Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/W2-maQmXQS5xZhbIHk98CHX_2XY.mft
File: W2-maQmXQS5xZhbIHk98CHX_2XY.mft (raw, json)
Hash identifier: icVMKGGYvcWUvXzy0/6WP2eA9swiMttPYpkVFP2y3OY=
Subject key identifier: 12:9C:9A:6D:B1:EF:06:9D:F9:8A:1C:AC:A2:A7:03:5B:1E:28:8B:B8
Authority key identifier: 5B:6F:A6:69:09:97:41:2E:71:66:16:C8:1E:4F:7C:08:75:FF:D9:76
Certificate issuer: /CN=5b6fa6690997412e716616c81e4f7c0875ffd976
Certificate serial: 0197B6A21E5C11C2F420FF7E40A546F3BB12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2-maQmXQS5xZhbIHk98CHX_2XY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/W2-maQmXQS5xZhbIHk98CHX_2XY.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 13:02:47 +0000
Manifest this update: Sat 28 Jun 2025 13:02:47 +0000
Manifest next update: Sun 29 Jun 2025 13:02:47 +0000
Files and hashes: 1: W2-maQmXQS5xZhbIHk98CHX_2XY.crl (hash: WsZyoYngEI9hrPIA8/U9+XKq0/9ni6w8GCetjSmr7UU=)
2: XBhVypX2lGM6_x0NsP1fksWNFzA.roa (hash: Zaq2cSOdsGQcDop6nFC8bWSLTheqL3BkExxlTIu5yQY=)
3: Xgr5P1UaBLoKB0nFSdLdMnYEAcA.roa (hash: xFI+ynIKk4Nft8+Xpcr+WB8ws9nItuL+8WRyzYu3/Do=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/W2-maQmXQS5xZhbIHk98CHX_2XY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/W2-maQmXQS5xZhbIHk98CHX_2XY.mft
rsync://rpki.ripe.net/repository/DEFAULT/W2-maQmXQS5xZhbIHk98CHX_2XY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:1e:5c:11:c2:f4:20:ff:7e:40:a5:46:f3:bb:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b6fa6690997412e716616c81e4f7c0875ffd976
Validity
Not Before: Jun 28 13:02:47 2025 GMT
Not After : Jun 29 13:02:47 2025 GMT
Subject: CN=129c9a6db1ef069df98a1caca2a7035b1e288bb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:17:bb:0e:ce:64:2e:67:fc:e8:9e:48:f5:60:
a3:49:f9:7e:eb:03:d2:82:fd:24:b9:1b:f0:51:79:
6a:96:0e:0f:c2:f6:71:e6:3f:6b:f4:b2:67:05:f4:
9c:59:a5:7a:6b:99:e4:c5:8d:4b:5b:57:83:e6:d1:
7e:30:4f:42:44:56:6d:a7:cb:51:d8:a5:77:6e:bd:
62:5d:9b:bf:b4:3f:15:dc:29:1e:f3:25:b1:7b:af:
8a:a5:b1:54:dc:69:b2:bb:ce:9b:66:e5:05:c1:2e:
20:dd:44:4a:7c:b9:aa:81:c4:56:98:c9:75:23:ff:
e7:3a:11:47:9a:11:04:68:ce:c7:ad:e4:c7:f7:91:
1a:80:17:13:95:6b:3e:dd:8f:cf:b4:22:b1:d8:23:
ac:72:60:51:d0:fe:04:62:b2:5a:7e:83:0a:bd:d1:
98:22:9b:e9:1d:bf:f4:4a:ad:4b:61:42:f2:27:87:
36:ac:81:57:02:6c:93:62:ac:03:ff:78:4e:13:65:
b4:0a:47:73:2a:6d:4d:ee:f9:93:22:65:48:0f:08:
fb:36:2b:2b:ab:c6:e7:e0:3d:27:68:1b:99:bf:f3:
a3:9a:8a:e1:3c:fb:7d:89:fc:99:e6:e5:a0:53:ba:
93:cc:03:7a:8a:39:e2:11:5e:c5:3a:f6:fd:6d:e9:
c7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:9C:9A:6D:B1:EF:06:9D:F9:8A:1C:AC:A2:A7:03:5B:1E:28:8B:B8
X509v3 Authority Key Identifier:
keyid:5B:6F:A6:69:09:97:41:2E:71:66:16:C8:1E:4F:7C:08:75:FF:D9:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2-maQmXQS5xZhbIHk98CHX_2XY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/W2-maQmXQS5xZhbIHk98CHX_2XY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/W2-maQmXQS5xZhbIHk98CHX_2XY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:72:41:12:f1:7b:04:66:fa:6d:45:96:3b:5b:f7:31:59:2a:
a8:1c:3c:ed:7e:82:68:cf:20:0b:e6:fd:e2:ec:fc:70:3a:67:
73:f6:93:eb:26:a6:32:17:01:bc:f2:ae:b1:1d:43:b3:83:23:
91:2d:7e:88:f1:52:14:d6:ca:ce:cd:6e:ed:cc:d1:0e:8d:c8:
d9:c5:1e:19:69:94:bc:72:c4:4a:a8:98:48:ad:18:7f:76:74:
8e:da:eb:8f:35:21:05:0f:bf:c0:10:89:f7:ea:d0:5f:51:16:
b4:96:60:2c:cf:85:ee:f5:80:b2:8f:e9:5f:8e:bc:f8:e1:c1:
92:97:cb:5e:01:e5:ac:bb:a9:99:f1:82:2d:89:c6:80:8e:e9:
76:f2:f2:cb:c8:22:13:4f:dc:f5:7b:ed:ae:7f:fe:a8:ba:11:
e1:5d:59:78:85:3d:57:f7:4a:a4:04:d9:95:d7:4c:a2:1b:f5:
1f:24:8f:0b:c1:5f:4e:a9:bf:e4:7e:bf:9d:61:08:14:3c:03:
ef:48:cf:f2:7f:27:39:41:08:9d:75:ff:7c:a1:2f:52:9a:4d:
93:64:6e:87:bd:a2:d9:ef:c2:a1:b1:d2:3b:de:4c:20:f8:5e:
4f:2d:1d:cb:5f:4b:c1:f1:45:6f:21:57:39:93:c3:08:99:d7:
8c:58:be:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:55:50 2025 by rpki-client