:85:fb:4b:c6:72:44:33:9b:eb:ca:6f:3a:1c:c2:
3f:23:21:71:d4:0e:f9:41:82:c2:5d:95:29:33:66:81:06:60:
6e:d3:9a:1d:7d:4a:54:57:1f:89:9e:1c:cb:91:87:c3:ab:48:
5c:bc:e1:29:8b:fb:08:ca:3c:63:05:4e:d1:87:eb:4a:96:ca:
ef:ed:de:b2:a8:39:3e:25:f8:b4:bf:45:fd:43:1e:20:22:8c:
70:8d:7c:5d:43:bd:64:e2:7c:34:23:c0:e2:b8:77:40:28:40:
a7:51:2a:23:f9:cf:d4:21:9f:63:52:8e:87:c5:e5:58:33:85:
1a:45:3b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 07:39:16 2025 by rpki-client