Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.mft
File: ws4IFBZ-qoGJ_YTTkCcOrfKUgss.mft (raw, json)
Hash identifier: fTWBz146UBtVoi4t14rCKt6IO5urFKAW9lgtpMfW8I0=
Subject key identifier: 32:FA:03:FB:9A:0E:0A:ED:09:04:E8:8D:2A:F2:BD:A7:76:C5:DB:53
Authority key identifier: C2:CE:08:14:16:7E:AA:81:89:FD:84:D3:90:27:0E:AD:F2:94:82:CB
Certificate issuer: /CN=c2ce0814167eaa8189fd84d390270eadf29482cb
Certificate serial: 01974666DB0B0C269791376EC7CC673A9D9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.mft
Manifest number: 09FB
Signing time: Fri 06 Jun 2025 18:00:35 +0000
Manifest this update: Fri 06 Jun 2025 18:00:35 +0000
Manifest next update: Sat 07 Jun 2025 18:00:35 +0000
Files and hashes: 1: R1gidcfPTDL9l_CbPS671EyX5iY.roa (hash: c4a4L7/lsOBY0SjW+Je19dj12ru5NWUKEP164tb+S4Q=)
2: Re7xjUICEpcefdPF_f0YtM8qXn4.roa (hash: ekIH5kxgf0bGVz6q5zIjK4NfDPuAaNIY8i0OtjeIH9w=)
3: ws4IFBZ-qoGJ_YTTkCcOrfKUgss.crl (hash: 6HeFvsf8Qw+3FHHNm/0aMxetvmAyqeAXz97ONQxfI+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.mft
rsync://rpki.ripe.net/repository/DEFAULT/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:66:db:0b:0c:26:97:91:37:6e:c7:cc:67:3a:9d:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ce0814167eaa8189fd84d390270eadf29482cb
Validity
Not Before: Jun 6 18:00:35 2025 GMT
Not After : Jun 7 18:00:35 2025 GMT
Subject: CN=32fa03fb9a0e0aed0904e88d2af2bda776c5db53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:67:03:fa:5a:29:d6:13:7f:aa:45:52:02:7c:
cd:bc:9e:32:9c:f4:28:32:0d:fc:f1:17:74:27:9f:
69:b7:a0:ac:51:2b:58:d3:a1:ed:14:8a:81:f0:a1:
e4:6a:da:0e:91:a9:5b:e6:22:0f:35:c1:d5:ad:6d:
74:fb:fc:49:c6:05:ed:53:23:b7:93:5d:80:13:4c:
0e:28:5e:18:94:27:e8:00:41:67:f9:dc:cb:0b:91:
56:80:82:1f:06:aa:d9:10:c4:da:dc:d4:66:66:b0:
ce:ff:75:76:e0:a9:73:4e:5e:7e:8b:55:82:3f:1a:
ca:89:73:14:e6:d1:25:15:cc:fe:76:78:b2:43:c7:
af:f7:43:c5:91:f1:4e:0e:88:b2:c6:35:b1:da:05:
2a:61:a8:3b:a1:fe:90:c3:a0:c5:5f:2e:e5:bf:ff:
f9:8e:67:7b:68:2e:c6:bb:27:d3:3b:f0:9d:0f:df:
6f:3e:07:e6:76:72:da:de:d5:e9:16:1e:be:39:5a:
10:97:fa:fd:96:b6:ec:b5:9f:93:d8:55:28:f5:f1:
c5:ac:98:45:4c:6c:d6:04:8b:d4:f7:58:a2:ba:90:
0f:ca:f9:38:e3:76:e2:c6:67:cc:19:03:aa:57:64:
d8:ec:f7:e8:1d:39:f2:d2:af:0e:dd:00:a3:87:1c:
62:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:FA:03:FB:9A:0E:0A:ED:09:04:E8:8D:2A:F2:BD:A7:76:C5:DB:53
X509v3 Authority Key Identifier:
keyid:C2:CE:08:14:16:7E:AA:81:89:FD:84:D3:90:27:0E:AD:F2:94:82:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:e7:a8:68:01:ec:5b:e6:19:05:2b:5b:9c:4a:e8:0c:c1:25:
a0:0d:23:c8:0f:23:85:4c:14:17:b8:1c:62:55:94:0c:49:dd:
54:65:41:5c:ec:c2:b2:eb:3e:4a:7a:dd:c8:84:ce:64:96:3e:
64:83:e8:35:8f:de:f4:0d:9e:44:46:2f:3d:86:c0:f2:4f:7f:
ea:3d:4d:12:af:41:05:25:44:3e:5d:20:f7:59:b4:9d:af:9c:
dd:c5:ac:6a:22:68:44:e7:db:7d:d4:0b:eb:48:d3:f8:0d:ee:
72:e5:a8:23:b6:d3:75:1e:02:a5:51:4c:b8:67:8c:65:d8:e8:
1c:bf:85:db:cb:6b:7f:fd:ac:71:bb:b4:f8:f4:68:83:c8:07:
5f:a8:8a:7a:8a:3f:0f:72:d9:e1:c5:24:c6:fa:18:99:14:9c:
49:2d:60:e0:d8:dc:3b:96:d9:e5:a9:57:96:7a:f8:7f:51:f5:
44:46:b9:6e:e3:67:8b:03:f7:4b:d8:ca:f5:a1:29:4e:c4:9c:
f7:4b:d5:5c:05:a9:dd:8a:0c:68:08:c2:1b:bf:68:a1:72:07:
70:67:bd:6f:c3:c7:26:db:ea:27:d4:91:30:ed:9b:62:43:fb:
d2:47:22:1b:3b:5a:bc:5e:7f:35:c7:fd:b3:07:91:5b:19:d3:
5d:d8:fa:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdGZtsLDCaXkTdux8xnOp2bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyY2UwODE0MTY3ZWFhODE4OWZkODRkMzkwMjcwZWFkZjI5
NDgyY2IwHhcNMjUwNjA2MTgwMDM1WhcNMjUwNjA3MTgwMDM1WjAzMTEwLwYDVQQD
EygzMmZhMDNmYjlhMGUwYWVkMDkwNGU4OGQyYWYyYmRhNzc2YzVkYjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymcD+lop1hN/qkVSAnzNvJ4ynPQo
Mg388Rd0J59pt6CsUStY06HtFIqB8KHkatoOkalb5iIPNcHVrW10+/xJxgXtUyO3
k12AE0wOKF4YlCfoAEFn+dzLC5FWgIIfBqrZEMTa3NRmZrDO/3V24KlzTl5+i1WC
PxrKiXMU5tElFcz+dniyQ8ev90PFkfFODoiyxjWx2gUqYag7of6Qw6DFXy7lv//5
jmd7aC7GuyfTO/CdD99vPgfmdnLa3tXpFh6+OVoQl/r9lrbstZ+T2FUo9fHFrJhF
TGzWBIvU91iiupAPyvk443bixmfMGQOqV2TY7PfoHTny0q8O3QCjhxxipwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDL6A/uaDgrtCQTojSryvad2xdtTMB8GA1UdIwQY
MBaAFMLOCBQWfqqBif2E05AnDq3ylILLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3M0SUZCWi1xb0dKX1lUVGtDY09yZktVZ3NzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lOTVlNzktMjcwMi00MGUwLTliOGEt
ZTc3MTdiMjg3MDY2LzEvd3M0SUZCWi1xb0dKX1lUVGtDY09yZktVZ3NzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9lOTVlNzktMjcwMi00MGUwLTliOGEtZTc3MTdiMjg3MDY2
LzEvd3M0SUZCWi1xb0dKX1lUVGtDY09yZktVZ3NzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVeeoaAHs
W+YZBStbnEroDMEloA0jyA8jhUwUF7gcYlWUDEndVGVBXOzCsus+SnrdyITOZJY+
ZIPoNY/e9A2eREYvPYbA8k9/6j1NEq9BBSVEPl0g91m0na+c3cWsaiJoROfbfdQL
60jT+A3ucuWoI7bTdR4CpVFMuGeMZdjoHL+F28trf/2scbu0+PRog8gHX6iKeoo/
D3LZ4cUkxvoYmRScSS1g4NjcO5bZ5alXlnr4f1H1REa5buNniwP3S9jK9aEpTsSc
90vVXAWp3YoMaAjCG79ooXIHcGe9b8PHJtvqJ9SRMO2bYkP70kciGztavF5/Ncf9
sweRWxnTXdj6mw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 00:59:09 2025 by rpki-client