Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c7e47d-c08e-4769-86d2-c7f8b057aed0/1/wR9gPeQJpxD9rmLKwcVTk6lTtbU.mft
File: wR9gPeQJpxD9rmLKwcVTk6lTtbU.mft (raw, json)
Hash identifier: kqLOOpHE2VNOHuGHAv68Z3hY3vM93u1xl17mscii+64=
Subject key identifier: 89:DC:E7:74:92:B4:42:14:7A:6A:5D:56:D0:F2:65:E5:E1:2E:49:CB
Authority key identifier: C1:1F:60:3D:E4:09:A7:10:FD:AE:62:CA:C1:C5:53:93:A9:53:B5:B5
Certificate issuer: /CN=c11f603de409a710fdae62cac1c55393a953b5b5
Certificate serial: 0197B70E9F9F0EAD659694A70EC3267D4290
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wR9gPeQJpxD9rmLKwcVTk6lTtbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/c7e47d-c08e-4769-86d2-c7f8b057aed0/1/wR9gPeQJpxD9rmLKwcVTk6lTtbU.mft
Manifest number: 02AA
Signing time: Sat 28 Jun 2025 15:01:18 +0000
Manifest this update: Sat 28 Jun 2025 15:01:18 +0000
Manifest next update: Sun 29 Jun 2025 15:01:18 +0000
Files and hashes: 1: UsAeeJKz5x5UM9R7HFO2Dgzi0jA.roa (hash: FFiDVfqG1v30MyW/O7JaJbrLiihT2L0idYJ853z7lV4=)
2: wR9gPeQJpxD9rmLKwcVTk6lTtbU.crl (hash: lFu1WVb7qNtM0i6liy+MWd1dHy3HrEiV126YCbiOv8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/c7e47d-c08e-4769-86d2-c7f8b057aed0/1/wR9gPeQJpxD9rmLKwcVTk6lTtbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/c7e47d-c08e-4769-86d2-c7f8b057aed0/1/wR9gPeQJpxD9rmLKwcVTk6lTtbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/wR9gPeQJpxD9rmLKwcVTk6lTtbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:9f:9f:0e:ad:65:96:94:a7:0e:c3:26:7d:42:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c11f603de409a710fdae62cac1c55393a953b5b5
Validity
Not Before: Jun 28 15:01:18 2025 GMT
Not After : Jun 29 15:01:18 2025 GMT
Subject: CN=89dce77492b442147a6a5d56d0f265e5e12e49cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:95:44:1a:6b:e8:7d:4e:8d:a4:57:58:17:7d:
33:09:89:94:ea:7e:b6:66:cf:d3:db:37:38:34:07:
47:fc:bb:5b:ea:8d:9c:76:94:59:f2:39:bb:12:38:
e8:c8:85:57:e2:47:8a:bf:6e:8b:68:0e:c5:f9:94:
1a:16:ac:d4:98:3c:31:53:7d:69:d3:f2:7b:f4:c7:
c8:dd:06:b2:f9:26:4b:c8:cc:98:c8:3c:b8:a1:f0:
88:b4:a9:d5:5c:b9:54:40:ce:69:3d:d5:de:93:79:
b5:6c:29:e4:88:f0:c6:6c:ad:28:bb:24:65:a7:dc:
54:85:b2:b9:cc:b2:df:9d:47:bc:15:41:ff:e6:cb:
cb:ec:0c:00:4e:2d:aa:11:8f:80:dc:12:86:95:7b:
88:2a:6b:35:2c:4e:37:38:f0:86:d2:12:aa:d9:5a:
a6:f8:97:5d:c0:d3:39:85:66:0a:8d:ac:5a:f5:dc:
60:fa:86:91:89:29:7e:38:0d:00:cb:9a:99:77:af:
c1:6c:cb:76:d5:0f:d2:0f:62:55:ab:d0:a4:ca:03:
32:90:45:d9:f6:66:75:28:aa:e3:7b:8a:a3:f9:cc:
41:3a:d2:68:17:03:6e:54:bb:95:93:42:88:55:66:
83:28:6d:19:3c:0a:14:b0:a3:48:2b:55:8b:3b:6f:
2d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:DC:E7:74:92:B4:42:14:7A:6A:5D:56:D0:F2:65:E5:E1:2E:49:CB
X509v3 Authority Key Identifier:
keyid:C1:1F:60:3D:E4:09:A7:10:FD:AE:62:CA:C1:C5:53:93:A9:53:B5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wR9gPeQJpxD9rmLKwcVTk6lTtbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c7e47d-c08e-4769-86d2-c7f8b057aed0/1/wR9gPeQJpxD9rmLKwcVTk6lTtbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c7e47d-c08e-4769-86d2-c7f8b057aed0/1/wR9gPeQJpxD9rmLKwcVTk6lTtbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:46:e6:51:4e:1d:db:fd:31:5f:33:01:b5:36:dc:eb:97:e4:
49:02:2b:5c:86:e7:7b:9a:fd:8b:c1:6c:26:6e:c7:bf:0b:2d:
ca:56:d5:46:46:d9:b0:ad:da:e7:49:68:c4:ae:5b:d6:95:52:
d2:72:da:cb:d0:f6:91:a4:d2:86:55:9e:6d:a7:1c:5d:0c:f0:
76:26:a2:2f:1a:41:86:7e:e1:48:7d:51:fb:aa:0c:d3:8f:14:
9d:c5:35:44:42:b1:fa:40:a0:68:f7:c6:2a:5e:44:6f:db:6f:
4c:0d:b3:cf:f0:32:68:72:1f:5b:fd:fd:ca:3b:ea:73:59:60:
42:81:f2:2d:7c:53:98:cc:ee:59:52:b4:b4:6f:39:01:e2:d4:
93:a1:88:54:ed:e0:27:2a:23:78:ca:24:63:d4:e0:81:61:f4:
7f:db:6f:05:96:61:3f:96:ec:c9:1d:57:4a:20:bd:54:b7:42:
ec:8f:c9:3c:60:00:8d:ef:02:d9:63:9c:31:d3:57:94:e3:20:
e1:3a:8d:2e:e1:4b:90:b9:d1:3c:37:91:90:b4:89:1b:8b:f4:
b7:80:78:25:c9:2a:11:69:74:bc:b2:f8:fc:e7:c5:73:c2:22:
48:1f:49:b4:f6:5a:b2:f4:b9:5f:2b:36:10:cc:c7:2e:fd:22:
39:45:38:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:18:28 2025 by rpki-client