Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.mft
File: r00WwzVAe_DQpRzvm5wcUxAoD0g.mft (raw, json)
Hash identifier: gjbwSKzfGgsgcHYPPgfjhLgfuqTZ8TlZLniuuJGLSSU=
Subject key identifier: D9:A5:AA:60:F9:48:A5:BC:2B:0D:5E:98:2A:34:07:16:C1:31:23:12
Authority key identifier: AF:4D:16:C3:35:40:7B:F0:D0:A5:1C:EF:9B:9C:1C:53:10:28:0F:48
Certificate issuer: /CN=af4d16c335407bf0d0a51cef9b9c1c5310280f48
Certificate serial: 0197B7EA989B8B38441B27EF5AA483B67B64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r00WwzVAe_DQpRzvm5wcUxAoD0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 19:01:34 +0000
Manifest this update: Sat 28 Jun 2025 19:01:34 +0000
Manifest next update: Sun 29 Jun 2025 19:01:34 +0000
Files and hashes: 1: VI7MbqfUntVnN_kMd5I5Qw5bl-4.roa (hash: yObUZYg1Kq2iUCPpFKIeS8ZVs5ZMohWqBvzb45a6JFM=)
2: r00WwzVAe_DQpRzvm5wcUxAoD0g.crl (hash: 6pNn11dpyazEPOnkv6ZUF+Uv4dtBt38sSyb5zn8Obqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/r00WwzVAe_DQpRzvm5wcUxAoD0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:98:9b:8b:38:44:1b:27:ef:5a:a4:83:b6:7b:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af4d16c335407bf0d0a51cef9b9c1c5310280f48
Validity
Not Before: Jun 28 19:01:34 2025 GMT
Not After : Jun 29 19:01:34 2025 GMT
Subject: CN=d9a5aa60f948a5bc2b0d5e982a340716c1312312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5a:4e:21:62:c0:b6:1a:23:c6:c7:b2:6e:53:
21:e3:ca:1d:ed:3f:4d:c7:a9:9c:c3:21:02:32:9c:
af:02:d2:99:36:24:05:3f:4a:6b:82:1e:31:17:e6:
60:10:42:72:28:e5:de:6e:3c:f0:aa:20:1b:3d:5c:
f0:e6:89:de:50:24:c0:9f:03:0f:a5:a7:aa:b5:c6:
e3:58:4b:cb:8b:46:a6:bd:55:4d:56:96:81:c1:55:
e0:07:7c:9a:b5:5b:d8:08:c6:c7:d7:b7:e2:ac:0a:
58:2c:99:77:84:9e:0c:b9:a3:f0:20:04:d4:a3:b8:
a5:4a:bf:94:1f:60:14:b0:74:eb:5d:4f:78:d5:18:
e7:86:ca:57:7f:d7:9a:7f:61:4a:e1:0f:c6:31:98:
2b:00:a9:84:ed:c4:45:74:1a:e8:d1:2c:0f:49:4f:
83:61:f3:ed:79:d2:00:c6:a6:00:d7:31:77:4a:e4:
8f:ec:4c:6d:ac:4c:b1:26:cf:4e:c4:da:56:4f:e7:
ab:8f:03:b5:e0:fe:8a:10:56:77:3b:ee:4b:8f:e7:
6b:e9:21:02:14:34:23:48:dc:1b:36:12:41:6d:ff:
87:36:dd:5d:18:8a:56:66:ec:03:8a:80:2d:6f:b6:
fe:8f:7f:c8:f7:2b:89:87:14:00:fc:01:58:77:e9:
4f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:A5:AA:60:F9:48:A5:BC:2B:0D:5E:98:2A:34:07:16:C1:31:23:12
X509v3 Authority Key Identifier:
keyid:AF:4D:16:C3:35:40:7B:F0:D0:A5:1C:EF:9B:9C:1C:53:10:28:0F:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r00WwzVAe_DQpRzvm5wcUxAoD0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:23:c8:57:3d:25:15:ad:e3:d0:6b:e8:45:ed:fe:d2:dc:68:
e6:ad:98:7e:9b:a4:00:bb:df:59:9e:1d:73:14:6f:31:ed:35:
04:18:a7:1b:e6:df:aa:73:ba:8b:67:a3:b5:fe:ee:e3:ba:46:
81:4c:62:36:8b:9c:a2:9a:4a:c2:e1:05:e1:01:59:a5:a0:e4:
1e:87:98:4b:22:17:b9:4d:ca:d2:86:c0:53:b9:da:e7:2a:53:
2c:3b:d6:e0:9f:e0:6c:dd:e9:e8:ae:59:a9:1a:ab:2d:58:9c:
08:ab:f3:77:84:f8:4c:db:0f:12:cf:26:65:cb:8e:a5:47:cf:
68:5e:4a:82:1b:97:63:7a:d8:ea:69:d3:a6:dc:16:9d:92:85:
a0:35:1e:0c:66:03:46:13:d4:d7:c2:8f:a4:84:e8:fd:a9:ff:
27:ad:e0:9d:63:8b:76:81:48:40:c5:e2:a2:11:05:89:0b:c6:
8c:00:3a:67:64:9e:54:7f:a2:d4:fd:6b:63:f7:e8:3c:24:f6:
00:2f:91:e1:94:90:0e:a5:f4:17:87:83:84:07:f1:5c:65:2d:
0e:26:1a:75:6a:de:b6:3c:df:26:68:b8:57:32:8c:51:bd:42:
fa:e6:72:36:07:09:54:57:7b:3b:cf:02:d4:ea:a8:cc:91:48:
4a:3d:5d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:35:32 2025 by rpki-client