Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft
File: w-iL5cCvqz0dvhLceTEMRJnhJ60.mft (raw, json)
Hash identifier: pRdadEEJ5WGXenbwyVmc0KXjPXC8NG38DJE7N6xtpKY=
Subject key identifier: 86:6C:27:42:E0:7C:27:55:00:26:33:D2:BB:F2:BB:E9:CC:5F:E8:5E
Authority key identifier: C3:E8:8B:E5:C0:AF:AB:3D:1D:BE:12:DC:79:31:0C:44:99:E1:27:AD
Certificate issuer: /CN=c3e88be5c0afab3d1dbe12dc79310c4499e127ad
Certificate serial: 0197B8214AC6A77A15D37D2238B0F79E0162
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w-iL5cCvqz0dvhLceTEMRJnhJ60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft
Manifest number: 013A
Signing time: Sat 28 Jun 2025 20:01:18 +0000
Manifest this update: Sat 28 Jun 2025 20:01:18 +0000
Manifest next update: Sun 29 Jun 2025 20:01:18 +0000
Files and hashes: 1: 2x7OqnJPBLrGZL2rttYvcbQz8Tw.roa (hash: WNGnFlqIRITx+enQw6qGHRhLudWi7SmIAW5VCe5iYGY=)
2: w-iL5cCvqz0dvhLceTEMRJnhJ60.crl (hash: qEDhp0ovHSF9KBGR353kkxHtnAbVRqrauLDotjcGL3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft
rsync://rpki.ripe.net/repository/DEFAULT/w-iL5cCvqz0dvhLceTEMRJnhJ60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:4a:c6:a7:7a:15:d3:7d:22:38:b0:f7:9e:01:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3e88be5c0afab3d1dbe12dc79310c4499e127ad
Validity
Not Before: Jun 28 20:01:18 2025 GMT
Not After : Jun 29 20:01:18 2025 GMT
Subject: CN=866c2742e07c2755002633d2bbf2bbe9cc5fe85e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:75:3b:a4:d7:e6:fd:f4:22:e2:9d:58:85:8a:
ce:23:3c:66:c0:7b:10:53:e3:4c:02:fb:b8:c1:d2:
f7:d4:eb:2e:f5:1f:0e:e6:80:a1:f4:e6:dd:02:27:
6a:67:c2:39:49:72:65:a1:5a:fa:02:25:6a:47:27:
fe:f6:ee:07:f3:cd:b6:e9:01:3a:83:c9:3c:d1:42:
55:3c:0d:aa:f7:dd:9f:06:a4:b4:f1:c9:e2:07:50:
e9:f7:af:88:7d:d6:32:bd:ef:a8:7a:5d:3b:90:2f:
f2:e6:6e:a5:2d:9c:98:69:0c:89:62:d8:fa:8e:4d:
c4:1d:79:43:76:91:3c:ea:65:92:2e:d9:44:27:83:
4e:80:50:49:9e:12:01:a5:43:ff:dc:79:0e:f7:4d:
dd:fc:dd:8f:cc:5c:99:ef:2b:d6:3a:92:c4:ba:f8:
30:29:45:96:df:96:2c:99:44:80:b0:ad:3e:01:dc:
b4:f1:30:b9:5c:10:91:fa:3c:e5:30:89:2a:12:e5:
17:4a:8f:75:3b:ce:1b:4f:bc:77:a8:5c:bd:0a:52:
c0:66:3f:37:3b:b7:be:71:fe:73:95:7c:ef:89:8b:
5e:30:da:48:8e:d2:64:f6:a3:12:0a:7a:28:bc:0b:
a2:50:56:a7:6a:90:53:d7:da:33:f0:a2:8b:c0:41:
be:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:6C:27:42:E0:7C:27:55:00:26:33:D2:BB:F2:BB:E9:CC:5F:E8:5E
X509v3 Authority Key Identifier:
keyid:C3:E8:8B:E5:C0:AF:AB:3D:1D:BE:12:DC:79:31:0C:44:99:E1:27:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-iL5cCvqz0dvhLceTEMRJnhJ60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:97:f5:5c:0e:f8:7a:33:f0:db:db:1b:de:e9:3e:e1:b8:ba:
a3:42:cc:1f:7f:36:90:b1:b6:db:cc:63:c2:3e:8c:f7:e7:45:
bb:0b:8c:47:87:66:aa:36:e2:8a:ca:ef:3b:9f:86:f1:c1:22:
c9:d0:bf:0f:08:3a:37:9f:75:52:bd:b5:73:08:35:d5:7a:f1:
5c:5e:85:89:46:be:8a:6d:d6:2c:45:8a:b5:21:a7:b5:88:ca:
6a:79:e8:41:99:e2:c4:c8:de:82:fe:54:fd:3d:b4:d2:cd:04:
90:57:ba:db:77:e1:6a:31:36:43:43:23:45:f5:65:ea:6e:e1:
b8:0a:a5:b2:d8:c6:f0:a1:7c:7b:cc:b6:d5:2e:4f:a9:ad:93:
be:4d:b3:44:a8:3d:1b:73:13:6e:da:3a:ef:c3:6d:e5:9b:d5:
3c:68:e9:8a:d1:a7:15:93:49:e9:92:e4:04:64:6e:17:83:63:
a9:bf:e4:69:c4:58:82:19:a6:2c:0e:0a:20:56:20:bd:93:dc:
4d:ea:95:57:21:a7:44:f5:46:6d:fb:51:9e:51:15:d8:2b:11:
f2:6f:b6:ae:50:f5:6e:2d:a2:01:b2:ba:1e:d1:a7:fc:54:a8:
55:83:d4:c2:4a:46:32:99:ce:91:4f:48:31:02:e8:18:2b:91:
73:9c:14:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:08:08 2025 by rpki-client