Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft
File: wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft (raw, json)
Hash identifier: SMpncGaLMz9OXjgK8bdrUq4BYZxgKi8tolTon7ZA0+4=
Subject key identifier: 0A:EA:51:8F:F8:85:F7:BB:A7:23:C1:9A:49:38:AB:99:1E:8F:B1:62
Authority key identifier: C1:DC:2F:85:02:61:58:CB:D9:FF:49:DA:15:DB:22:5F:05:30:74:AC
Certificate issuer: /CN=c1dc2f85026158cbd9ff49da15db225f053074ac
Certificate serial: 0197458B71A6FDCD2165A382368883B4C36D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdwvhQJhWMvZ_0naFdsiXwUwdKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft
Manifest number: 157C
Signing time: Fri 06 Jun 2025 14:00:55 +0000
Manifest this update: Fri 06 Jun 2025 14:00:55 +0000
Manifest next update: Sat 07 Jun 2025 14:00:55 +0000
Files and hashes: 1: Hz0_dopdOcTkQoi-4Q3mO6vS7ig.roa (hash: b8veFauUO102FVzcJY91NJg1d1nr7MA++Qf08FQhoiA=)
2: UnNAY2Ug9GVCcRKfH683OrLARtI.roa (hash: ZNLzC1DICXd5qw96hU96BotIt+MMzxMspSwOQt7KMEQ=)
3: wdwvhQJhWMvZ_0naFdsiXwUwdKw.crl (hash: IcKIcrXbXbiIquZubM1wIf58euA3uNhZCEIFRUM0FiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/wdwvhQJhWMvZ_0naFdsiXwUwdKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:8b:71:a6:fd:cd:21:65:a3:82:36:88:83:b4:c3:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1dc2f85026158cbd9ff49da15db225f053074ac
Validity
Not Before: Jun 6 14:00:55 2025 GMT
Not After : Jun 7 14:00:55 2025 GMT
Subject: CN=0aea518ff885f7bba723c19a4938ab991e8fb162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cc:1c:08:78:cd:9c:31:6f:6d:64:3a:61:05:
e0:cc:98:e0:d4:5a:57:47:76:d0:38:7c:fd:78:9a:
70:2e:b5:f4:60:a4:74:8f:c3:a3:66:9d:c2:a3:37:
17:16:82:23:ed:85:8e:01:c7:12:4f:17:c3:aa:a1:
ec:7d:1c:94:31:a6:c5:59:a2:65:4b:9b:0e:f4:dd:
77:22:17:c9:f2:71:03:1f:b5:7a:be:16:6f:28:7c:
f7:d3:a5:7a:91:2f:34:2e:ce:aa:f0:6e:39:43:19:
a8:73:a3:f1:17:e0:f3:ba:7f:c8:49:73:f3:24:52:
89:d1:12:1c:14:26:cd:ff:87:e6:93:e7:92:41:36:
de:78:6f:2f:03:7b:b3:9e:78:3f:d5:33:94:8a:c5:
44:c2:6b:13:82:4a:8d:b2:46:b1:1c:ae:ba:61:51:
33:e2:5c:12:07:19:e7:e8:1d:65:94:e1:b8:b9:b8:
0d:50:af:5d:a4:cd:90:b7:0e:f4:7d:36:2a:ae:0a:
9d:83:9c:46:31:5f:6e:2d:7e:e1:d6:eb:77:82:86:
b3:52:7e:1a:3b:83:d6:59:87:5c:81:82:c0:6e:62:
07:58:7f:09:96:42:a7:44:15:44:42:9b:68:67:fa:
c1:71:29:4c:80:9e:c5:b5:3f:2a:28:a7:ea:85:34:
f5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:EA:51:8F:F8:85:F7:BB:A7:23:C1:9A:49:38:AB:99:1E:8F:B1:62
X509v3 Authority Key Identifier:
keyid:C1:DC:2F:85:02:61:58:CB:D9:FF:49:DA:15:DB:22:5F:05:30:74:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdwvhQJhWMvZ_0naFdsiXwUwdKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:2b:e2:86:b0:5b:ca:47:7c:66:01:f2:c6:2f:23:10:50:a7:
88:02:c9:6a:26:e7:26:0e:58:44:3b:65:3a:db:ca:a9:d0:10:
18:75:9c:04:66:90:4c:d4:39:63:df:67:b4:98:34:ad:c4:9f:
95:50:4d:1b:c1:4a:fe:6d:55:5f:42:d2:3d:38:fb:45:35:c1:
b6:80:3b:54:ec:d0:1c:64:ae:16:4c:58:ad:d6:37:7a:12:da:
f0:74:5c:4f:f6:03:f5:29:ce:64:b7:70:ab:42:17:1d:6c:c4:
bb:24:8c:46:53:55:72:d2:02:e1:e3:a4:d5:6d:ca:90:39:7c:
0d:8b:53:fc:e7:d8:a9:60:23:ca:e9:a7:c2:b3:44:fe:62:3a:
bc:65:8c:4e:82:64:dc:cc:aa:7c:bb:49:7e:a0:7f:19:01:76:
ec:2a:17:ec:a9:f2:11:8c:ce:66:b8:a2:d6:98:4a:ae:21:10:
a5:ab:6f:61:d9:a5:c8:7a:63:df:7a:c3:fb:df:7c:47:d3:7e:
33:3f:fc:3b:56:8d:15:30:af:2d:0a:9c:0d:61:54:b1:b2:2d:
3f:ea:63:9d:cf:9f:41:a3:09:e5:68:7c:72:3f:b2:ed:cb:0e:
f0:5f:09:8c:39:9a:52:1d:10:0d:a3:e5:19:c5:be:5e:eb:4a:
4a:44:c1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:29:36 2025 by rpki-client