Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.mft
File: CjMvWtwEaVM7vdz86JV-ruWL_WA.mft (raw, json)
Hash identifier: xF8RKxuRrrrfu9YWN84dHWPc5OJ3hQWwr5wfNbkgvHE=
Subject key identifier: 91:7D:A5:56:4D:16:B0:D0:42:4A:04:E5:8F:0C:F4:43:B8:27:CF:F4
Authority key identifier: 0A:33:2F:5A:DC:04:69:53:3B:BD:DC:FC:E8:95:7E:AE:E5:8B:FD:60
Certificate issuer: /CN=0a332f5adc0469533bbddcfce8957eaee58bfd60
Certificate serial: 0197B77C028F9F84190F65916DE46CF01E1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjMvWtwEaVM7vdz86JV-ruWL_WA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.mft
Manifest number: 15BA
Signing time: Sat 28 Jun 2025 17:00:46 +0000
Manifest this update: Sat 28 Jun 2025 17:00:46 +0000
Manifest next update: Sun 29 Jun 2025 17:00:46 +0000
Files and hashes: 1: CjMvWtwEaVM7vdz86JV-ruWL_WA.crl (hash: Tb90zqpIoO7ae/sGaxFPIFF3jBEV661pFbgSJs18Ddg=)
2: GONoBaS0nACGnEjc-yHuqDoDlew.roa (hash: eVcWG363H9IPwj/aWLR4h7Mq2fdRg0ul16LrmgLPOaU=)
3: kSa4_sqr5-NiqBRmmF4fkyu-chg.roa (hash: nw6nn6yk21XAzxXJuVEoChD6KrMH42rDNZdSGxHsW0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CjMvWtwEaVM7vdz86JV-ruWL_WA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:02:8f:9f:84:19:0f:65:91:6d:e4:6c:f0:1e:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a332f5adc0469533bbddcfce8957eaee58bfd60
Validity
Not Before: Jun 28 17:00:46 2025 GMT
Not After : Jun 29 17:00:46 2025 GMT
Subject: CN=917da5564d16b0d0424a04e58f0cf443b827cff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5a:dd:66:9d:b1:2f:3d:33:c1:0f:09:8f:45:
36:73:d8:a8:2c:52:90:af:cc:25:ae:51:c4:3f:ae:
c0:7b:83:52:e0:d2:2a:61:d7:b1:d4:99:9c:7e:98:
bd:e2:c2:4a:02:ad:0e:34:e7:10:9e:04:a3:5d:52:
46:08:3e:8b:44:18:d8:61:72:0b:ee:a3:2e:29:5d:
a4:b1:f6:2c:d0:1b:c9:66:28:a8:9c:f3:d5:e0:90:
39:71:bf:e8:53:b6:2d:5d:67:4a:bd:f7:a7:a1:60:
0a:11:40:58:0d:7c:a6:fa:a1:52:e1:fe:c6:ca:39:
cd:38:24:dd:21:15:00:a0:63:0b:ca:20:8d:17:5f:
82:43:42:ac:e8:1c:84:1a:bd:aa:20:c7:8c:f2:b9:
83:5a:87:1d:f6:2f:95:77:9f:6d:e3:4d:88:27:4f:
d9:61:be:5f:f7:18:fa:30:17:57:e8:45:d4:7c:58:
ab:16:53:54:7e:b5:2a:fe:ae:b6:41:dd:94:24:16:
e0:84:6d:18:4a:af:37:da:18:db:89:97:1d:88:2d:
cc:32:c3:39:b2:26:06:13:4e:cf:d0:7d:d6:6a:8f:
7f:1d:6c:96:2f:60:ab:4e:f5:cd:d2:68:c3:9f:58:
84:d4:fe:a1:a5:89:45:b3:cf:de:9c:d1:82:90:d1:
95:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:7D:A5:56:4D:16:B0:D0:42:4A:04:E5:8F:0C:F4:43:B8:27:CF:F4
X509v3 Authority Key Identifier:
keyid:0A:33:2F:5A:DC:04:69:53:3B:BD:DC:FC:E8:95:7E:AE:E5:8B:FD:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjMvWtwEaVM7vdz86JV-ruWL_WA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:3f:ec:41:b4:55:c6:c1:9c:2d:0c:93:61:a6:b6:d1:bb:0f:
e3:b7:f5:b9:90:2a:d7:7f:91:ab:4b:90:ed:70:da:36:36:27:
43:d4:45:fc:4f:84:7d:33:33:b5:68:7e:85:12:ac:53:f4:ec:
7f:28:c1:3a:16:d3:d1:29:75:90:60:b6:06:58:fa:8f:58:fc:
13:a3:08:00:7d:54:d2:40:c0:2a:92:ba:25:2e:25:83:40:cd:
72:1e:55:8a:fd:e3:ef:0e:48:9b:37:d5:c3:67:9c:3a:7f:f2:
9b:f9:3c:5e:a0:65:b2:99:73:72:a3:99:18:31:3d:e7:b9:41:
b8:af:f5:1e:9d:d2:9d:78:2e:c5:86:7c:48:ca:2c:8f:08:2b:
a1:f3:22:db:61:46:be:7b:7e:d4:24:9f:9b:70:93:01:54:45:
2c:a1:36:69:f2:d7:f6:58:bc:64:1d:d7:19:62:9b:77:51:22:
5b:24:c1:85:4e:47:e1:76:3a:5a:7b:9a:17:e8:0f:7e:f9:4a:
a6:04:01:1f:9f:0e:66:11:80:1a:1b:86:a4:6a:54:04:1d:98:
4c:43:53:2b:73:d5:52:6b:6c:3f:b7:99:f5:9f:98:d3:84:e1:
cd:31:7d:8d:33:ff:f7:e4:0a:04:61:47:d6:56:69:70:55:68:
75:05:1b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:47:44 2025 by rpki-client