Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft
File: we7iyrhrXuQPwncMqMtcUMYrdVs.mft (raw, json)
Hash identifier: LLKvlu6sqgd6om2ihDQ5aCn8HumPi93ASigr990pmJY=
Subject key identifier: 4F:68:6A:B5:84:F9:CE:3A:16:F1:16:A0:5E:81:81:D5:41:AA:80:4B
Authority key identifier: C1:EE:E2:CA:B8:6B:5E:E4:0F:C2:77:0C:A8:CB:5C:50:C6:2B:75:5B
Certificate issuer: /CN=c1eee2cab86b5ee40fc2770ca8cb5c50c62b755b
Certificate serial: 0197B8C5A8837B22A8E49529145AE42E21C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/we7iyrhrXuQPwncMqMtcUMYrdVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft
Manifest number: 1230
Signing time: Sat 28 Jun 2025 23:00:50 +0000
Manifest this update: Sat 28 Jun 2025 23:00:50 +0000
Manifest next update: Sun 29 Jun 2025 23:00:50 +0000
Files and hashes: 1: C82fBmTW8-iwXu5pgvR1VTX1CPI.roa (hash: VxKUMucn3gu4aXap48afqVYi1a/XU7LxwPuTbOudfsE=)
2: we7iyrhrXuQPwncMqMtcUMYrdVs.crl (hash: 47HiEosX6mSitTQp91APvMn4Jcq+6PN1BhSC4b9et9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/we7iyrhrXuQPwncMqMtcUMYrdVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c5:a8:83:7b:22:a8:e4:95:29:14:5a:e4:2e:21:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1eee2cab86b5ee40fc2770ca8cb5c50c62b755b
Validity
Not Before: Jun 28 23:00:50 2025 GMT
Not After : Jun 29 23:00:50 2025 GMT
Subject: CN=4f686ab584f9ce3a16f116a05e8181d541aa804b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4b:35:ce:52:ce:e7:f9:b8:8b:8f:97:f8:67:
35:36:ac:a9:ce:fa:c3:38:69:be:08:c8:01:2e:ee:
7b:f2:68:d6:de:40:86:8d:8d:54:29:3c:10:e3:ff:
74:3d:b2:3b:d5:ee:0f:1a:c3:22:24:00:d6:19:37:
59:2e:09:f8:10:80:2d:8a:b4:57:c7:41:d5:ce:29:
34:97:13:93:af:a4:b8:c8:33:81:12:b4:b7:93:04:
6c:a5:cb:15:86:a9:b4:92:2a:dc:52:1d:5d:0d:7a:
6e:f0:0c:ce:dc:f0:24:3c:ea:8f:13:61:1f:a0:7a:
3d:94:e4:8e:3f:dc:31:d2:76:eb:65:27:02:a8:11:
35:28:e8:e5:c0:fc:4d:5b:6a:8f:96:bd:c3:57:15:
47:da:e8:6f:58:81:55:00:22:0d:6b:e7:30:47:bc:
01:e7:98:33:9d:1e:70:30:4b:57:9c:0b:6e:ee:11:
da:d3:68:34:8d:b6:cc:b8:8b:a4:7e:e3:cf:00:ab:
db:ea:56:ce:c4:47:aa:e2:4c:1c:37:8c:9b:26:15:
6b:42:ad:9e:e5:13:51:da:41:d6:25:c3:62:be:77:
18:fd:c4:a0:c6:6a:6d:36:0b:27:13:a7:45:e5:54:
de:69:82:5a:06:9f:8b:6b:74:8d:c7:b2:e5:cf:ef:
7c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:68:6A:B5:84:F9:CE:3A:16:F1:16:A0:5E:81:81:D5:41:AA:80:4B
X509v3 Authority Key Identifier:
keyid:C1:EE:E2:CA:B8:6B:5E:E4:0F:C2:77:0C:A8:CB:5C:50:C6:2B:75:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/we7iyrhrXuQPwncMqMtcUMYrdVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:bd:d6:4a:32:74:e4:b8:8e:52:04:66:a6:26:4d:21:07:c2:
12:16:3b:c5:3e:0c:2a:ba:ac:7d:ff:e2:36:b1:b8:81:53:a9:
21:66:74:fc:82:ea:91:ff:20:e7:50:1a:b3:cc:15:c0:22:33:
9e:41:be:12:30:9a:cb:91:aa:26:2e:35:82:ef:73:cc:f2:10:
2f:68:d6:f8:4c:4e:11:d1:61:6b:c7:dd:4c:01:70:20:ed:50:
43:e8:89:89:c3:ff:ee:45:d4:2d:cd:12:5f:33:c1:10:7c:f2:
e1:c5:f9:73:95:3c:f4:ad:7f:71:b3:b0:99:91:82:e0:33:21:
25:64:85:b4:66:a3:c0:fe:f8:c6:02:14:e4:9f:76:c6:d6:2d:
dd:9b:0a:e8:1a:d0:57:02:dd:28:f8:9b:6a:8e:5e:de:eb:ac:
6b:93:ea:7c:43:85:4f:99:7b:61:1a:f7:af:56:31:38:e3:8e:
f7:8d:da:57:9c:55:85:fb:5e:1a:25:fc:db:ca:ad:e9:25:6e:
c5:e5:47:37:5e:93:34:26:3e:a7:03:a1:bf:3d:0c:77:b5:ce:
9f:4a:82:d1:e6:3d:c8:d2:af:95:66:a8:38:d6:1a:a0:57:f1:
51:31:47:48:33:ab:5a:3a:0c:35:24:79:e8:cd:4d:64:a2:bf:
b9:06:dd:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:27:38 2025 by rpki-client