Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.mft
File: w6SfZaPWgMQo_ZTWfmWicJ8Cks8.mft (raw, json)
Hash identifier: ga3QNs0dGQqOGl+yw7M13I6H7uoFkVq6bOXZ9ms0cCY=
Subject key identifier: 0F:C6:07:27:8E:66:E6:B9:9A:BA:62:C8:6A:35:9A:D7:86:E9:9A:73
Authority key identifier: C3:A4:9F:65:A3:D6:80:C4:28:FD:94:D6:7E:65:A2:70:9F:02:92:CF
Certificate issuer: /CN=c3a49f65a3d680c428fd94d67e65a2709f0292cf
Certificate serial: 0197B6A1C95FFFA0CC13668230803AD17947
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 13:02:25 +0000
Manifest this update: Sat 28 Jun 2025 13:02:25 +0000
Manifest next update: Sun 29 Jun 2025 13:02:25 +0000
Files and hashes: 1: C8on01Bgko2Wx9jKjMpn7FCShCI.roa (hash: NvYVpYNTacJm9Dvti1H+p4nGJK6g8JeQhPdSMYmd5BQ=)
2: lBLUc28nwdLkSsrePQSmyxKstGI.roa (hash: vrIWIUHlJDuCxB1hzJyqC5GbG7oElAvbtOgjYcaloKs=)
3: w6SfZaPWgMQo_ZTWfmWicJ8Cks8.crl (hash: KDuZnIKkFV3+qkjMF6UVi4OC5CQzJbEio6rEorNLyIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:c9:5f:ff:a0:cc:13:66:82:30:80:3a:d1:79:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3a49f65a3d680c428fd94d67e65a2709f0292cf
Validity
Not Before: Jun 28 13:02:25 2025 GMT
Not After : Jun 29 13:02:25 2025 GMT
Subject: CN=0fc607278e66e6b99aba62c86a359ad786e99a73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6d:c8:9f:1d:63:f2:95:c4:93:31:86:2a:e8:
92:69:7a:6b:9e:55:93:30:75:c3:1e:aa:0b:a9:de:
3f:6e:b8:11:2c:83:e6:81:68:43:57:f8:e3:08:10:
09:cc:85:9d:68:75:a4:86:ca:14:90:89:5e:31:c6:
aa:4e:41:f9:68:fa:37:81:92:6d:67:04:f8:c6:0b:
b7:8c:4a:e2:09:3e:5d:25:d2:ed:45:32:23:10:ac:
c6:c3:8c:91:37:47:08:25:c9:0e:58:ec:69:ef:c8:
8a:4a:df:fd:0c:eb:65:86:2b:54:8f:84:eb:46:4e:
df:b4:30:c1:32:c4:7d:b6:0e:87:95:6a:93:3a:84:
a5:93:e6:89:fe:bc:69:a6:da:f6:d5:cd:da:fe:05:
97:10:bd:90:5f:4f:7b:0d:f5:f0:34:3b:48:fa:f5:
b9:cd:1b:c4:58:1c:27:2d:5c:a3:94:03:8b:a6:fb:
f5:b9:a3:51:5f:68:a1:ba:0c:8b:05:ad:10:0a:5f:
bb:cc:8d:83:d7:10:8f:8f:e9:38:58:b5:c8:19:a9:
dc:4e:49:b4:75:91:ee:d9:b6:30:07:03:5e:db:27:
c0:7f:be:77:5a:f4:e8:29:51:6b:41:76:53:66:5d:
9e:2e:12:83:17:d8:0a:47:fe:37:43:42:5a:c9:de:
e9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:C6:07:27:8E:66:E6:B9:9A:BA:62:C8:6A:35:9A:D7:86:E9:9A:73
X509v3 Authority Key Identifier:
keyid:C3:A4:9F:65:A3:D6:80:C4:28:FD:94:D6:7E:65:A2:70:9F:02:92:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:e2:a1:c2:e1:6a:f6:34:08:c5:b4:72:fa:0c:ee:dd:a8:68:
11:05:36:30:bf:80:e3:ed:f7:59:70:50:7b:56:4f:23:ce:9b:
86:22:e8:b9:df:2d:9a:73:4b:94:d7:fc:30:d2:59:9f:0b:6d:
c5:55:1c:28:ab:9a:fd:29:e3:ea:fe:2b:94:0f:64:fd:96:b9:
5c:ed:f9:71:e4:44:93:60:f9:b6:e3:21:29:f0:02:28:aa:88:
9e:cb:0d:0f:58:d8:c1:5b:76:dc:b1:73:b1:c5:7b:e2:88:d7:
8e:a9:e2:d6:0c:22:80:c2:79:94:21:6d:ba:4f:98:05:e8:fa:
e8:62:12:c8:71:b4:fa:1d:16:18:44:6f:97:8e:96:4f:4a:ed:
4c:f4:90:88:98:06:4e:3f:e4:62:43:2d:5f:a4:e8:86:3c:97:
e9:b9:44:87:fe:fb:56:3e:62:58:90:80:96:03:40:a5:8d:be:
81:f2:27:f0:61:b7:12:90:7b:e4:77:17:18:e2:70:12:e8:b8:
94:91:6f:83:fd:eb:a7:3b:32:5b:60:2f:9f:ea:b9:9f:8c:34:
c1:79:37:3e:77:b0:ae:df:98:7b:6e:4a:62:67:e5:8d:96:e4:
d3:91:dd:cd:42:f8:72:60:94:02:30:4d:64:a3:60:79:83:b0:
a7:2a:b5:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:07:03 2025 by rpki-client