Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft
File: 1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft (raw, json)
Hash identifier: fSE6L3YLwpCHeELeKIB9HBM+Av+UlCPscB8LVF2u5xk=
Subject key identifier: 9B:DE:B8:DA:A5:09:7A:37:77:CA:95:39:7C:02:CD:BB:17:A0:8D:55
Authority key identifier: D5:62:0C:EC:70:97:4D:03:7D:77:69:75:8C:74:66:83:05:B3:2C:F2
Certificate issuer: /CN=d5620cec70974d037d7769758c74668305b32cf2
Certificate serial: 0197B5C4C0277EB3CDECB761922307E6DAB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft
Manifest number: 0D18
Signing time: Sat 28 Jun 2025 09:00:59 +0000
Manifest this update: Sat 28 Jun 2025 09:00:59 +0000
Manifest next update: Sun 29 Jun 2025 09:00:59 +0000
Files and hashes: 1: 1WIM7HCXTQN9d2l1jHRmgwWzLPI.crl (hash: HEv9xZkTxwWabSBr8/qP0c98lGRn5e8ypucVBOawaTc=)
2: QCTiWGHEKmUOdJTM7oPATib-rWI.roa (hash: k26mJ2kyD6PN3QHWZlo9Dbc0a0mryGGisjgGFZ6rWDs=)
3: hrRzVBROURephwaz7IZClsaHDKQ.roa (hash: Fof+bR6X5zJSmDYDTc8T97sYO9am/Pj5PX1jkaREIks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:c0:27:7e:b3:cd:ec:b7:61:92:23:07:e6:da:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5620cec70974d037d7769758c74668305b32cf2
Validity
Not Before: Jun 28 09:00:59 2025 GMT
Not After : Jun 29 09:00:59 2025 GMT
Subject: CN=9bdeb8daa5097a3777ca95397c02cdbb17a08d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:03:10:bd:33:45:6a:e1:38:ce:a2:df:7a:07:
ee:bd:04:84:cb:01:6a:f2:e8:6a:85:75:d1:e4:7f:
4b:32:8a:1c:a6:b0:ac:46:4e:06:fd:8b:47:b5:f1:
27:a2:22:d7:88:1c:d7:a6:7d:09:b8:9e:ea:39:b3:
5c:d4:85:76:7a:82:f2:f5:6a:8e:3b:5b:3a:45:23:
cc:70:10:10:77:51:f1:e9:2f:26:56:1a:8f:74:67:
84:df:a6:af:e9:01:5a:2f:01:b4:f1:70:01:f8:be:
d3:08:c0:6a:94:32:f3:99:1f:b3:7a:94:76:a3:1e:
34:a4:8d:e8:ef:1a:be:56:b7:a5:dd:0b:89:08:b3:
a2:a4:95:fb:dc:ce:e6:22:0d:3e:fe:49:d7:dc:0e:
33:36:69:bd:95:ea:08:ab:de:ca:9a:1a:b9:72:8c:
78:13:e8:13:5e:4d:94:53:02:97:e0:35:82:16:5e:
cc:42:33:1d:43:a2:0d:fe:4e:db:f9:62:b0:26:3b:
24:3a:45:83:bb:43:e1:de:f1:f2:63:25:68:ba:ec:
7d:e6:35:30:d4:0e:09:ec:9d:12:fd:8c:7d:05:36:
bf:38:d7:f3:e4:29:37:b5:a0:0a:d9:77:98:dc:b4:
cc:ec:9b:c6:a7:45:9f:71:f0:9f:3c:25:74:42:e6:
bc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:DE:B8:DA:A5:09:7A:37:77:CA:95:39:7C:02:CD:BB:17:A0:8D:55
X509v3 Authority Key Identifier:
keyid:D5:62:0C:EC:70:97:4D:03:7D:77:69:75:8C:74:66:83:05:B3:2C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:de:8c:67:fc:2e:d0:93:80:e5:00:93:64:b9:fd:c5:a7:2a:
57:e1:f2:8b:e8:2e:28:7e:df:76:a5:f1:cc:82:94:da:3c:3f:
fa:7d:06:88:91:eb:0c:aa:12:bc:44:2e:e7:b0:24:8f:7a:84:
4c:4a:53:d9:f0:5a:4b:18:2d:0f:e0:e8:af:87:13:f9:38:a3:
25:53:b4:cd:f5:71:84:11:97:95:80:9b:7b:fe:78:33:a6:12:
b6:3a:53:ef:09:75:11:2a:45:3e:05:91:ef:54:1f:85:02:0d:
df:f8:8a:60:0c:94:4d:59:f5:af:5b:c7:36:94:27:52:d9:f0:
9e:41:7a:01:ef:28:f2:1c:84:22:55:0f:d2:0f:c8:1b:4c:60:
e0:e8:03:ba:a2:42:90:34:9e:29:2b:1a:c5:66:8b:d5:33:97:
0a:8d:b2:0e:56:75:46:9b:9e:cf:a2:df:28:72:46:27:91:b4:
2e:26:75:b0:8c:35:94:a7:74:95:b9:3f:b8:87:4f:55:27:b3:
11:13:2a:66:0b:8f:27:87:cb:26:d5:89:78:17:bb:f8:13:ac:
b8:4f:d3:82:e1:ae:b5:5d:26:9e:b2:18:71:0c:48:28:e0:f7:
0e:eb:d9:01:de:0f:ad:12:9d:55:05:80:2a:a9:70:c4:31:99:
9f:69:09:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:47:32 2025 by rpki-client