Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft
File: 9WPabrO3oH_cRSWIMASXDWQLA2s.mft (raw, json)
Hash identifier: IWEl7s+E7E2zELcwmdR/qOuC+xXZqpPuWJVPqiwyigo=
Subject key identifier: 8E:5B:F8:5A:A1:0B:F4:95:DE:A1:B8:88:38:88:D4:C2:7B:CA:DD:97
Authority key identifier: F5:63:DA:6E:B3:B7:A0:7F:DC:45:25:88:30:04:97:0D:64:0B:03:6B
Certificate issuer: /CN=f563da6eb3b7a07fdc4525883004970d640b036b
Certificate serial: 0197B63267C21C0DEC557AC92C85D02B2164
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WPabrO3oH_cRSWIMASXDWQLA2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft
Manifest number: 15BD
Signing time: Sat 28 Jun 2025 11:00:45 +0000
Manifest this update: Sat 28 Jun 2025 11:00:45 +0000
Manifest next update: Sun 29 Jun 2025 11:00:45 +0000
Files and hashes: 1: 9WPabrO3oH_cRSWIMASXDWQLA2s.crl (hash: foJgBiwARQgxm4TBDhuXLx7geAxmgcgNq8ai39d7re0=)
2: h04E6GUTfk7g-nszYeXV5v59Z7g.roa (hash: D0nODnBLfeAlBTbUkjxGcmmT4S/QYeiGnt9Aow5Sjx0=)
3: xJetAjXRbPTX957PRc-ZRikOCag.roa (hash: zIdEISxA+75bDRZATAE0MJ7G/Gr2I74NP3sEuTFZFW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WPabrO3oH_cRSWIMASXDWQLA2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:67:c2:1c:0d:ec:55:7a:c9:2c:85:d0:2b:21:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f563da6eb3b7a07fdc4525883004970d640b036b
Validity
Not Before: Jun 28 11:00:45 2025 GMT
Not After : Jun 29 11:00:45 2025 GMT
Subject: CN=8e5bf85aa10bf495dea1b8883888d4c27bcadd97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a6:c9:98:81:9f:16:7b:d9:5f:f4:fb:ae:1a:
a6:07:6e:88:4d:6b:92:7a:9f:25:d7:88:a5:5a:71:
bd:ec:11:f6:f6:03:08:15:37:5e:17:b4:db:d4:6e:
a9:52:2c:59:91:79:98:0c:08:d7:94:f4:33:94:95:
a1:56:83:75:a8:ad:35:3c:9f:3e:dc:25:0c:9b:5e:
dd:df:63:36:1a:c8:c7:a2:fb:18:1b:48:5c:53:c5:
32:cd:af:9a:49:85:36:f3:ad:0b:69:1d:c4:d0:d7:
76:c4:cb:51:d9:6c:1c:d5:39:fd:7f:b2:01:e6:d8:
49:9b:73:c9:39:e3:53:b8:a0:49:d2:9f:23:ec:44:
06:ba:0a:31:2a:2f:7a:9d:f7:77:e3:b0:98:af:8d:
be:4b:69:3b:76:f5:61:62:69:65:db:04:33:8a:d9:
a5:50:c5:ae:14:04:a9:63:1c:55:b1:1e:d5:b7:65:
65:7e:e1:b3:bb:cd:2b:64:52:fa:ba:6a:69:e2:99:
34:ea:29:f6:76:a0:ca:ac:5c:a3:3a:29:b2:f5:e8:
36:19:33:a0:84:c0:4e:31:70:1a:85:b2:dc:97:97:
1f:c5:62:7b:7f:d0:6b:99:7f:8c:9e:cb:a7:e2:b6:
2c:75:e0:b0:b8:db:9c:16:63:1f:1b:20:a1:ff:e2:
64:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:5B:F8:5A:A1:0B:F4:95:DE:A1:B8:88:38:88:D4:C2:7B:CA:DD:97
X509v3 Authority Key Identifier:
keyid:F5:63:DA:6E:B3:B7:A0:7F:DC:45:25:88:30:04:97:0D:64:0B:03:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WPabrO3oH_cRSWIMASXDWQLA2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:6c:c4:d6:3f:4d:8e:af:55:cb:7a:78:b4:fc:f7:de:f5:f7:
2f:26:34:e0:88:93:6c:1c:ce:32:f8:49:52:e7:e8:26:7a:85:
fb:34:b0:fb:f1:8c:a4:c6:9a:ae:09:d8:96:01:7f:85:86:26:
51:52:9d:9f:7a:87:ee:63:1f:f9:57:85:b0:f9:1e:c6:f4:fa:
a9:39:50:3f:3c:2a:1a:9d:fa:6f:10:b3:51:ba:20:32:2b:d7:
a7:a1:17:ac:81:d9:b3:ca:65:ef:18:92:25:f9:af:cb:99:af:
c0:23:45:18:76:44:03:cb:31:51:25:28:de:97:12:bd:85:b1:
53:8f:27:c7:06:a2:1a:df:ab:15:fc:64:fd:cb:83:34:ef:3c:
d3:07:c4:d9:9f:27:bf:e1:49:4c:70:06:e8:c5:2b:df:56:bb:
96:cc:ea:4b:2a:6c:d1:01:71:8b:89:87:46:40:45:90:2c:0f:
5c:85:69:ef:e0:0a:19:e2:a1:b6:87:cc:c5:7d:28:04:12:53:
63:9a:67:a2:ed:d1:cb:f0:81:ec:52:9d:b2:d5:30:4e:7a:ff:
8c:56:cf:f4:d9:89:7b:11:6d:a7:2c:6f:7b:6e:b1:3d:c3:70:
49:ed:7b:e5:28:d7:54:76:02:80:e8:f2:26:d7:a0:9e:ef:71:
6d:9d:1d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:08:32 2025 by rpki-client