Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft
File: 1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft (raw, json)
Hash identifier: m0bWFjp8qmymDVkKZYKDAcKFCmj6WTE4U+sqAA3yEmg=
Subject key identifier: AF:A4:A4:31:42:BC:F6:DD:6A:0A:C6:C7:17:F6:93:ED:F7:AE:F7:D9
Authority key identifier: F9:64:5C:91:8A:B2:94:AD:D1:9B:26:7F:48:F3:C7:BE:B9:FA:0C:EB
Certificate issuer: /CN=f9645c918ab294add19b267f48f3c7beb9fa0ceb
Certificate serial: 0197B6A1F7166187376981E63866EB56924F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-WRckYqylK3RmyZ_SPPHvrn6DOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft
Manifest number: 0560
Signing time: Sat 28 Jun 2025 13:02:37 +0000
Manifest this update: Sat 28 Jun 2025 13:02:37 +0000
Manifest next update: Sun 29 Jun 2025 13:02:37 +0000
Files and hashes: 1: 1-WRckYqylK3RmyZ_SPPHvrn6DOs.crl (hash: erTv/aH1ZLOOg7rTjWyWVrrID2P6uqXhPLObj1Vuneg=)
2: iAnZ5coAUkQIezSEoSc6B6_I7O4.roa (hash: 3KAUfgARN/Q5cvGPYfJlDhSfAV6Du1VfpKukfXJreCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-WRckYqylK3RmyZ_SPPHvrn6DOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:f7:16:61:87:37:69:81:e6:38:66:eb:56:92:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9645c918ab294add19b267f48f3c7beb9fa0ceb
Validity
Not Before: Jun 28 13:02:37 2025 GMT
Not After : Jun 29 13:02:37 2025 GMT
Subject: CN=afa4a43142bcf6dd6a0ac6c717f693edf7aef7d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:f9:25:03:88:23:4a:b7:96:e3:2e:95:64:f3:
49:4a:74:00:d7:b3:a0:76:11:01:e1:7f:02:db:af:
84:d2:36:ae:a7:9b:cf:66:81:9b:93:b8:3b:aa:f4:
58:6d:3a:d8:16:b1:e1:54:c1:29:12:ad:92:ef:06:
d9:fb:f0:81:4d:74:cf:14:7a:37:5a:21:fb:84:d8:
40:4e:95:58:7a:53:6b:26:c8:78:72:60:e7:7e:80:
81:42:fe:b7:93:74:51:20:6c:19:eb:fb:f7:b3:87:
fe:22:3d:45:13:b5:5d:85:3c:41:84:e2:e4:e2:ad:
ba:52:46:6e:4c:bb:9a:d7:04:3c:86:2c:cf:33:df:
c0:c8:49:7e:5b:60:05:95:20:64:28:c9:d1:37:c1:
81:08:e6:3d:b4:0b:6e:84:2b:00:6e:de:6f:50:90:
93:2d:51:e1:81:8b:ff:64:6f:ae:71:a8:b6:28:47:
19:3d:ef:59:96:6e:40:e4:0e:a0:0d:c6:6f:22:29:
38:e0:19:a3:fb:54:60:83:bc:49:22:7c:ee:c2:e0:
4b:04:ac:50:08:ec:bb:36:65:f7:dc:0b:c4:21:bd:
87:77:46:fa:d4:c1:0d:f6:d2:09:bc:f2:c9:8e:55:
7f:6e:14:e1:59:dc:09:08:6c:a8:7f:fb:fd:59:b2:
0a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A4:A4:31:42:BC:F6:DD:6A:0A:C6:C7:17:F6:93:ED:F7:AE:F7:D9
X509v3 Authority Key Identifier:
keyid:F9:64:5C:91:8A:B2:94:AD:D1:9B:26:7F:48:F3:C7:BE:B9:FA:0C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WRckYqylK3RmyZ_SPPHvrn6DOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:4e:8e:50:f7:14:6b:c4:72:06:e8:e6:9a:48:2e:fd:aa:10:
f3:52:af:16:60:19:27:1c:3e:f3:16:4d:96:e2:2e:82:54:96:
1b:2a:7e:1b:3f:5e:d8:a0:62:c1:2c:c6:e7:b1:70:93:29:b8:
5a:6a:84:15:b6:6f:f9:a5:93:28:fa:a8:66:64:74:2c:3d:90:
f5:ca:f2:17:5d:b9:6e:e0:63:f7:fb:45:c4:a3:57:a5:f3:f5:
33:2b:ac:6f:76:e2:e4:d4:c4:f5:f0:f6:7d:f7:c9:a3:18:19:
28:04:8c:44:d9:31:0b:59:6b:53:e6:d5:c8:c6:d1:b4:5c:27:
86:9c:b3:00:f2:31:d8:2e:2b:42:ef:3f:41:7f:76:1e:f8:b3:
90:45:1e:6c:94:8a:6b:2c:0f:48:60:dd:ea:a4:f1:0f:a6:15:
29:95:2b:eb:4c:4c:9f:40:8a:ee:f3:db:e0:53:fb:41:a0:24:
87:0e:b7:be:b8:7d:2b:ee:7b:ed:48:33:c6:77:7f:2b:3b:5d:
f6:63:2e:4d:50:a6:19:5d:23:d0:43:1c:9a:4d:55:fa:5a:01:
6b:f0:fd:b9:89:42:13:44:ea:d8:0c:71:b1:55:b2:a7:b1:b4:
aa:3c:7d:74:b5:1c:49:42:e3:ba:e2:38:73:a8:68:22:9a:2b:
10:74:6a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:59:58 2025 by rpki-client