Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft
File: 2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft (raw, json)
Hash identifier: Dbr1p8QEAZZ4kt6mk3pv/jm/TVrylWxPE8NSvSy/2ik=
Subject key identifier: 30:DA:C3:25:0B:E5:38:12:67:FD:2D:EE:07:9B:BF:D5:B2:F7:6E:BA
Authority key identifier: D9:60:1E:FB:3F:0C:FD:AA:22:95:18:7D:2B:04:56:49:41:10:E1:57
Certificate issuer: /CN=d9601efb3f0cfdaa2295187d2b0456494110e157
Certificate serial: 0197B7EAB606099D43EED1E911564B8680C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 19:01:41 +0000
Manifest this update: Sat 28 Jun 2025 19:01:41 +0000
Manifest next update: Sun 29 Jun 2025 19:01:41 +0000
Files and hashes: 1: 2WAe-z8M_aoilRh9KwRWSUEQ4Vc.crl (hash: 8zmN+OM5w258dGRKFmXA9SluDVzatAtoTvX7JKMGxVE=)
2: x87acQDfo7zGs3qirjlrzwnM_hA.roa (hash: U4EKqslx/+4i2YtDzAzEmDv7ojb2iGPFBdKGnVtkCzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:b6:06:09:9d:43:ee:d1:e9:11:56:4b:86:80:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9601efb3f0cfdaa2295187d2b0456494110e157
Validity
Not Before: Jun 28 19:01:41 2025 GMT
Not After : Jun 29 19:01:41 2025 GMT
Subject: CN=30dac3250be5381267fd2dee079bbfd5b2f76eba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e8:ec:eb:51:78:e0:55:4c:2d:7b:89:17:d2:
45:8d:84:d6:98:af:25:ba:9f:17:d5:f6:e4:25:a9:
1a:e3:76:ab:9e:59:8b:09:c9:e7:95:59:d6:56:7a:
ca:45:f8:5b:1a:8a:90:98:e4:79:fe:56:6b:eb:09:
5f:1b:9f:60:16:06:5a:1f:62:e6:19:f3:15:8d:02:
ed:8c:d0:d5:16:65:24:1e:13:67:f5:0a:84:40:fb:
8c:ab:66:88:76:8d:a6:81:8e:3d:2d:92:e1:a9:04:
62:e2:ac:72:d8:45:60:34:1a:e2:56:e8:15:bc:4b:
f1:21:12:5b:da:04:62:24:d1:28:cc:60:94:fc:fa:
6d:d3:f9:fc:81:c0:4e:cf:61:46:ae:64:7d:45:30:
a8:08:c2:b0:1a:73:75:50:73:3b:cc:43:f9:df:42:
84:65:97:3f:b0:ae:11:66:28:2a:09:0f:b6:e3:59:
34:58:da:69:d1:da:ca:29:af:ae:52:9d:18:c4:c0:
3e:89:90:0c:ef:b7:6c:39:31:41:d1:a6:b6:7b:66:
92:e8:97:4b:fa:46:86:ce:6c:c6:b6:13:63:bb:73:
5d:fa:7d:5a:91:e5:62:0c:e7:46:95:2c:34:4d:6d:
cb:0e:f6:c7:d8:1d:ff:a3:d2:40:ab:6b:ba:19:bb:
a3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:DA:C3:25:0B:E5:38:12:67:FD:2D:EE:07:9B:BF:D5:B2:F7:6E:BA
X509v3 Authority Key Identifier:
keyid:D9:60:1E:FB:3F:0C:FD:AA:22:95:18:7D:2B:04:56:49:41:10:E1:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:8f:1d:76:15:3c:37:2c:df:ec:b0:8a:6a:e4:84:7c:d6:06:
0c:88:30:1e:51:e9:df:c1:b2:a3:76:91:e5:84:ad:de:e9:95:
7c:2e:23:31:38:62:56:30:14:a6:e1:5f:53:bf:ce:a7:c4:6c:
fd:eb:83:14:d4:8c:d0:72:42:1f:ca:82:88:59:26:9a:c3:57:
c6:0f:69:13:b7:a0:07:43:ad:f5:a7:4e:f6:e8:d6:cb:37:e8:
ca:6f:5d:e3:de:a5:4f:dd:91:c2:53:31:40:4b:c7:17:0f:e1:
d9:32:3c:bd:13:c4:96:95:07:58:ce:22:54:e4:40:61:d3:0a:
1c:c1:7f:d9:80:92:1d:ef:5a:9a:38:83:2e:58:47:7a:e4:fe:
a5:a1:3f:a8:96:d3:41:81:ec:02:e3:a9:16:53:d5:be:63:d8:
38:98:96:3a:d4:63:e0:81:e2:15:27:ab:c4:ec:49:99:bc:88:
a8:97:12:d1:ad:54:11:5e:26:a1:db:58:de:f3:b2:f9:dc:7f:
8d:98:df:a7:60:97:a7:f1:cd:e5:d4:79:69:eb:07:08:de:41:
60:32:dd:c5:bc:b9:10:2f:61:b8:81:da:71:cb:9f:ce:0c:7a:
4c:d5:d5:94:95:62:03:74:72:21:9e:fe:ac:a9:e3:81:3a:25:
c1:1d:c3:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:43:25 2025 by rpki-client