Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.mft
File: wYXXJDrphs3khBTmrYHyIpwKV9g.mft (raw, json)
Hash identifier: OpS0NKZIKyUbWOqoTGhFRFktwG+cdl8bWaOKLLYARmQ=
Subject key identifier: B8:29:01:D2:A7:CC:7E:BE:28:CA:53:C6:AE:0C:7A:21:CC:75:3D:A7
Authority key identifier: C1:85:D7:24:3A:E9:86:CD:E4:84:14:E6:AD:81:F2:22:9C:0A:57:D8
Certificate issuer: /CN=c185d7243ae986cde48414e6ad81f2229c0a57d8
Certificate serial: 0197488CF6CE5F9AC92821A5506484434CD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wYXXJDrphs3khBTmrYHyIpwKV9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.mft
Manifest number: 14D2
Signing time: Sat 07 Jun 2025 04:01:27 +0000
Manifest this update: Sat 07 Jun 2025 04:01:27 +0000
Manifest next update: Sun 08 Jun 2025 04:01:27 +0000
Files and hashes: 1: W8cSUwyXIXnz6M1NsyKlwsJXzJ4.roa (hash: rZPkwf4eFRkmaVkGU+tJg15LkBGz0xTeLhl3l0qmLag=)
2: wYXXJDrphs3khBTmrYHyIpwKV9g.crl (hash: FvXYcoV49XbUaoIQh0BMlMSbvOcvIHrgTrLlxZJINzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/wYXXJDrphs3khBTmrYHyIpwKV9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:f6:ce:5f:9a:c9:28:21:a5:50:64:84:43:4c:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c185d7243ae986cde48414e6ad81f2229c0a57d8
Validity
Not Before: Jun 7 04:01:27 2025 GMT
Not After : Jun 8 04:01:27 2025 GMT
Subject: CN=b82901d2a7cc7ebe28ca53c6ae0c7a21cc753da7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:74:e5:9d:3c:65:c5:67:38:28:33:67:bd:15:
9a:fc:e3:01:3f:86:67:f5:44:45:ba:48:1b:82:4d:
57:5e:b9:1f:b7:06:90:7f:3d:71:a9:99:4c:41:d3:
87:fc:33:42:8d:ba:ca:39:b3:9a:60:e7:2d:cd:d9:
0a:04:fb:70:02:cf:df:60:17:df:e3:5a:9c:b1:7b:
c7:27:01:a3:b3:b3:28:11:d2:88:b4:c1:4a:c3:9c:
f4:ad:0c:6e:54:71:46:e8:56:0e:47:06:92:90:db:
56:27:08:10:e7:ae:3a:e1:82:9d:d4:30:2c:4b:40:
ec:11:79:34:61:fb:10:cd:df:93:1a:d6:dd:91:65:
68:f0:8b:b4:5a:38:d7:7f:c9:8a:40:28:e5:e7:ed:
9f:ae:00:77:23:db:4e:1a:e6:4a:c3:a1:8d:89:7c:
2f:06:26:46:9a:c3:b7:08:30:40:24:f2:10:e8:19:
82:bf:ac:00:cb:11:d4:f0:dc:da:1d:77:67:4d:62:
20:03:7c:d6:dd:90:6f:35:39:59:ef:4d:4e:a6:d7:
aa:e7:b1:14:c5:20:19:34:ff:54:87:0f:00:b3:cf:
a4:5c:78:a8:5a:ad:0d:f3:60:48:90:c9:83:1b:27:
70:85:dc:f8:11:82:9d:c1:8c:ef:df:13:86:a1:d3:
7c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:29:01:D2:A7:CC:7E:BE:28:CA:53:C6:AE:0C:7A:21:CC:75:3D:A7
X509v3 Authority Key Identifier:
keyid:C1:85:D7:24:3A:E9:86:CD:E4:84:14:E6:AD:81:F2:22:9C:0A:57:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wYXXJDrphs3khBTmrYHyIpwKV9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:64:94:75:b6:ae:04:86:40:53:6b:ac:bc:a1:aa:56:bb:3c:
27:3d:e3:0e:a4:20:a2:4b:a3:a7:3a:8b:ab:20:a6:c3:32:9a:
c0:e3:e8:1c:a4:d4:37:43:3f:e6:d7:de:6c:a1:5c:40:da:0e:
5d:ca:e0:0e:e5:13:cd:66:a6:81:ca:8a:e8:0f:19:8c:ce:71:
2c:09:d5:a4:dc:5c:c2:47:08:7f:b7:69:df:8a:74:df:b4:06:
fd:71:5d:05:60:6e:b0:69:42:41:00:9c:00:83:27:8e:97:ee:
5c:32:be:3e:02:4c:aa:1c:3a:f8:4f:b4:bf:a8:8e:0d:66:41:
7e:19:8c:93:cf:98:5d:99:03:4a:b8:34:83:e6:d0:32:ee:4d:
3c:1f:13:25:3f:24:55:85:12:a9:7c:84:af:49:99:1d:c7:e7:
87:11:63:72:e8:07:d8:03:01:47:9f:0a:a0:cc:57:86:b1:9d:
b8:ec:93:5f:6c:81:87:f0:22:55:54:5a:ee:21:78:a6:5d:92:
1c:42:37:5a:60:de:33:64:95:a8:87:0e:62:84:dc:53:77:de:
4d:26:fb:5f:12:db:7d:05:99:53:49:39:22:10:c1:02:8b:c3:
2f:93:25:75:d8:66:bd:38:f7:eb:31:81:bc:19:99:f4:b0:f5:
4a:1f:6f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:51:12 2025 by rpki-client