Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft
File: wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft (raw, json)
Hash identifier: JuB7fd9s9QKdLJH3aELQYYcfPpk9Ps62ZXHe/qO4oS8=
Subject key identifier: 97:58:17:7B:E8:8E:45:6D:01:55:72:B6:C7:15:2E:33:FC:F2:D4:90
Authority key identifier: C2:24:B6:9E:D4:A2:3B:7B:3E:06:74:A3:F9:94:60:1D:73:B7:BA:FF
Certificate issuer: /CN=c224b69ed4a23b7b3e0674a3f994601d73b7baff
Certificate serial: 01975BDC10988D477C543A8239CD547143D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft
Manifest number: 04CF
Signing time: Tue 10 Jun 2025 22:00:38 +0000
Manifest this update: Tue 10 Jun 2025 22:00:38 +0000
Manifest next update: Wed 11 Jun 2025 22:00:38 +0000
Files and hashes: 1: g5yuydF4Poe4QOJQ8dgMQtQLFlA.roa (hash: ztDU3PoyCa7wU7AjEFCTcvzcTrmXKsTMTZ/tLyZjIE8=)
2: gktrPpar80Yj3HO_xTl6-8tholk.roa (hash: 5YMgCwZjSTpe0kk7pnZdD0CkFN0NmRFgfWE0skj33rw=)
3: wiS2ntSiO3s-BnSj-ZRgHXO3uv8.crl (hash: YI19Nsk5GXHqqXEKcZJqKsLj4AUQF1xi/TO9NJtpdOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 20:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5b:dc:10:98:8d:47:7c:54:3a:82:39:cd:54:71:43:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c224b69ed4a23b7b3e0674a3f994601d73b7baff
Validity
Not Before: Jun 10 22:00:38 2025 GMT
Not After : Jun 11 22:00:38 2025 GMT
Subject: CN=9758177be88e456d015572b6c7152e33fcf2d490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:62:43:b8:6c:bc:c4:ca:40:02:4b:9c:11:67:
df:8e:da:01:b2:24:e9:04:bc:36:fb:bd:57:cd:22:
01:7e:57:10:f0:61:81:f2:7b:92:57:37:e0:63:95:
18:6f:c4:4d:bb:33:df:88:c6:0c:9c:4b:e8:3a:6d:
81:03:5a:3a:91:94:b1:b0:b8:ce:3a:6b:c5:33:5b:
f8:e5:a9:7e:f5:d2:d6:46:23:09:5d:d4:86:69:1b:
3f:4f:eb:51:e1:4c:4b:47:3e:e6:cd:54:cf:a5:a1:
4f:49:05:e4:4f:67:ba:01:68:64:1d:ba:8d:b2:b1:
e2:19:69:2a:d8:8a:f2:a3:2b:1f:30:10:fd:9a:4f:
90:b0:12:c5:10:e7:ee:3a:c5:37:72:24:50:c5:99:
0d:b2:ca:dc:f0:9a:4a:b7:93:cd:39:c1:68:2a:46:
34:86:99:d3:5e:8b:d3:99:c6:75:93:b1:12:70:ce:
c4:be:de:9c:53:89:8e:8f:d9:cf:69:f2:7b:b6:e8:
78:f6:6c:ed:b5:e9:93:88:62:6a:de:b4:8c:08:5d:
b4:6c:6d:d6:98:ea:e9:62:99:9a:6e:f1:d1:30:23:
40:3e:94:20:c5:14:66:6d:ad:fd:42:87:52:23:6c:
25:dc:f2:3c:c7:76:35:f5:ae:44:50:54:89:2d:91:
e3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:58:17:7B:E8:8E:45:6D:01:55:72:B6:C7:15:2E:33:FC:F2:D4:90
X509v3 Authority Key Identifier:
keyid:C2:24:B6:9E:D4:A2:3B:7B:3E:06:74:A3:F9:94:60:1D:73:B7:BA:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:26:1b:7d:14:5b:5c:a5:7b:7a:49:cb:ec:22:f0:58:a3:f7:
f9:ca:83:9d:1b:47:0b:9c:9d:69:42:86:b5:52:c5:e3:56:b2:
39:40:d4:60:b4:8a:6a:5c:9b:99:f1:60:bb:10:d2:2b:92:2e:
3a:b0:b8:7a:70:7c:ea:31:7a:2d:53:03:cd:c3:6b:28:88:d0:
5a:4c:6a:ea:9b:cc:46:5f:0d:34:df:6a:c3:b6:54:95:07:59:
6b:93:46:b9:ce:62:ce:1a:13:62:c1:ef:d1:4e:42:5d:ca:bd:
2a:b8:6b:cf:20:aa:82:cc:f5:9e:30:3b:c6:da:e4:69:bf:f5:
a4:cf:59:af:eb:93:cc:38:f1:2b:1f:b6:f2:03:1d:1d:43:5c:
59:4b:db:fa:61:ab:60:4b:5e:52:cf:a0:95:b8:3c:ca:4b:52:
27:32:21:6b:2c:aa:51:62:9a:7d:2a:a2:2e:79:40:e0:de:2c:
e2:90:37:aa:79:5f:ab:25:db:69:af:0c:b4:22:b4:8e:35:87:
5f:97:64:3b:42:52:48:71:1a:a6:d3:9e:68:c5:df:d9:3b:b3:
c5:a2:f0:9b:ae:4d:d4:2d:7f:61:5f:6d:2b:af:03:a4:6c:fc:
65:6f:95:d0:6a:5f:39:53:c7:f4:2e:ad:52:b9:f9:9a:c3:6b:
d4:54:a6:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 05:09:13 2025 by rpki-client