Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.mft
File: w0CQmuwyCowu4cq84TAsu31OBIY.mft (raw, json)
Hash identifier: bQMZaximUPKTqdXi0WhspqzY1y6PDZSlCCZK3vnOUrA=
Subject key identifier: 13:AC:5F:EF:24:1D:E0:E9:7B:F7:8E:A4:1D:F1:59:8B:C6:8A:5D:62
Authority key identifier: C3:40:90:9A:EC:32:0A:8C:2E:E1:CA:BC:E1:30:2C:BB:7D:4E:04:86
Certificate issuer: /CN=c340909aec320a8c2ee1cabce1302cbb7d4e0486
Certificate serial: 0197C3B753F5B6F19401A5B50663B12A3831
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w0CQmuwyCowu4cq84TAsu31OBIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.mft
Manifest number: 124E
Signing time: Tue 01 Jul 2025 02:01:01 +0000
Manifest this update: Tue 01 Jul 2025 02:01:01 +0000
Manifest next update: Wed 02 Jul 2025 02:01:01 +0000
Files and hashes: 1: 1JRmPjjw2eEyAEj7-d9EaoFd8tQ.roa (hash: qUFNGxht8SatseV7uTcgdf36n0Wje2HhZXA6lIEPzt8=)
2: jb-zD-QZseypOhoYrz7-lEkthR4.roa (hash: NVATDU2rQowVsA5kxCOsDlRv1YWlJaECqpg6RYlVt8g=)
3: w0CQmuwyCowu4cq84TAsu31OBIY.crl (hash: MDBCPDnrKOl94p8pIdxyIq5gF0JOaL4Z0IT1MODavjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/w0CQmuwyCowu4cq84TAsu31OBIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 02:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c3:b7:53:f5:b6:f1:94:01:a5:b5:06:63:b1:2a:38:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c340909aec320a8c2ee1cabce1302cbb7d4e0486
Validity
Not Before: Jul 1 02:01:01 2025 GMT
Not After : Jul 2 02:01:01 2025 GMT
Subject: CN=13ac5fef241de0e97bf78ea41df1598bc68a5d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9d:7c:0a:7b:c9:28:9a:66:96:da:d5:3b:1f:
5a:03:b8:62:95:89:15:96:13:46:a1:ca:ed:71:33:
60:87:d1:cf:ae:cb:49:ce:e0:7a:7d:d3:3f:ad:95:
26:8d:14:6c:c5:d2:9a:ac:67:e3:86:10:90:37:1e:
77:65:c9:5f:79:02:8e:09:40:e0:29:1b:28:b1:2e:
23:a2:11:02:50:e3:71:2a:88:2e:fd:21:a9:f7:f9:
68:42:09:69:75:8b:71:53:37:fa:58:dc:9e:7e:f1:
04:8f:9c:98:6b:e6:9a:45:31:9f:1f:ca:98:61:e9:
f2:31:02:af:8d:28:b5:3a:c3:0a:4f:c5:97:a6:64:
b6:39:3a:3a:ef:d7:d0:b5:c0:ce:89:af:df:a8:15:
df:4a:a2:bf:0e:c2:99:54:d5:bb:5a:7f:62:91:27:
d4:89:55:cc:89:47:34:9a:ea:9a:31:4c:3c:4d:00:
35:be:fa:00:97:33:7a:c1:24:a7:dd:98:6d:1d:30:
25:4b:19:d6:33:cf:54:a3:5e:65:c1:eb:dd:28:44:
90:bf:5d:30:8f:bd:c3:16:5c:e9:14:62:06:cb:b9:
be:0e:b2:95:84:02:cd:d9:a7:4f:d4:26:c9:d1:93:
1e:9b:8f:ff:20:50:3e:64:49:9b:b6:21:c2:8b:a9:
b0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:AC:5F:EF:24:1D:E0:E9:7B:F7:8E:A4:1D:F1:59:8B:C6:8A:5D:62
X509v3 Authority Key Identifier:
keyid:C3:40:90:9A:EC:32:0A:8C:2E:E1:CA:BC:E1:30:2C:BB:7D:4E:04:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w0CQmuwyCowu4cq84TAsu31OBIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:93:da:90:e6:a9:4c:13:5c:de:a8:bb:cf:44:ca:36:a3:0a:
4e:ef:f1:0f:bf:84:99:f6:95:8d:45:a8:d6:c3:da:e6:44:28:
d2:98:11:57:f3:76:e0:9d:f8:0f:c7:3f:39:2d:25:d5:da:4e:
a4:e3:db:ed:d3:18:af:ad:d1:f2:f9:7e:cd:57:55:de:d4:b8:
5e:f8:c2:39:fe:bc:83:e3:4a:13:61:bd:ba:20:65:b7:7c:12:
05:17:7a:25:20:e5:5e:c8:6f:08:8b:9b:01:b5:f8:dd:77:d6:
e5:a6:cc:a7:36:d2:49:a9:24:0d:48:f0:9d:b6:43:3f:4c:bd:
b6:7a:40:a9:e0:1e:74:87:3f:4f:9a:fb:28:30:03:b2:67:23:
55:e1:73:99:48:ff:4d:d4:e9:3e:da:2e:17:16:be:93:85:56:
02:ec:f6:cb:e1:f7:aa:ba:b3:59:47:07:8a:56:c3:5d:78:fe:
b8:41:4c:00:e8:d1:bc:1e:07:57:5b:40:4f:aa:52:9a:55:d3:
56:b5:41:76:11:3f:38:b0:75:df:28:db:59:82:c9:cb:d8:0b:
7d:86:b5:96:33:20:7c:dd:20:18:14:b6:dc:8b:6b:c0:76:49:
99:85:fe:d8:cd:30:34:1d:22:00:6a:10:79:ae:31:0c:c3:80:
b5:88:12:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 10:51:31 2025 by rpki-client