Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.mft
File: PWwpWBRfRfrV2u6zi3W1LAlmEEY.mft (raw, json)
Hash identifier: ejb1uVANfSMOKV9uLpe3ykK6nJWSQzcKzYZkAQL/2B4=
Subject key identifier: AF:1B:09:E3:5F:C1:6B:7C:52:B3:CA:8E:40:F8:57:9E:A5:B2:62:C9
Authority key identifier: 3D:6C:29:58:14:5F:45:FA:D5:DA:EE:B3:8B:75:B5:2C:09:66:10:46
Certificate issuer: /CN=3d6c2958145f45fad5daeeb38b75b52c09661046
Certificate serial: 0197B6A1879A3FCF06BBC68C7C8A3CE85E5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PWwpWBRfRfrV2u6zi3W1LAlmEEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.mft
Manifest number: 051E
Signing time: Sat 28 Jun 2025 13:02:08 +0000
Manifest this update: Sat 28 Jun 2025 13:02:08 +0000
Manifest next update: Sun 29 Jun 2025 13:02:08 +0000
Files and hashes: 1: 6px4oQpQxURR5IW0gWezwsCgYUA.roa (hash: aKqSySkiQ4Z3UFY+0fQdpN2yWiQF1RqxRVXfSVXmnd4=)
2: PWwpWBRfRfrV2u6zi3W1LAlmEEY.crl (hash: SbzK5wrcgdKzH3654Usnoa9JBsRJ8LwMdhDVdNTBcCI=)
3: gdLyflAsCyF8taKXwI9Ohy9cbTg.roa (hash: watnTPY7ltSg0Ey7o57Cxg1ndShvduTve51cc1ZXeew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PWwpWBRfRfrV2u6zi3W1LAlmEEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:87:9a:3f:cf:06:bb:c6:8c:7c:8a:3c:e8:5e:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d6c2958145f45fad5daeeb38b75b52c09661046
Validity
Not Before: Jun 28 13:02:08 2025 GMT
Not After : Jun 29 13:02:08 2025 GMT
Subject: CN=af1b09e35fc16b7c52b3ca8e40f8579ea5b262c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:75:7f:df:c3:9f:52:85:34:45:f6:58:c4:71:
86:95:8e:b2:c4:aa:f4:ac:68:19:29:bd:ad:eb:8a:
18:10:1c:a5:8a:b6:31:99:95:ff:fc:71:0c:b2:2b:
bc:6a:7b:af:3e:bb:20:46:5d:90:03:10:61:0b:0b:
45:b3:79:6b:0f:db:4a:15:a7:2e:e3:48:ba:96:0a:
b0:d1:82:2e:47:e9:ee:61:6d:74:d3:67:6e:cb:5d:
9f:b4:d6:e5:79:6a:08:87:12:a5:84:56:ff:22:30:
0d:de:a8:3b:53:d4:04:f1:46:99:cf:f0:5c:df:a3:
22:6e:6b:e0:f6:a0:cd:8b:6e:38:5e:0c:c9:59:e2:
46:98:40:bc:27:57:90:db:51:0d:10:f1:64:9f:b2:
22:4f:74:d2:1b:8c:1a:2b:a4:22:b8:4d:68:b3:85:
5d:58:5d:d1:4e:f4:41:49:c2:3a:4e:f0:36:ed:ea:
9c:4a:ab:68:b9:d4:ac:83:d2:e1:8d:fd:20:7c:00:
df:c3:35:b8:14:71:68:b7:0a:02:fc:a7:98:10:f2:
e2:b5:0d:12:7b:c9:a7:6f:1f:b5:a5:e6:ba:b6:53:
4c:1e:be:8b:59:cf:11:fe:76:d2:69:a3:84:30:6f:
7b:f9:97:52:d5:93:01:f6:7a:59:83:99:c4:d1:cf:
3a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:1B:09:E3:5F:C1:6B:7C:52:B3:CA:8E:40:F8:57:9E:A5:B2:62:C9
X509v3 Authority Key Identifier:
keyid:3D:6C:29:58:14:5F:45:FA:D5:DA:EE:B3:8B:75:B5:2C:09:66:10:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWwpWBRfRfrV2u6zi3W1LAlmEEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:59:82:95:aa:28:e8:26:98:a0:76:f6:09:6e:5e:52:06:c1:
a1:fb:51:db:6f:eb:ac:94:57:5d:52:f2:dd:a4:58:16:38:09:
56:41:c4:a1:b1:19:30:c5:d4:2d:f2:a5:59:ce:75:99:37:c0:
25:d8:c0:36:f6:b8:61:c7:2e:af:d0:50:f1:10:90:0d:ff:d3:
82:6b:57:f0:1d:3d:a2:0a:ba:dc:18:4a:4b:db:7a:f1:cc:bd:
5c:33:66:6d:7c:9f:3f:d6:a6:e0:ed:3d:b8:b1:05:72:0c:e9:
19:8e:f4:03:99:6e:f0:f9:c0:f3:38:05:97:09:6f:cf:4c:4e:
6a:dd:e4:f8:83:40:8e:b6:52:55:6d:fe:1a:1d:19:06:92:f7:
b5:0d:c0:10:26:bd:6e:07:9d:eb:af:af:2d:c7:4d:a1:fd:7b:
53:51:64:62:65:8d:6c:76:9f:07:ec:5e:48:27:8d:0c:d1:77:
63:75:9d:6d:40:cc:fc:b2:3d:ef:16:5b:84:ae:2f:25:e1:fb:
81:00:9e:9c:8b:aa:df:7a:b2:35:b1:72:77:6d:dd:ea:1a:39:
86:f3:1d:83:3c:77:56:5e:29:40:00:e5:0a:c0:d9:99:fb:01:
db:b1:1e:88:e1:e3:d5:ee:5f:89:99:47:77:b6:30:62:d8:0b:
3b:87:17:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:06:04 2025 by rpki-client