Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft
File: rwAta7hamGvIjbzZMyCUVOW14II.mft (raw, json)
Hash identifier: byGfKtHH4Nx6oW9e1IUB4XzWQ82ghZ2ybpY+7D/p0ZI=
Subject key identifier: 65:E9:9C:9B:B4:01:A9:A3:3F:1C:5D:5B:3D:4B:1E:10:62:90:C0:43
Authority key identifier: AF:00:2D:6B:B8:5A:98:6B:C8:8D:BC:D9:33:20:94:54:E5:B5:E0:82
Certificate issuer: /CN=af002d6bb85a986bc88dbcd933209454e5b5e082
Certificate serial: 0197B77C252FF8D73B0BBFDA8ED74C4C3417
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwAta7hamGvIjbzZMyCUVOW14II.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft
Manifest number: 10B5
Signing time: Sat 28 Jun 2025 17:00:55 +0000
Manifest this update: Sat 28 Jun 2025 17:00:55 +0000
Manifest next update: Sun 29 Jun 2025 17:00:55 +0000
Files and hashes: 1: FSst80BStcOZoxcVEEn7HUNlaMg.roa (hash: MkzJ0Sac3ZN5iWdcIOjWwvYuR5zj6qypIoySO/md3YQ=)
2: rwAta7hamGvIjbzZMyCUVOW14II.crl (hash: idVvQMlkQeied8ebeQ+0MqfvTghv+FX6Kr/ntKS/SyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwAta7hamGvIjbzZMyCUVOW14II.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:25:2f:f8:d7:3b:0b:bf:da:8e:d7:4c:4c:34:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af002d6bb85a986bc88dbcd933209454e5b5e082
Validity
Not Before: Jun 28 17:00:55 2025 GMT
Not After : Jun 29 17:00:55 2025 GMT
Subject: CN=65e99c9bb401a9a33f1c5d5b3d4b1e106290c043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ae:66:dc:43:eb:e6:78:79:ec:7a:a3:f7:93:
3d:f9:82:97:ca:b2:15:e5:94:bf:8b:92:76:13:7f:
62:1f:4a:a4:92:87:7f:9d:80:de:c0:bb:2f:ce:ed:
3c:1a:f4:31:7f:e2:24:d2:e4:93:a1:ad:e1:74:07:
de:70:50:dd:f1:6c:ff:72:4b:3e:dc:09:18:3b:2f:
5d:b8:66:72:79:0f:ed:83:6c:dd:f3:c8:fe:9b:8e:
e0:3b:0f:df:8e:1f:06:e7:44:57:8a:af:2c:c4:86:
7d:b5:09:b0:18:8c:e6:36:7e:75:2c:31:23:5a:48:
98:a7:90:4c:3f:3b:17:92:53:1b:7e:7b:47:68:40:
0d:9a:9a:d8:e2:cf:34:f0:d2:1c:3b:0c:c8:84:4b:
1f:ad:ce:76:a2:5c:23:98:1c:c5:07:c8:b7:41:a2:
57:73:b9:3b:7b:ac:7c:02:61:a3:73:3c:6e:fc:b9:
70:9c:50:58:b1:e4:19:a8:7a:a8:09:ec:cf:8b:12:
17:07:9e:2a:34:58:74:d4:0c:77:da:52:c9:cd:db:
9f:a1:9f:e1:df:04:55:4f:5d:b8:f5:89:19:f1:99:
a7:8a:d5:f7:97:ef:ad:b9:6d:75:a4:47:c6:a4:f7:
37:63:33:52:e8:e0:aa:b3:e2:2b:97:16:79:90:8a:
65:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E9:9C:9B:B4:01:A9:A3:3F:1C:5D:5B:3D:4B:1E:10:62:90:C0:43
X509v3 Authority Key Identifier:
keyid:AF:00:2D:6B:B8:5A:98:6B:C8:8D:BC:D9:33:20:94:54:E5:B5:E0:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwAta7hamGvIjbzZMyCUVOW14II.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:0b:4f:e9:ea:65:b2:1e:46:78:c4:25:a3:85:7a:fb:44:18:
27:64:f5:f4:7e:11:d5:77:cd:7d:a0:86:0f:31:44:d9:85:9b:
15:2c:67:06:9a:63:c0:5a:34:60:ad:e7:b9:ed:fa:ac:a3:dd:
6b:ec:f0:68:d6:6a:74:a5:3d:78:46:8a:03:46:63:7d:ee:66:
13:02:cb:f8:62:4b:c6:19:f4:af:5c:1a:aa:72:c0:ba:41:eb:
eb:52:b0:0f:74:9a:c4:b5:08:90:7c:54:16:c6:64:9a:7c:ce:
05:55:dd:00:5d:5e:a8:5c:f8:42:78:73:6f:01:52:b5:23:54:
c1:c7:93:62:03:f1:37:5b:62:4b:7f:b9:2b:bf:89:d3:f7:c7:
2d:be:7b:4f:09:a5:4c:ce:dd:ee:b5:14:9c:6e:60:20:82:bd:
84:29:59:93:f0:78:13:b4:8d:84:a5:2f:e7:59:85:bc:32:20:
09:e1:92:60:e2:0c:9d:23:d7:50:fb:a2:30:19:05:f8:30:5a:
15:a5:48:50:74:8f:73:17:5a:9a:f7:4c:fb:dd:00:3a:7c:72:
c8:2e:70:8d:c7:d6:3c:db:99:7e:e0:c7:2c:ce:1c:63:41:eb:
35:e2:a5:a4:3d:7d:ca:95:d1:36:4f:c8:e8:73:d3:ab:a6:20:
4e:c2:5d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:22:40 2025 by rpki-client