Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft
File: wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft (raw, json)
Hash identifier: GHu+YfsGwry5ls8EUO9MPSR8YVnbzg0fnz1F1uatTYk=
Subject key identifier: 08:EA:0D:D0:E5:E8:49:30:1F:FC:38:23:A1:42:E2:C7:34:B9:C2:46
Authority key identifier: C2:24:B6:9E:D4:A2:3B:7B:3E:06:74:A3:F9:94:60:1D:73:B7:BA:FF
Certificate issuer: /CN=c224b69ed4a23b7b3e0674a3f994601d73b7baff
Certificate serial: 019759EDA4703C021198A9B0D0D114689220
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft
Manifest number: 04CE
Signing time: Tue 10 Jun 2025 13:00:35 +0000
Manifest this update: Tue 10 Jun 2025 13:00:35 +0000
Manifest next update: Wed 11 Jun 2025 13:00:35 +0000
Files and hashes: 1: g5yuydF4Poe4QOJQ8dgMQtQLFlA.roa (hash: ztDU3PoyCa7wU7AjEFCTcvzcTrmXKsTMTZ/tLyZjIE8=)
2: gktrPpar80Yj3HO_xTl6-8tholk.roa (hash: 5YMgCwZjSTpe0kk7pnZdD0CkFN0NmRFgfWE0skj33rw=)
3: wiS2ntSiO3s-BnSj-ZRgHXO3uv8.crl (hash: FKRQ0PWMYoJ2Dws7YcSzFk0H1RqETxnkgijydbwL6lk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 13:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:ed:a4:70:3c:02:11:98:a9:b0:d0:d1:14:68:92:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c224b69ed4a23b7b3e0674a3f994601d73b7baff
Validity
Not Before: Jun 10 13:00:35 2025 GMT
Not After : Jun 11 13:00:35 2025 GMT
Subject: CN=08ea0dd0e5e849301ffc3823a142e2c734b9c246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:da:8f:cb:58:14:4a:89:04:d0:d3:81:c0:e0:
aa:d3:e3:94:2d:9e:d9:f7:09:4f:08:f7:e4:10:9b:
6f:ff:68:ff:d6:fc:e5:05:0b:1d:4d:e0:73:bb:99:
9f:15:32:19:38:74:fd:df:4b:90:ac:4a:8a:6e:42:
38:56:d8:6c:18:a8:d4:52:52:cb:7b:f9:a2:4a:69:
33:05:ed:a7:7c:f3:c9:ea:e2:01:a8:47:bb:d2:b3:
9f:ab:28:8f:4c:e2:ea:2f:25:35:5c:e6:e5:ed:d0:
37:94:66:0f:9f:c8:6a:75:f7:1d:83:3a:6b:5e:14:
31:19:40:a1:3c:1d:1a:37:e8:02:cf:b3:00:c0:39:
ef:07:06:97:7c:36:c6:9f:82:ef:70:82:9a:62:69:
47:59:4c:f0:83:3c:70:63:21:45:85:bd:18:a6:40:
98:4d:f3:19:a1:ed:db:c4:8d:ab:2c:5c:4e:23:56:
77:61:b9:a5:2a:be:b8:82:43:f1:dd:97:09:8c:40:
55:31:b7:22:c3:b9:8b:45:fe:bc:89:03:63:4b:63:
74:f6:de:d4:1c:4e:9f:c8:a8:ee:0e:1d:4f:2a:b2:
b4:62:7d:d6:3b:df:54:84:94:64:5d:63:b7:0b:92:
e1:de:b3:cb:b5:9b:71:85:9d:21:9d:58:37:6f:3b:
40:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:EA:0D:D0:E5:E8:49:30:1F:FC:38:23:A1:42:E2:C7:34:B9:C2:46
X509v3 Authority Key Identifier:
keyid:C2:24:B6:9E:D4:A2:3B:7B:3E:06:74:A3:F9:94:60:1D:73:B7:BA:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:f9:80:02:3b:0d:87:af:7d:6b:27:22:45:f3:c9:c5:01:30:
5e:ac:99:66:12:4d:af:15:f9:f5:40:93:66:b1:a1:9b:02:16:
9a:53:e9:75:77:cc:5c:29:72:2e:a4:76:07:d0:0f:28:ef:02:
b7:5e:5e:3b:f7:4f:a7:09:82:96:36:af:2c:bd:87:a7:43:8a:
c3:09:1d:40:32:e2:fa:5a:79:b0:cc:3c:ff:37:40:5c:5e:8e:
0d:99:11:c4:f6:2d:bf:fd:ea:43:f4:82:fd:d7:7b:9e:79:6c:
bd:7c:05:1d:00:0b:3e:84:44:bc:1f:e6:f4:60:40:95:f5:7d:
3e:8f:3b:78:2e:73:76:40:4b:68:c3:47:ea:18:94:cd:9c:ba:
4d:0a:dd:52:0a:ad:b8:f1:ce:d6:44:84:1a:bf:cf:b9:64:ba:
bb:4b:ee:73:f5:dd:a5:7e:9d:b6:b5:a1:d0:b6:ed:09:27:6d:
b2:49:80:f7:bc:55:2e:58:f9:0d:a1:6f:79:d5:e8:5b:da:9e:
c9:35:21:81:12:cd:db:17:08:60:47:83:50:0a:13:c3:97:2f:
fc:cd:50:31:0d:9f:c1:39:d3:9b:b0:11:a6:ac:ba:46:a0:e8:
3e:1b:de:81:7e:46:0f:2b:5c:3e:ce:0d:c4:22:ae:c9:e1:67:
fe:63:0b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 22:48:07 2025 by rpki-client