Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft
File: wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft (raw, json)
Hash identifier: cHgOWkA5SBc6lJ+kRcdqOBtgerYnP18Wp3DyBsQNC1Q=
Subject key identifier: C3:F3:F5:A3:88:E3:58:97:B5:56:C5:0E:71:2B:FF:CC:66:13:BF:54
Authority key identifier: C2:24:B6:9E:D4:A2:3B:7B:3E:06:74:A3:F9:94:60:1D:73:B7:BA:FF
Certificate issuer: /CN=c224b69ed4a23b7b3e0674a3f994601d73b7baff
Certificate serial: 019761A736D5630A31905FE291E9F714AEFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft
Manifest number: 04D2
Signing time: Thu 12 Jun 2025 01:00:37 +0000
Manifest this update: Thu 12 Jun 2025 01:00:37 +0000
Manifest next update: Fri 13 Jun 2025 01:00:37 +0000
Files and hashes: 1: g5yuydF4Poe4QOJQ8dgMQtQLFlA.roa (hash: ztDU3PoyCa7wU7AjEFCTcvzcTrmXKsTMTZ/tLyZjIE8=)
2: gktrPpar80Yj3HO_xTl6-8tholk.roa (hash: 5YMgCwZjSTpe0kk7pnZdD0CkFN0NmRFgfWE0skj33rw=)
3: wiS2ntSiO3s-BnSj-ZRgHXO3uv8.crl (hash: SPCrJx+K9lgEHSe9BczaG0D1AvrBbQgU6YGZfpDcMwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:61:a7:36:d5:63:0a:31:90:5f:e2:91:e9:f7:14:ae:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c224b69ed4a23b7b3e0674a3f994601d73b7baff
Validity
Not Before: Jun 12 01:00:37 2025 GMT
Not After : Jun 13 01:00:37 2025 GMT
Subject: CN=c3f3f5a388e35897b556c50e712bffcc6613bf54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5c:3c:ac:3a:cf:3c:b7:b9:1d:c4:ed:51:e6:
55:5b:bb:43:fd:87:29:91:ea:e5:48:04:e9:f1:e0:
5c:00:51:44:58:6d:2e:3f:03:c6:6d:bf:93:61:d1:
bc:2a:b6:c4:5e:65:73:3c:53:35:24:87:e4:21:17:
77:13:e0:6f:f3:21:59:ea:19:ff:0d:cd:19:b0:18:
b9:65:91:a8:a0:9b:d8:8a:64:6f:e4:83:12:60:26:
4a:0a:ff:2e:59:15:c8:24:92:21:07:0d:50:2a:50:
27:e0:6f:27:e2:21:42:7d:16:26:81:e2:56:ff:f0:
d1:26:25:ab:4e:47:b4:ca:d6:e4:f7:cb:26:38:fe:
28:63:d4:b6:7d:ab:bf:74:7e:48:b0:61:8f:7b:33:
00:63:6b:f2:62:e5:de:09:b5:dd:33:61:59:7d:c0:
4e:f6:92:72:99:65:b1:30:70:c6:70:02:8f:65:7e:
b6:9f:fa:39:c1:cb:52:a3:35:55:e5:95:09:d0:3f:
b5:37:f6:3c:a1:38:5b:73:fb:49:22:70:fd:a0:77:
a4:ae:66:de:4b:6a:da:f0:c2:7c:82:9f:d9:d1:e4:
03:18:38:d7:97:8d:0a:02:15:d8:8d:dd:b4:10:aa:
7e:d7:3d:aa:58:8d:dd:bc:b6:98:a0:d2:83:86:c9:
a4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F3:F5:A3:88:E3:58:97:B5:56:C5:0E:71:2B:FF:CC:66:13:BF:54
X509v3 Authority Key Identifier:
keyid:C2:24:B6:9E:D4:A2:3B:7B:3E:06:74:A3:F9:94:60:1D:73:B7:BA:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:48:58:04:3d:c1:17:b3:56:81:e0:33:27:aa:fa:9c:ae:ad:
25:bd:4d:1e:b3:9e:37:d6:b1:4e:7e:d0:6b:46:4d:7a:0d:17:
89:fe:16:79:ae:e4:ba:bc:87:f0:49:a6:62:41:5b:81:db:3f:
7a:d2:a7:93:13:3e:84:e8:8e:d0:fc:a3:ea:52:f9:f4:be:70:
9b:39:4f:ad:4f:3b:a7:8d:54:01:75:3b:f5:e7:68:91:c6:4b:
e9:a8:02:d3:fd:cc:d6:6a:20:f7:cf:e4:de:f2:8c:e6:87:3a:
03:bb:a1:1a:94:e0:8e:1c:2d:81:df:02:7d:94:03:36:a5:75:
03:da:93:34:01:6e:64:0d:f6:85:00:58:3a:ab:5f:64:93:61:
b3:97:e1:b7:f1:90:d3:28:72:41:f6:e4:3d:5d:1d:bb:b1:8c:
08:2f:b1:1d:27:b2:b7:ef:bd:52:b2:cd:54:9d:45:35:f7:7c:
e3:38:06:c8:6a:d8:b9:77:78:21:65:53:a7:ad:84:98:6b:7e:
8d:29:34:17:13:3b:9d:8d:6e:4c:6f:df:17:87:34:e4:c6:b4:
04:0f:23:53:0b:f2:a0:1d:90:60:dc:e5:a9:f6:bf:e4:e1:cb:
58:27:ab:77:33:38:b1:f3:b9:47:c2:c5:d9:f4:ab:13:45:42:
11:2f:cf:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 08:37:26 2025 by rpki-client