Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/W_W9pYNlLgWH_vhBZrQfbNqPH3g.mft
File: W_W9pYNlLgWH_vhBZrQfbNqPH3g.mft (raw, json)
Hash identifier: FdWoyv2qg0g6t7gYoy+CjL56sdedE9uqPw4DJsXlTNo=
Subject key identifier: 3A:AA:32:67:61:91:EA:B5:92:D9:24:66:CF:69:3B:27:EC:7F:E9:26
Authority key identifier: 5B:F5:BD:A5:83:65:2E:05:87:FE:F8:41:66:B4:1F:6C:DA:8F:1F:78
Certificate issuer: /CN=5bf5bda583652e0587fef84166b41f6cda8f1f78
Certificate serial: 0197B7EA766A3CB3CEAF5CCFDE1E262526EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W_W9pYNlLgWH_vhBZrQfbNqPH3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/W_W9pYNlLgWH_vhBZrQfbNqPH3g.mft
Manifest number: 0360
Signing time: Sat 28 Jun 2025 19:01:25 +0000
Manifest this update: Sat 28 Jun 2025 19:01:25 +0000
Manifest next update: Sun 29 Jun 2025 19:01:25 +0000
Files and hashes: 1: D11OUUhDT5UjGqOO2sYVKlSZfd0.roa (hash: 1HSM7rlxpcn34ZRTxOgco4d9oki6ca3htijNuPzC2SI=)
2: W_W9pYNlLgWH_vhBZrQfbNqPH3g.crl (hash: foL0paNNBZ9zS1wwSiWodFzkwmRpTkNt48cBt648NUc=)
3: sscr1AKks234H4_aH9W5QOyjBo0.roa (hash: QpgjlQcIAUxRiyA26HjeU1kRMWG1ZaRrrHu8xWpWD0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/W_W9pYNlLgWH_vhBZrQfbNqPH3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/W_W9pYNlLgWH_vhBZrQfbNqPH3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/W_W9pYNlLgWH_vhBZrQfbNqPH3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:76:6a:3c:b3:ce:af:5c:cf:de:1e:26:25:26:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bf5bda583652e0587fef84166b41f6cda8f1f78
Validity
Not Before: Jun 28 19:01:25 2025 GMT
Not After : Jun 29 19:01:25 2025 GMT
Subject: CN=3aaa32676191eab592d92466cf693b27ec7fe926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:12:d7:be:84:08:a1:ce:1b:a9:4e:0f:04:e5:
2b:29:65:3a:12:94:23:85:8c:84:51:0e:88:bb:53:
bc:56:d8:f9:bd:95:f8:91:5a:7c:ae:3e:5d:ab:14:
8b:93:2b:ce:fa:16:0c:82:4b:a2:d1:04:a1:59:51:
06:52:39:97:b0:21:cc:cc:6a:c4:ee:1f:8a:51:0c:
f7:2f:c9:23:2b:ee:29:6e:03:91:0f:21:90:40:5e:
f6:81:4c:5e:68:2a:a3:68:a0:62:e0:41:c0:f2:c6:
46:75:8e:80:7e:ea:b8:32:b2:74:60:93:7c:29:4d:
5e:f4:69:a8:85:08:74:5f:d0:fe:90:30:82:81:cc:
01:02:f1:39:f6:dc:86:e2:77:97:fd:eb:ac:c4:93:
48:38:0a:25:80:93:b4:4d:cd:a8:5f:06:2f:03:24:
16:2b:be:f8:63:81:f2:0c:b6:56:0f:4b:eb:f1:2a:
25:17:14:3c:cf:83:de:e6:23:ad:0f:20:31:6e:a3:
3d:da:82:c4:ce:7d:6b:37:b0:3a:5e:4d:59:ed:35:
6f:07:86:0c:76:18:b1:06:12:17:1d:62:d5:87:40:
26:f6:98:df:c1:0a:2d:38:ad:41:1d:44:72:21:cf:
d8:c4:89:6d:0c:b9:45:ef:e5:7b:e2:3a:1b:de:75:
5c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:AA:32:67:61:91:EA:B5:92:D9:24:66:CF:69:3B:27:EC:7F:E9:26
X509v3 Authority Key Identifier:
keyid:5B:F5:BD:A5:83:65:2E:05:87:FE:F8:41:66:B4:1F:6C:DA:8F:1F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W_W9pYNlLgWH_vhBZrQfbNqPH3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/W_W9pYNlLgWH_vhBZrQfbNqPH3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/W_W9pYNlLgWH_vhBZrQfbNqPH3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:0a:e6:f5:87:78:25:f7:1a:bd:b9:0f:e3:79:85:06:30:78:
fb:c0:41:8d:e9:db:39:0e:42:47:a1:b0:0e:9e:b4:19:93:4c:
e6:9f:56:94:a2:3e:76:a0:d6:b5:92:51:33:bc:67:d7:05:b0:
92:45:ce:8c:c3:09:38:84:90:0d:06:29:cf:c7:45:d4:1e:5a:
d8:74:00:00:ac:e7:3d:c7:1d:a4:96:51:25:11:89:95:3a:26:
a7:5f:68:dc:f1:92:6b:5d:ed:65:c8:9a:54:56:2c:99:43:5b:
b2:26:ee:11:69:eb:be:4b:24:92:de:3a:4f:94:e3:9d:cf:66:
c4:0c:14:73:16:72:41:0a:cd:93:66:42:93:1e:0c:53:06:99:
b1:e9:4b:47:63:c2:42:77:18:71:05:b4:c0:32:cc:91:df:10:
c1:91:48:05:25:7e:c5:c1:7f:84:c7:e4:42:9c:eb:d9:19:a5:
c7:49:a7:84:da:06:14:36:da:50:77:80:b3:44:fc:7e:47:3e:
8a:d9:3b:5e:fb:1a:d9:d4:52:e2:01:df:68:e7:16:0c:7c:40:
44:ce:2a:b3:d9:01:87:b4:50:0d:83:a2:f4:3c:82:9e:cb:64:
f1:06:0c:ca:33:1e:f4:29:bf:46:5d:68:cd:cf:26:79:2b:0a:
a4:41:ac:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:31:24 2025 by rpki-client