Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
File: W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft (raw, json)
Hash identifier: 613mc4yUjB1DSRV8Xc9Jdp8SGXu7WnLGb5EMCz7SdCE=
Subject key identifier: E3:EE:75:BB:6E:19:09:D6:6A:4C:CD:6B:13:31:C9:3F:74:92:9D:0C
Authority key identifier: 5B:D8:D7:2B:1C:BF:C6:7C:37:9A:D9:A9:2C:66:FA:C6:C8:D3:23:3A
Certificate issuer: /CN=5bd8d72b1cbfc67c379ad9a92c66fac6c8d3233a
Certificate serial: 0197CDCDD349A4E2572B8BDA7A6521DA875A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
Manifest number: 15C0
Signing time: Thu 03 Jul 2025 01:01:47 +0000
Manifest this update: Thu 03 Jul 2025 01:01:47 +0000
Manifest next update: Fri 04 Jul 2025 01:01:47 +0000
Files and hashes: 1: Dojs8PEQnvulcYqgM4rdKOxunu0.roa (hash: dLJI4qVjVKlBypD5DT2hbIXIp/KqABCIFpos5VZ0K94=)
2: W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl (hash: EVwuEXhdoxz0JcSgVxUYePRG1V0CNcntUNDXGAOxwuE=)
3: ZHpRRkh9oiRLBNkKdSMUtdYZ7o4.roa (hash: G5aCOLk/4QhatU9joqPbjeRwSGccuFt7GUatcEniztQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 01:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cd:cd:d3:49:a4:e2:57:2b:8b:da:7a:65:21:da:87:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bd8d72b1cbfc67c379ad9a92c66fac6c8d3233a
Validity
Not Before: Jul 3 01:01:47 2025 GMT
Not After : Jul 4 01:01:47 2025 GMT
Subject: CN=e3ee75bb6e1909d66a4ccd6b1331c93f74929d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:d9:a5:fe:15:0d:92:26:56:dd:a6:93:39:78:
b1:16:2a:52:c9:75:6f:28:13:d4:26:c8:e3:1c:b7:
68:d1:f0:da:9d:a7:a8:74:66:eb:34:3f:88:7c:54:
4e:bb:ca:52:6b:90:31:9c:77:cb:41:de:84:83:4d:
7e:44:f9:0a:bf:86:91:e2:c1:6e:61:29:fe:82:de:
b3:31:34:69:45:bd:5b:27:1f:0e:f7:89:30:ce:49:
21:22:4d:6c:1c:4c:8e:aa:5a:ad:53:11:6d:f9:1e:
8e:bf:01:b5:d3:5c:9d:cc:01:5a:46:cb:63:ef:a9:
d1:df:a9:66:dd:33:10:16:64:93:29:ac:18:3e:4c:
c0:e5:f5:d6:c2:87:12:dc:63:29:af:72:cc:ee:f6:
27:45:35:75:c8:36:f3:ad:cb:6e:a2:cb:b1:a8:16:
a9:c8:5d:4d:6e:27:62:c5:e1:9e:8e:6c:da:81:05:
1c:28:e1:02:2b:0b:b4:4e:91:84:2e:3d:03:f5:6e:
9a:b6:f7:13:57:86:6f:1d:97:f8:1a:1a:5c:34:2d:
f5:3b:18:0d:53:7b:4b:29:7c:a4:b4:2e:1f:37:ea:
6a:4a:43:38:69:36:a4:4d:22:1e:df:dd:93:76:a0:
8a:5b:e3:9f:a4:5d:b3:b9:0d:b9:ff:98:82:31:3e:
32:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:EE:75:BB:6E:19:09:D6:6A:4C:CD:6B:13:31:C9:3F:74:92:9D:0C
X509v3 Authority Key Identifier:
keyid:5B:D8:D7:2B:1C:BF:C6:7C:37:9A:D9:A9:2C:66:FA:C6:C8:D3:23:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:e3:b6:9c:03:b1:42:78:81:63:b0:69:a9:da:a9:e3:c1:3b:
88:e5:7f:0d:54:50:e6:4e:e9:3a:fd:ec:09:e1:77:8b:63:4b:
62:8b:22:5c:30:79:48:ff:96:73:2f:64:68:28:50:fe:c7:63:
64:d4:08:cd:c7:48:52:37:4c:a4:7d:35:60:d9:63:56:31:d2:
dc:70:4a:b2:63:72:a1:9d:76:f2:7d:9f:0c:46:94:33:96:0b:
1a:bb:e1:77:16:b5:1c:ec:49:5b:c0:66:90:3b:2e:c8:70:c1:
0e:2a:45:c2:e1:a3:51:3e:3b:ec:9c:48:21:f4:95:d2:3b:ec:
35:f8:73:db:54:4f:ea:90:51:c0:51:09:42:3e:c2:c6:be:ba:
db:08:a8:7a:4c:6d:c5:4e:8b:53:0f:61:78:7c:4c:cb:3b:3e:
22:34:d4:3f:11:31:3b:29:e6:1b:66:82:39:29:fe:ae:b0:e1:
9f:a4:3b:65:70:c2:9b:7c:77:5b:8a:8d:04:33:ea:85:55:a8:
34:dd:d2:72:3f:c7:78:70:57:59:1b:57:c7:75:c8:5b:98:f2:
b3:11:94:2a:11:1f:3e:6a:ad:2d:89:22:2a:fa:09:d8:de:7a:
db:34:b6:b1:0c:6c:af:ae:ff:50:b3:d7:e9:44:0b:ca:9b:43:
36:c8:32:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 10:32:13 2025 by rpki-client