Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft
File: rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft (raw, json)
Hash identifier: RgycZtVRQnZ/cFlMhmJ7ir6wCTx5uIJliFzuZxTaIIA=
Subject key identifier: C1:B0:42:A6:2D:3F:FF:D4:37:2E:9C:BE:1E:AB:84:3E:1C:C6:38:6D
Authority key identifier: AF:03:68:16:A3:17:DD:99:D2:53:83:A3:2A:68:18:59:C0:47:B5:FF
Certificate issuer: /CN=af036816a317dd99d25383a32a681859c047b5ff
Certificate serial: 0197B77C6E4D7E52DF076D7F2353111931BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft
Manifest number: 1011
Signing time: Sat 28 Jun 2025 17:01:14 +0000
Manifest this update: Sat 28 Jun 2025 17:01:14 +0000
Manifest next update: Sun 29 Jun 2025 17:01:14 +0000
Files and hashes: 1: dv2-CubAEzDgm9-A6q6tebm8sb8.roa (hash: TsKOArcBjp/tutNspO+BZ3fNFViji2g9Yje5CxDDQXE=)
2: rwNoFqMX3ZnSU4OjKmgYWcBHtf8.crl (hash: eFqUXFgg8RPJY9s/fXW8OmS64rL/m7rAGx1NB9jmACs=)
3: uPmBIiMy_mwoAMwRr2tHb8mN_DQ.roa (hash: HueNCAsjAp0HpCdgeRDBaDeI3suLIq9xXvHT44od5wE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:6e:4d:7e:52:df:07:6d:7f:23:53:11:19:31:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af036816a317dd99d25383a32a681859c047b5ff
Validity
Not Before: Jun 28 17:01:14 2025 GMT
Not After : Jun 29 17:01:14 2025 GMT
Subject: CN=c1b042a62d3fffd4372e9cbe1eab843e1cc6386d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:07:14:f3:f1:fe:be:da:c6:99:01:2b:33:a4:
41:6c:80:81:7b:b9:a6:30:18:26:e8:f1:c5:c6:95:
ec:e5:39:a8:fb:b2:4a:3d:60:63:b4:6f:62:34:de:
cf:22:88:78:f8:ee:2d:60:dd:e8:41:e6:25:bc:02:
68:5f:cc:69:c4:51:83:ef:ed:e1:5e:76:55:32:7e:
9d:24:50:bb:54:c7:f5:1c:08:64:8f:dd:ad:1c:03:
7e:db:ff:82:4a:a5:ee:43:b1:17:9a:9b:f2:e2:84:
3c:94:b8:b7:08:0b:4c:98:66:52:dc:96:c9:ff:54:
b3:97:25:89:02:88:70:06:e0:d4:49:c1:58:53:8e:
0e:9c:c9:98:38:34:db:f8:24:e2:03:5b:c8:5b:4c:
08:ae:ba:b4:3e:24:1a:8a:5b:18:cc:d3:52:d5:62:
c5:66:75:c0:d4:46:15:a4:41:c6:36:97:5b:86:0d:
0a:64:99:88:33:64:5c:4f:ae:ba:18:cc:f5:4c:38:
00:1d:d1:0d:7f:8d:c8:aa:d5:07:73:ff:95:11:f2:
71:73:e9:fa:44:fa:42:51:cd:0e:29:3f:95:20:de:
ad:38:61:cd:a5:dd:8a:f1:27:51:0b:cc:78:35:44:
bf:ca:c3:e4:18:64:68:60:b1:ff:e9:0d:95:c6:03:
8f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:B0:42:A6:2D:3F:FF:D4:37:2E:9C:BE:1E:AB:84:3E:1C:C6:38:6D
X509v3 Authority Key Identifier:
keyid:AF:03:68:16:A3:17:DD:99:D2:53:83:A3:2A:68:18:59:C0:47:B5:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:9e:a5:7a:23:9f:85:a0:df:c5:34:0d:25:1e:0b:84:71:47:
39:1d:fd:e0:fc:3b:c4:49:f9:60:ef:3d:14:0e:e6:fd:9e:9e:
6b:f9:74:96:3b:a7:cd:8f:e8:ab:06:0a:9c:cc:cd:b0:f8:f8:
f0:a5:d0:80:2d:cb:ac:27:f6:f5:b2:88:8f:4a:ae:dc:1f:6e:
06:ab:94:60:c6:ce:bc:04:85:21:96:85:b3:41:d6:37:4f:e6:
6f:49:d5:9b:9f:c8:35:69:da:e1:3c:b8:63:6b:7c:5d:b6:42:
1c:2e:db:b8:fc:db:22:93:c2:92:6a:d3:24:82:72:d5:72:59:
5f:f8:75:13:70:67:35:70:62:b2:36:a2:80:58:dd:de:d1:4d:
10:50:ab:c8:20:54:b7:28:16:79:35:c6:e0:fc:60:03:f0:ff:
1e:a1:43:ed:ce:b2:97:8c:52:6f:57:e0:61:70:73:02:a1:d1:
d3:36:8e:a5:75:40:cd:e0:bb:b6:01:7c:3f:4a:2c:4c:9c:bb:
a9:01:b9:57:55:9a:1f:e8:6b:e1:12:99:0e:00:84:78:22:67:
45:0d:d4:2a:3c:cd:24:99:ec:7a:1a:a0:70:3b:4b:68:53:97:
be:f9:23:cb:08:7e:08:df:69:2b:ad:ec:ef:81:ea:aa:ad:b7:
52:8c:17:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:15:28 2025 by rpki-client