Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.mft
File: 1-WDHqzxLzD_Kg-STMWd7RLt6lG8.mft (raw, json)
Hash identifier: yZT03ouGkROEh/NUXNlKmos8Phq/p0GT1DXgwCYuYm0=
Subject key identifier: 8A:1F:89:AA:9C:B8:BF:A3:C5:A3:95:7B:84:7D:A9:84:FD:0B:79:37
Authority key identifier: F9:60:C7:AB:3C:4B:CC:3F:CA:83:E4:93:31:67:7B:44:BB:7A:94:6F
Certificate issuer: /CN=f960c7ab3c4bcc3fca83e49331677b44bb7a946f
Certificate serial: 0197B7B321FBC7B5C1671B01319715695D9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.mft
Manifest number: C3
Signing time: Sat 28 Jun 2025 18:00:59 +0000
Manifest this update: Sat 28 Jun 2025 18:00:59 +0000
Manifest next update: Sun 29 Jun 2025 18:00:59 +0000
Files and hashes: 1: 1-WDHqzxLzD_Kg-STMWd7RLt6lG8.crl (hash: Jyf+3ZAvjz+c+I+HKS/7UmWi5bkNnPVnRglJYfYgOnY=)
2: 42HdpJSIuZQYNL_T503F7T6tVtg.roa (hash: 2oMCOR0uoZknejKNMlu0g0SgSeLr17Imm1o0mXmKjiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:21:fb:c7:b5:c1:67:1b:01:31:97:15:69:5d:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f960c7ab3c4bcc3fca83e49331677b44bb7a946f
Validity
Not Before: Jun 28 18:00:59 2025 GMT
Not After : Jun 29 18:00:59 2025 GMT
Subject: CN=8a1f89aa9cb8bfa3c5a3957b847da984fd0b7937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1d:4e:80:4c:6c:18:bb:6a:27:cd:c3:46:21:
8c:21:9d:e2:71:f0:b4:51:4a:df:6e:1e:f4:de:90:
71:76:b2:b1:84:45:4f:65:c7:6c:43:69:3b:01:d1:
29:b0:cb:f4:d8:c4:fa:d0:b0:bc:c3:18:53:6d:00:
0a:ea:7e:0c:4f:b0:36:31:1c:7e:27:e0:16:45:eb:
77:29:a2:4b:b6:fa:1d:6b:34:13:d4:7d:80:07:4f:
81:4a:d5:06:92:43:ff:8f:d8:39:39:38:f4:20:23:
10:12:9d:30:cd:e9:26:b2:11:f1:26:a6:7a:97:a6:
86:81:c3:6f:7a:37:cf:a8:2d:4b:ff:bb:d2:a0:58:
85:72:26:56:14:85:36:05:ba:f2:b9:80:83:34:5a:
b5:ac:0d:74:81:7f:fb:80:76:8a:96:99:eb:80:bc:
28:19:93:a6:47:90:6a:28:97:e3:7e:eb:14:49:9c:
c8:f1:1c:60:35:0e:7d:78:34:1a:cd:ed:10:7b:25:
40:bb:b9:1f:df:e7:85:0e:20:8f:91:4a:18:6b:40:
98:ec:13:d4:15:e0:0c:ef:78:6a:1f:04:d6:42:a8:
57:a4:e2:dc:53:e1:df:81:9c:52:68:ef:dc:3c:72:
06:35:66:f1:f4:a6:5f:b8:4b:ba:32:5e:9b:83:8d:
56:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:1F:89:AA:9C:B8:BF:A3:C5:A3:95:7B:84:7D:A9:84:FD:0B:79:37
X509v3 Authority Key Identifier:
keyid:F9:60:C7:AB:3C:4B:CC:3F:CA:83:E4:93:31:67:7B:44:BB:7A:94:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:63:b8:b7:9f:f3:bc:f8:1d:48:a7:12:30:d1:7c:c1:7b:5f:
f9:92:31:5c:2d:ea:76:80:e4:de:d5:cc:68:5c:ea:47:0a:12:
6a:2b:18:9d:11:b1:aa:f2:76:2f:8a:ca:fe:8c:19:60:7d:d7:
d0:03:22:b9:3d:2f:ee:8d:ef:68:a1:29:70:b8:f6:bf:fc:9f:
5f:91:b8:1e:9d:72:31:0a:fa:95:cd:e5:dd:39:a0:46:7f:f3:
2c:0c:8d:a8:b8:5c:0a:e8:7d:6c:cb:c7:5a:65:e8:99:af:56:
6d:a3:f2:5b:d4:c8:a8:46:96:97:51:91:1f:8d:97:3c:ae:ec:
e5:4e:9c:eb:84:a5:40:d2:76:34:66:5f:58:2c:d4:04:38:4c:
59:ab:50:5e:5e:2b:7a:c1:3c:52:91:c4:86:1e:a6:75:71:a5:
19:15:4a:13:e8:fb:5d:06:00:4e:b5:d3:69:7e:3c:39:ba:3b:
de:7d:4b:6f:d9:a0:de:d0:cd:39:b4:bf:4a:c7:4b:5e:36:50:
52:c1:ea:fd:d4:41:60:d8:2b:18:53:70:eb:ac:87:47:5a:90:
64:ae:b7:96:3d:01:35:54:59:f4:99:0d:04:85:f5:dd:ac:24:
ab:5a:26:02:99:4c:49:06:a4:ba:d1:79:35:df:22:1e:94:14:
d2:d8:95:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:03:11 2025 by rpki-client