Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft
File: RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft (raw, json)
Hash identifier: PrOLk+/2N2Bz4YskpSQYkyYyBHuBcC+k9Rawb1f8t5M=
Subject key identifier: FD:DB:BF:3D:D8:6B:78:8B:62:BF:55:8D:6C:62:ED:C7:2E:8A:29:74
Authority key identifier: 45:6E:CB:3B:E1:06:5E:1E:71:58:95:08:BE:C6:D7:4B:5A:7B:1E:D7
Certificate issuer: /CN=456ecb3be1065e1e71589508bec6d74b5a7b1ed7
Certificate serial: 0197B6A114226A829E861BFB07D9B5C6398D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RW7LO-EGXh5xWJUIvsbXS1p7Htc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 13:01:39 +0000
Manifest this update: Sat 28 Jun 2025 13:01:39 +0000
Manifest next update: Sun 29 Jun 2025 13:01:39 +0000
Files and hashes: 1: HJuvWWI1qAqft10oKlJtZleuo2g.roa (hash: u8HfwrfCCFHcB5jvs7dyE9ffRxdRXb4g1HqA18Sf8YE=)
2: RW7LO-EGXh5xWJUIvsbXS1p7Htc.crl (hash: m6z1fQ0E1DDHMsRC0SNrPTo7rMdmcg25cW+Njva+FyU=)
3: wtjN78Y_d1b6O6UDtSU2B1I3v9Y.roa (hash: ReqT7jsHEoa7AvfRGw7Yv2wPcS9GQjwhHtVeUywingA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft
rsync://rpki.ripe.net/repository/DEFAULT/RW7LO-EGXh5xWJUIvsbXS1p7Htc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:14:22:6a:82:9e:86:1b:fb:07:d9:b5:c6:39:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=456ecb3be1065e1e71589508bec6d74b5a7b1ed7
Validity
Not Before: Jun 28 13:01:39 2025 GMT
Not After : Jun 29 13:01:39 2025 GMT
Subject: CN=fddbbf3dd86b788b62bf558d6c62edc72e8a2974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:45:7b:d6:19:e9:dc:ca:49:ac:26:51:e2:34:
ce:f2:04:30:88:7d:c1:ad:59:ef:ac:38:d2:23:19:
2a:8c:0e:2b:ac:31:6c:1f:37:50:8d:70:88:43:26:
8a:0c:52:88:ab:bc:31:ce:55:c2:fe:89:90:84:b8:
40:a4:1e:f7:54:a3:a4:38:e2:d1:b8:ab:0a:f1:33:
ac:32:07:ee:c2:7a:0a:ab:e3:6e:93:4a:b7:57:9e:
4d:9a:9c:98:e4:f4:79:e3:7a:cc:3a:bb:26:5b:be:
fa:4e:b8:4a:fc:b8:b7:52:09:d3:3d:db:16:83:f4:
52:3b:2d:54:eb:f5:38:f9:f7:e8:61:fa:03:a3:ba:
1a:4a:b3:2c:eb:78:b5:29:0e:bf:01:e2:b9:bf:cd:
aa:6c:b2:99:50:a9:68:be:89:15:03:67:61:53:e0:
08:3d:44:b9:7f:ad:97:b4:e7:67:fd:a4:a6:a1:46:
4e:f0:d0:74:14:04:62:55:96:7d:4e:53:5c:2b:ca:
4d:b4:21:c4:02:01:69:01:f7:fc:e5:79:b7:6f:77:
e6:85:5f:7d:cd:db:64:d8:91:a0:f7:5e:6d:5b:9a:
9e:74:35:70:ab:6d:34:fe:49:55:02:45:5b:02:84:
ad:b2:3d:73:df:68:45:a5:54:5c:64:19:cd:f5:eb:
16:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:DB:BF:3D:D8:6B:78:8B:62:BF:55:8D:6C:62:ED:C7:2E:8A:29:74
X509v3 Authority Key Identifier:
keyid:45:6E:CB:3B:E1:06:5E:1E:71:58:95:08:BE:C6:D7:4B:5A:7B:1E:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RW7LO-EGXh5xWJUIvsbXS1p7Htc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:37:ce:70:7a:57:b6:7a:05:ca:c8:3a:f2:6d:e7:a6:cb:9c:
b8:03:26:d9:76:5c:0a:a7:a8:35:f4:de:81:77:d4:1f:46:17:
20:5a:99:34:7d:74:0f:84:9b:ce:0a:41:05:53:f4:9c:8e:45:
67:ab:ff:7d:b6:52:f4:2e:67:d8:6c:02:c5:b5:52:27:78:1d:
9a:ab:61:33:1e:53:b4:e0:53:d3:9b:ef:c3:c7:af:bc:c4:16:
52:87:85:fa:a4:ab:ac:d3:f4:20:71:61:c8:86:14:07:d9:19:
4a:22:28:92:da:59:e4:cf:e7:03:62:4a:2c:4c:b5:fa:8b:24:
02:04:78:11:5e:75:32:af:88:13:e2:f0:05:73:6c:45:4f:67:
fa:63:57:0c:fd:cb:6c:6f:75:f8:46:c7:26:8e:af:03:0f:88:
8c:c8:77:1b:ee:9a:35:74:7a:d8:1f:0d:37:5a:47:98:fe:08:
fd:39:e3:f7:cd:78:f1:23:45:a2:9f:28:06:ff:d9:e0:eb:2d:
d1:cd:19:50:33:e9:34:fa:59:c4:cf:2f:3a:35:d8:5b:9c:45:
1f:c1:93:ac:78:48:90:a3:4f:79:cb:2f:22:9d:f7:ae:ba:dd:
9e:55:44:fa:19:ac:90:e8:f3:c0:50:7c:47:83:50:80:95:48:
74:b0:2c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:32:46 2025 by rpki-client