Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/8ad9b3-0b9f-4224-909b-b43dbf895cfe/1/rwmHHP1haABnerIynsumHed3V-Y.mft
File: rwmHHP1haABnerIynsumHed3V-Y.mft (raw, json)
Hash identifier: lG2sTLXwXj/tLYle4tFOJ0mNrzqU8vOWuqgf5+9dd3k=
Subject key identifier: D2:CE:FA:41:E0:F1:8F:DA:3E:A0:72:61:BF:E8:1B:34:3C:BA:F7:1A
Authority key identifier: AF:09:87:1C:FD:61:68:00:67:7A:B2:32:9E:CB:A6:1D:E7:77:57:E6
Certificate issuer: /CN=af09871cfd616800677ab2329ecba61de77757e6
Certificate serial: 0197B74575EDCDCF1AECE905B5577C947D36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwmHHP1haABnerIynsumHed3V-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/8ad9b3-0b9f-4224-909b-b43dbf895cfe/1/rwmHHP1haABnerIynsumHed3V-Y.mft
Manifest number: 011D
Signing time: Sat 28 Jun 2025 16:01:12 +0000
Manifest this update: Sat 28 Jun 2025 16:01:12 +0000
Manifest next update: Sun 29 Jun 2025 16:01:12 +0000
Files and hashes: 1: _TdfyDspFjo8HcBVAH4tKaY1ryc.roa (hash: HRin1YqVyIdAgsGnpfqM25NMMm45zP4o3p+MrSb9sdE=)
2: rwmHHP1haABnerIynsumHed3V-Y.crl (hash: FReuT3LVz3N6Ybqi185XX/NFzFWfmahhEg7HeJ76eAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/8ad9b3-0b9f-4224-909b-b43dbf895cfe/1/rwmHHP1haABnerIynsumHed3V-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/8ad9b3-0b9f-4224-909b-b43dbf895cfe/1/rwmHHP1haABnerIynsumHed3V-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwmHHP1haABnerIynsumHed3V-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:75:ed:cd:cf:1a:ec:e9:05:b5:57:7c:94:7d:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af09871cfd616800677ab2329ecba61de77757e6
Validity
Not Before: Jun 28 16:01:12 2025 GMT
Not After : Jun 29 16:01:12 2025 GMT
Subject: CN=d2cefa41e0f18fda3ea07261bfe81b343cbaf71a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:89:a1:7b:72:ae:12:96:d0:2a:10:bf:a5:e1:
d0:d8:b9:d1:b5:f7:a6:42:63:f7:5e:17:5b:9a:19:
6c:d1:b4:67:78:a1:ef:d4:47:c5:f5:37:6b:4e:4b:
1f:cc:66:54:df:c5:66:0d:df:2d:0d:63:da:00:e4:
35:b3:98:30:3a:68:ea:ac:5b:8a:ba:af:90:e7:5c:
a0:a7:c7:f9:e3:91:5f:2a:d7:62:07:0d:66:45:3a:
a0:50:e9:55:07:d8:8e:ab:ce:4b:9e:87:e4:71:1d:
9b:41:b5:6f:b3:28:cb:1b:f9:a2:e7:64:be:61:88:
4c:aa:62:9b:40:31:41:64:03:a8:d8:3a:ef:b9:e9:
b3:77:c5:30:12:fe:56:92:5c:66:44:10:ad:b6:02:
58:05:45:73:d7:67:8e:c8:a0:27:21:0c:d0:0d:e1:
9a:88:13:05:d4:33:b7:3b:89:01:bc:74:ab:9f:0e:
47:a0:c8:8d:79:8a:94:7d:a0:90:96:51:8b:59:9a:
ac:d6:44:f8:93:e2:3b:2b:fa:7b:3d:17:c6:e1:ac:
61:da:26:e6:0c:81:af:ac:70:7d:7a:fd:a0:81:db:
a4:80:14:2c:e9:91:98:4a:87:2f:a0:28:d2:eb:11:
dd:79:b9:c5:00:fa:90:c3:1c:7e:e6:9c:65:56:10:
18:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:CE:FA:41:E0:F1:8F:DA:3E:A0:72:61:BF:E8:1B:34:3C:BA:F7:1A
X509v3 Authority Key Identifier:
keyid:AF:09:87:1C:FD:61:68:00:67:7A:B2:32:9E:CB:A6:1D:E7:77:57:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwmHHP1haABnerIynsumHed3V-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8ad9b3-0b9f-4224-909b-b43dbf895cfe/1/rwmHHP1haABnerIynsumHed3V-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8ad9b3-0b9f-4224-909b-b43dbf895cfe/1/rwmHHP1haABnerIynsumHed3V-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:10:af:55:61:8d:fa:07:c0:8b:f0:6c:d9:00:70:23:0d:a9:
ab:f8:61:47:c0:11:49:0d:ed:a6:6c:c6:cf:43:35:06:15:44:
77:5c:35:e2:6f:96:f8:8a:fa:f4:81:2b:8a:b6:d7:8b:34:12:
9e:3a:a9:5e:7c:ea:de:a5:a5:53:21:d0:af:dd:31:72:cf:24:
a6:ed:4d:95:35:37:2b:0f:8b:69:32:d7:a7:33:91:cb:bb:14:
57:3d:0c:0e:94:f0:ef:54:d1:ac:58:46:e5:ad:2d:23:28:9b:
3e:a5:5d:5c:50:1f:9a:18:f4:cf:e0:6f:f4:ce:a6:a7:6f:dd:
33:1b:3f:b2:87:e3:9d:96:06:0a:21:0d:78:a2:7c:90:87:10:
69:33:cc:f9:54:31:7c:f5:54:41:3e:ad:40:43:95:3c:66:b8:
5e:94:e4:4b:d3:8c:6e:8c:c0:71:02:92:82:51:17:be:a9:ba:
f9:fe:b0:2c:b0:37:64:f9:d7:06:cb:a6:fd:b7:95:77:67:ae:
13:9e:14:d1:2e:1e:03:80:a3:75:e8:95:33:fe:81:90:92:24:
82:52:29:9e:30:df:8b:ff:3b:1d:27:37:1a:fe:b9:98:54:3a:
cb:a3:7d:36:b7:6f:ed:b3:5a:b0:6f:5e:64:2d:0f:c9:36:e6:
7a:4f:f9:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:02:42 2025 by rpki-client