Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft
File: r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft (raw, json)
Hash identifier: dM6xCGobCmcq+K0PYMECq9NYG1FrJ3lnSlWtqOGCYGc=
Subject key identifier: AD:0E:C1:42:5B:56:11:C1:7E:3A:89:89:CB:BA:30:4C:28:5D:CE:FB
Authority key identifier: AF:53:16:FC:4A:83:B3:D0:3E:29:75:F8:BE:C2:70:CB:0F:4E:FB:1D
Certificate issuer: /CN=af5316fc4a83b3d03e2975f8bec270cb0f4efb1d
Certificate serial: 0197B6A111B21A66801627C64324397C391F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1MW_EqDs9A-KXX4vsJwyw9O-x0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft
Manifest number: 06BF
Signing time: Sat 28 Jun 2025 13:01:38 +0000
Manifest this update: Sat 28 Jun 2025 13:01:38 +0000
Manifest next update: Sun 29 Jun 2025 13:01:38 +0000
Files and hashes: 1: 3hblAUbohBwFT91IssPjV90kLNw.roa (hash: 38EdVnlMAGIlx0Mlz1graFZq4XBH6eOlqF04LdXhHB4=)
2: 3u-LFDYOPDKUR_aD9yRJMe6LFho.roa (hash: euYR+CNCm6M5QEu0e13mte8Lec7fxC8lashK6MZRo8E=)
3: r1MW_EqDs9A-KXX4vsJwyw9O-x0.crl (hash: sq+bQcZn/0Exdnq49ZgkY/nRkW+vL495cVmbrS95Uu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft
rsync://rpki.ripe.net/repository/DEFAULT/r1MW_EqDs9A-KXX4vsJwyw9O-x0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:11:b2:1a:66:80:16:27:c6:43:24:39:7c:39:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af5316fc4a83b3d03e2975f8bec270cb0f4efb1d
Validity
Not Before: Jun 28 13:01:38 2025 GMT
Not After : Jun 29 13:01:38 2025 GMT
Subject: CN=ad0ec1425b5611c17e3a8989cbba304c285dcefb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d1:f4:2b:05:56:e6:f8:0c:45:8f:63:96:6d:
ef:b2:30:dc:52:5a:85:41:8e:0e:53:cf:2a:b3:ab:
5f:98:ce:a8:6d:27:08:c5:4a:52:23:55:10:4b:2c:
76:91:8e:34:e7:3d:ff:98:3a:9a:d0:23:75:90:dd:
8e:d9:1f:e6:b6:3e:cd:3b:ab:42:67:42:94:2e:7e:
af:09:e6:46:28:a2:f4:f8:c9:92:6b:1d:0f:a4:91:
5e:b7:a6:73:a0:76:94:7a:3f:04:4f:45:ff:c9:f4:
a9:69:8f:dd:b4:ac:c5:03:45:51:71:2c:be:47:1a:
5b:de:8c:65:6e:a5:c1:09:15:dc:65:73:13:e0:b1:
a1:21:0c:fb:bc:38:37:cf:63:59:fd:8e:62:d4:a8:
e7:ce:4e:55:ae:b1:01:a3:e3:52:b3:e3:be:67:8c:
78:c8:23:66:c3:1b:6c:c4:03:4e:57:f5:8a:7c:31:
41:07:a7:9c:fd:e2:1e:b1:41:da:26:38:f4:62:8c:
93:2c:22:ee:f0:66:d5:f9:87:4d:d4:4a:1a:b6:3a:
92:aa:d6:20:0f:30:f8:55:8a:7f:ce:8f:16:29:b6:
de:15:f6:bd:aa:b6:f7:2e:5f:f9:9e:4e:40:c9:a0:
e8:16:1c:d8:39:e6:ef:91:7a:d1:27:e4:e1:2e:2c:
49:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:0E:C1:42:5B:56:11:C1:7E:3A:89:89:CB:BA:30:4C:28:5D:CE:FB
X509v3 Authority Key Identifier:
keyid:AF:53:16:FC:4A:83:B3:D0:3E:29:75:F8:BE:C2:70:CB:0F:4E:FB:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1MW_EqDs9A-KXX4vsJwyw9O-x0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:04:2d:a8:19:d9:d8:f1:30:8f:6f:ea:17:65:23:83:ca:da:
6d:c4:a7:06:df:76:39:5f:f5:b1:51:d0:b2:b2:b7:71:a7:8a:
c3:e9:1e:03:bd:7d:b3:51:a7:35:e5:4a:9c:8f:6a:8d:fb:b1:
0a:12:9c:ad:ae:68:3e:ae:1a:a7:59:e6:35:11:91:cd:b2:5d:
21:c9:db:ab:bf:bc:d4:46:a5:5a:21:14:98:0d:13:19:f8:e1:
6b:10:4c:19:7a:39:92:b1:63:98:6f:75:65:3b:56:ed:f5:8d:
5c:ac:39:f2:31:84:20:13:d6:c4:90:3e:37:80:f5:03:ec:81:
b0:2b:b1:73:b2:41:75:2a:5f:95:17:d1:c1:0a:29:87:0f:75:
57:95:e5:74:f3:05:70:da:5f:99:ac:55:57:e8:e3:dc:26:c1:
f1:12:04:fd:c5:76:2f:4e:2e:3b:e0:80:4d:39:20:e5:94:b1:
99:0a:20:ae:e2:cf:09:f6:3e:62:0e:02:7f:c6:bd:89:b7:22:
7e:66:84:d3:8e:e1:4a:1e:ac:88:af:21:4b:85:e2:e8:80:38:
4a:29:b8:6c:c0:dc:ce:4d:20:80:05:5d:35:7a:7e:b4:b1:7a:
2a:28:d4:84:a7:a2:bc:78:f6:d7:9b:bb:48:b8:6a:84:24:84:
2f:e9:2c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:52:22 2025 by rpki-client