Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.mft
File: w5VnlKe5iREVrTr5RXPnlhsWS6w.mft (raw, json)
Hash identifier: HYVl+ew2vEAN6R9tRhl4GNSn5Ca3W0UJEpty6aloNv4=
Subject key identifier: 0C:01:A0:80:E7:B3:63:C4:5A:97:A4:E6:A6:45:FE:DD:CD:11:A0:B6
Authority key identifier: C3:95:67:94:A7:B9:89:11:15:AD:3A:F9:45:73:E7:96:1B:16:4B:AC
Certificate issuer: /CN=c3956794a7b9891115ad3af94573e7961b164bac
Certificate serial: 0197B88EEC1503BC1F1B7F33F92256825091
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5VnlKe5iREVrTr5RXPnlhsWS6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.mft
Manifest number: 09A7
Signing time: Sat 28 Jun 2025 22:01:03 +0000
Manifest this update: Sat 28 Jun 2025 22:01:03 +0000
Manifest next update: Sun 29 Jun 2025 22:01:03 +0000
Files and hashes: 1: Peoo9gs9EBNgjwn3QmaIgoVdA2I.roa (hash: o5UcaRmySAHefVpyYqfIuBk+qGysWoCNDWxnf1QQroQ=)
2: w5VnlKe5iREVrTr5RXPnlhsWS6w.crl (hash: yi7gS/6KE7mMot8Ag6cRpSbPQ0O3zHtag9KrqBzGxoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/w5VnlKe5iREVrTr5RXPnlhsWS6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:ec:15:03:bc:1f:1b:7f:33:f9:22:56:82:50:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3956794a7b9891115ad3af94573e7961b164bac
Validity
Not Before: Jun 28 22:01:03 2025 GMT
Not After : Jun 29 22:01:03 2025 GMT
Subject: CN=0c01a080e7b363c45a97a4e6a645feddcd11a0b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ec:d9:74:21:55:13:91:9a:f5:c4:fd:58:e3:
8c:10:51:45:d0:d8:21:69:67:c1:c2:7b:e8:ed:b2:
16:49:81:3c:8e:4f:76:a1:99:dc:b9:90:9b:98:85:
39:2b:57:6e:30:ed:60:37:2d:38:9b:e9:35:07:c7:
ba:8d:f2:a0:54:6b:24:aa:45:e1:9a:d2:87:ff:cf:
29:fa:ce:e3:74:5c:35:75:e4:17:cc:76:f0:67:ee:
8f:b6:c8:79:8f:33:b3:91:f3:66:de:74:0a:34:15:
38:53:72:27:ce:4b:a7:1a:17:99:5d:86:d5:0d:b8:
56:29:d2:64:ef:2e:7d:8a:8f:17:d5:43:0e:4f:f1:
51:3d:49:ae:2d:c6:a5:8e:ad:05:b9:9c:22:24:96:
6a:f2:08:7d:57:07:32:04:b2:ce:0f:60:0c:1e:a0:
3a:a7:cd:20:03:03:b3:c6:37:d4:2f:e8:c8:92:d7:
b8:9a:d2:2b:d7:7c:f1:1d:46:53:92:1e:e4:28:9b:
e8:b5:08:88:df:5b:8b:37:fc:f7:7a:b9:f8:75:53:
52:a9:d6:11:5b:28:72:ad:e5:3d:72:be:6f:f3:2f:
06:fa:b3:49:5f:35:00:59:72:a1:07:3a:ac:1b:de:
ab:35:fa:c8:f6:14:8e:7b:e1:c3:21:d5:73:54:46:
3e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:01:A0:80:E7:B3:63:C4:5A:97:A4:E6:A6:45:FE:DD:CD:11:A0:B6
X509v3 Authority Key Identifier:
keyid:C3:95:67:94:A7:B9:89:11:15:AD:3A:F9:45:73:E7:96:1B:16:4B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5VnlKe5iREVrTr5RXPnlhsWS6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:2e:9a:a5:6c:27:52:5a:de:a5:6b:0d:e2:25:4f:b3:19:91:
71:0d:08:f6:5f:d2:66:21:6e:06:bb:81:08:19:ea:1b:26:88:
03:b5:4d:68:e3:b5:ec:f7:bc:8f:34:71:8d:50:d2:d6:dc:d2:
3b:a7:e4:a8:40:fc:1c:35:69:c0:7c:9b:cb:9a:c7:1f:68:3d:
ed:7c:ce:85:59:56:b2:c6:b9:35:56:1c:5f:98:48:90:ce:df:
6a:d1:b2:94:94:11:24:4f:88:b4:8b:8a:d0:32:02:f0:f0:7e:
c2:cd:b0:4c:b6:b4:c2:9f:7b:4c:85:5a:33:d9:9f:8e:39:c0:
1c:5a:2e:a2:e0:78:2b:df:54:4f:92:12:ab:a9:84:28:5f:21:
d3:df:6e:13:3c:64:f4:2d:f0:6f:f4:5a:d7:d8:67:b8:7f:33:
8a:df:95:2c:c6:70:81:52:39:c0:39:3f:a4:dd:46:fc:88:36:
ba:9d:28:f4:1d:dc:0e:8c:aa:a8:3c:ca:29:31:49:27:21:58:
a8:0f:38:ae:d8:99:4e:3c:e5:34:55:a7:1d:17:f8:b5:ba:54:
d1:4c:c9:8e:c9:19:3d:27:2b:10:bb:79:68:fa:d5:67:21:9a:
4f:0e:c8:c7:06:72:56:e3:20:e5:0e:ac:2a:c6:1b:b6:c9:24:
99:68:be:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:26:37 2025 by rpki-client