Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
File: w70m_iKV5GK-JnhTPvpTHiO38QI.mft (raw, json)
Hash identifier: 0ZaTZa5/2Byeu6MPMa8wBUkI+RRjhjhxA2RU+t7FwPc=
Subject key identifier: 55:BF:11:06:C7:87:EA:41:3B:F1:A5:93:71:65:07:F0:4B:FA:E8:13
Authority key identifier: C3:BD:26:FE:22:95:E4:62:BE:26:78:53:3E:FA:53:1E:23:B7:F1:02
Certificate issuer: /CN=c3bd26fe2295e462be2678533efa531e23b7f102
Certificate serial: 0197B6A20A1056D2373F59F74D1A3FBB3797
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 13:02:42 +0000
Manifest this update: Sat 28 Jun 2025 13:02:42 +0000
Manifest next update: Sun 29 Jun 2025 13:02:42 +0000
Files and hashes: 1: mdzOjm97CLLzPCbjlPobKIT1pLw.roa (hash: t6RlQNOZ4r0YZ3Um/Nvgu1T4czU0EwLc7Ga8Lg+Wxu4=)
2: w70m_iKV5GK-JnhTPvpTHiO38QI.crl (hash: 3ysygYHmdWdXjQjw9/zaVqwQ7Rr7MbSms4IC+bb4STA=)
3: yHP9EGdLjDrqdAgK0gSgkfOYdDE.roa (hash: 9lzUExWqudI5IZaHPGACvDV+UoMVt4hmvKdyWsLEU8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:0a:10:56:d2:37:3f:59:f7:4d:1a:3f:bb:37:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3bd26fe2295e462be2678533efa531e23b7f102
Validity
Not Before: Jun 28 13:02:42 2025 GMT
Not After : Jun 29 13:02:42 2025 GMT
Subject: CN=55bf1106c787ea413bf1a593716507f04bfae813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:39:4d:ea:1c:31:e2:b9:cd:69:44:9c:17:85:
10:1b:7a:7d:17:7d:bf:0f:49:87:fd:ad:35:15:42:
49:e6:dd:58:5b:81:d6:24:c5:75:1f:46:f3:9e:5e:
24:83:9e:fc:d5:7f:5e:87:7a:ed:65:fa:27:f2:a3:
9e:2e:22:7d:a5:ac:16:d0:1c:1e:c0:ff:2d:9e:0a:
68:65:9c:9e:2e:f2:73:05:14:b6:5b:fd:43:ef:7d:
be:44:a5:23:31:b6:e4:a3:ae:0c:8f:ed:8b:68:da:
06:02:f4:7a:f3:e5:33:5c:c4:a4:30:0b:55:4a:c1:
2c:98:1d:b5:40:b8:ae:02:7b:f7:76:04:47:4d:dc:
be:01:d2:86:a1:e5:b2:2a:26:9a:e5:39:6e:41:57:
d6:42:80:f7:f7:71:f8:4c:1f:20:31:7e:7f:1d:64:
16:b1:59:bd:e3:be:63:f6:04:cc:7d:fe:96:dc:8d:
45:c9:af:79:2b:3a:81:f8:ff:98:87:5c:60:e0:ea:
f8:6a:a6:b2:67:fa:86:7f:6c:78:0d:47:d9:8a:00:
5e:97:c0:7e:a9:6e:b5:d7:3b:49:75:27:8b:68:ab:
38:59:13:56:a2:3c:31:4f:91:2b:15:d3:ad:72:22:
27:1d:84:4f:87:4b:28:0e:93:8f:ed:ab:15:a7:d6:
5b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:BF:11:06:C7:87:EA:41:3B:F1:A5:93:71:65:07:F0:4B:FA:E8:13
X509v3 Authority Key Identifier:
keyid:C3:BD:26:FE:22:95:E4:62:BE:26:78:53:3E:FA:53:1E:23:B7:F1:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:34:4b:1b:47:0c:ce:5b:ce:ea:b4:53:a6:d4:1a:4a:19:8a:
74:95:f9:59:5e:6a:6b:30:ad:6a:f2:c1:e0:c5:88:60:4c:ca:
25:2f:47:4d:e6:08:4a:52:3c:58:5d:2f:7d:eb:e6:99:59:23:
29:12:c3:8e:22:fd:e0:5b:a9:f9:22:d3:66:d0:5b:f7:79:0e:
76:6e:d2:80:b6:ed:38:4f:92:18:46:0f:dd:d9:5b:df:a0:09:
41:11:d4:9f:d4:6a:4d:2a:94:68:0f:bc:0e:79:82:20:0f:4d:
8c:3a:cb:e3:fb:4b:c6:96:41:b7:fc:41:7e:28:bd:b6:7f:6f:
a4:9e:f7:30:a8:7d:54:c3:15:ce:a3:65:dd:22:56:4c:19:fe:
10:79:c5:85:ca:0a:da:15:a1:38:2f:07:7c:8f:2c:c3:2b:b8:
e9:7e:db:88:14:04:64:62:cb:c9:cb:e2:6e:8b:83:c7:d8:06:
a3:b2:2e:af:90:be:8f:d7:4a:36:5b:74:3e:a1:d1:db:96:97:
c2:61:1e:43:db:78:d9:9d:16:21:6a:b6:3e:2f:f9:14:73:60:
27:18:19:62:78:23:1a:39:eb:5d:23:9b:48:6e:ef:7e:45:28:
a0:f9:ea:57:26:ad:98:c6:e9:4b:93:2f:79:59:4a:1b:d7:ba:
f2:ab:a8:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:58:12 2025 by rpki-client