Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.mft
File: W7HFcFXCnWafKJqfaPOSgjlCEyo.mft (raw, json)
Hash identifier: w6e3kMQv3Zd/b7xJEYlJ63k5M5FpnLm3kohUl1YADe8=
Subject key identifier: AF:0E:17:C7:09:32:D8:89:62:2E:EA:9E:5D:62:5B:3E:45:92:C0:F4
Authority key identifier: 5B:B1:C5:70:55:C2:9D:66:9F:28:9A:9F:68:F3:92:82:39:42:13:2A
Certificate issuer: /CN=5bb1c57055c29d669f289a9f68f392823942132a
Certificate serial: 0197BA7ECB30FAE5921E1325FFBB0331D66B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W7HFcFXCnWafKJqfaPOSgjlCEyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.mft
Manifest number: 11C4
Signing time: Sun 29 Jun 2025 07:02:40 +0000
Manifest this update: Sun 29 Jun 2025 07:02:40 +0000
Manifest next update: Mon 30 Jun 2025 07:02:40 +0000
Files and hashes: 1: W7HFcFXCnWafKJqfaPOSgjlCEyo.crl (hash: 4ye4H+PqGg6bOaGySs4iaUPlc39RsLnTLTxE/AgMEFM=)
2: oLD0eFUFYxck4v3i6OymPCRtKqc.roa (hash: d9IQhkXi9el+adqbpk+yqo7QWqWaJxfrg/LT1tEGEMY=)
3: uB1fsTN5xt9prk3FmqA_vfOk3V8.roa (hash: Xbk+Y99PsH3Ea8NbCtaJ5KS35ZMdZP+5pz4Y3JKvU0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/W7HFcFXCnWafKJqfaPOSgjlCEyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7e:cb:30:fa:e5:92:1e:13:25:ff:bb:03:31:d6:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bb1c57055c29d669f289a9f68f392823942132a
Validity
Not Before: Jun 29 07:02:40 2025 GMT
Not After : Jun 30 07:02:40 2025 GMT
Subject: CN=af0e17c70932d889622eea9e5d625b3e4592c0f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a2:65:12:ac:96:87:98:99:ad:31:48:ad:51:
f2:cc:73:04:4d:ae:01:ad:0d:14:1d:21:f4:c4:5f:
4d:a3:73:9b:e8:e4:52:ee:00:a4:93:91:19:e4:85:
06:f9:d5:f1:f1:39:66:2e:16:af:4c:b1:2d:85:c6:
45:46:ed:4f:16:ba:f3:99:b9:d6:9d:84:e5:9f:a6:
8f:28:0d:e1:1e:53:11:ab:48:e3:e3:5e:44:a2:65:
cb:d2:8c:5d:5f:53:54:de:f1:e7:6f:79:6b:4f:f8:
75:0f:b4:2d:34:07:6f:77:67:12:98:d3:66:92:8e:
5b:d9:c3:f9:86:fd:da:63:26:aa:6f:a3:07:8b:29:
8e:2d:fa:31:1f:17:18:40:19:8a:56:e8:f1:c6:d8:
78:17:f8:75:ed:73:31:35:32:0c:a4:57:d0:ae:a0:
c8:28:f9:ba:95:69:f8:26:20:12:58:ae:55:a3:b2:
e7:b1:e4:34:fd:61:b5:88:59:a6:96:c1:b7:bd:ba:
5f:72:73:92:68:76:16:01:26:cc:ff:32:25:be:eb:
49:af:54:ea:2e:fb:a8:52:1f:27:f7:0c:90:99:19:
de:33:4f:7d:6b:01:53:16:6d:6c:de:91:60:63:24:
e0:fd:ab:03:3c:be:2f:73:09:76:94:fb:7c:ad:95:
12:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:0E:17:C7:09:32:D8:89:62:2E:EA:9E:5D:62:5B:3E:45:92:C0:F4
X509v3 Authority Key Identifier:
keyid:5B:B1:C5:70:55:C2:9D:66:9F:28:9A:9F:68:F3:92:82:39:42:13:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W7HFcFXCnWafKJqfaPOSgjlCEyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:48:94:17:c5:bc:ad:dd:e6:b8:50:80:32:eb:96:8f:90:ac:
19:da:99:21:21:b7:4e:93:d9:2a:06:10:fe:b3:55:e6:ab:38:
3c:21:fc:96:03:82:da:66:1a:3c:eb:06:9c:df:8a:72:0f:d7:
8e:6a:06:aa:46:9c:81:18:4f:47:73:95:0b:a2:0a:ea:ca:4c:
9f:78:6b:ca:e6:64:89:30:e3:23:23:8c:45:ce:a8:a0:14:8f:
95:cb:57:63:7d:aa:75:6f:e8:41:56:44:31:c8:92:0b:e3:17:
5d:5c:2f:35:33:2f:94:0e:56:fa:be:e5:56:5a:8a:90:c6:b5:
0d:f1:f6:76:7b:e1:cd:c2:ff:24:91:fb:82:37:06:a0:5f:8e:
d2:c9:62:e6:4d:6d:9e:61:e3:37:6b:30:95:7d:a6:ad:db:8f:
8b:ca:64:a4:ee:11:31:d9:12:1a:64:c7:c7:0e:b3:1d:50:c0:
a1:99:33:5c:b9:c4:7a:2f:41:bb:d5:e8:91:8e:ee:0e:79:2a:
34:8e:15:e0:90:bd:29:5d:07:4f:5e:84:7c:70:ac:b5:2e:4c:
38:e9:b5:f3:3a:44:6e:48:8d:44:ac:52:79:2d:72:f6:02:83:
60:cb:97:14:04:19:78:b3:63:4b:8a:6a:05:be:96:90:9d:f0:
0d:2b:c9:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:16:42 2025 by rpki-client