Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft
File: 5wn3YuCC6tPW1-TK4p77tNEvV14.mft (raw, json)
Hash identifier: 33/hHbRoYoqvNibvvivIcHHCSB66dwdNyRabMCdqpNA=
Subject key identifier: F2:31:08:27:98:DE:26:C8:4F:F5:8E:F2:C5:98:30:4F:8E:52:E6:81
Authority key identifier: E7:09:F7:62:E0:82:EA:D3:D6:D7:E4:CA:E2:9E:FB:B4:D1:2F:57:5E
Certificate issuer: /CN=e709f762e082ead3d6d7e4cae29efbb4d12f575e
Certificate serial: 0197B6D7440DE0301AAB25A8B248F1D83B9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5wn3YuCC6tPW1-TK4p77tNEvV14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft
Manifest number: 0C0C
Signing time: Sat 28 Jun 2025 14:00:50 +0000
Manifest this update: Sat 28 Jun 2025 14:00:50 +0000
Manifest next update: Sun 29 Jun 2025 14:00:50 +0000
Files and hashes: 1: 0I90jYLDsjsh8A1WdLN05NbEjj4.roa (hash: Kf+mfo5G5myFzzGKcZGygmTNr3GGZjTxsLuEcsJyKBc=)
2: 5wn3YuCC6tPW1-TK4p77tNEvV14.crl (hash: bunzVdPEclVYGqJvtBQ9IbARyzeciugr21wjVXKRRmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft
rsync://rpki.ripe.net/repository/DEFAULT/5wn3YuCC6tPW1-TK4p77tNEvV14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:44:0d:e0:30:1a:ab:25:a8:b2:48:f1:d8:3b:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e709f762e082ead3d6d7e4cae29efbb4d12f575e
Validity
Not Before: Jun 28 14:00:50 2025 GMT
Not After : Jun 29 14:00:50 2025 GMT
Subject: CN=f231082798de26c84ff58ef2c598304f8e52e681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:38:d0:fa:36:a8:cc:ca:fc:9c:8b:1b:a5:7c:
eb:46:bf:d9:34:80:e9:95:77:6f:f9:18:9e:e8:a3:
bc:eb:76:9d:7a:7b:47:55:6b:b7:f9:15:9f:31:cf:
1e:27:b2:e0:8b:f8:5b:83:9f:58:5a:68:d5:a4:0b:
77:be:ea:a9:18:c8:03:79:30:0a:43:c7:c5:b7:53:
51:c1:2a:5d:21:7f:c9:b2:fe:08:97:ff:d4:18:cb:
1f:01:1c:c4:e1:4c:ab:f3:a8:39:20:45:50:43:83:
96:e3:8e:94:58:d5:2a:c7:e2:ca:1a:b1:06:63:38:
eb:3d:2b:ef:e5:2d:12:ca:21:99:a7:39:01:f5:c9:
4b:04:74:ce:89:21:5e:c4:04:8f:f5:24:d6:f8:75:
42:18:35:89:b1:1a:da:c1:fe:c6:64:10:18:bf:af:
1c:58:51:b1:5d:e7:f4:25:ab:06:6a:72:9b:32:d1:
b7:db:30:83:6a:0d:56:6e:f9:fa:cd:10:7a:5a:92:
bc:a1:ab:66:fa:4c:02:e6:58:f5:eb:4e:9a:4c:82:
e6:49:07:4c:b7:54:25:00:f3:55:0a:9a:a4:dd:f3:
8f:04:23:e2:c1:3d:e6:95:e3:85:88:20:26:90:5a:
c9:d5:bc:7b:88:9c:58:96:0a:22:cc:ca:8c:3e:8d:
33:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:31:08:27:98:DE:26:C8:4F:F5:8E:F2:C5:98:30:4F:8E:52:E6:81
X509v3 Authority Key Identifier:
keyid:E7:09:F7:62:E0:82:EA:D3:D6:D7:E4:CA:E2:9E:FB:B4:D1:2F:57:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5wn3YuCC6tPW1-TK4p77tNEvV14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:9a:68:84:3b:56:fe:93:1f:21:33:55:34:9c:c9:77:03:a6:
2e:fb:3f:42:d4:09:9c:30:40:a1:1b:d7:da:f3:df:5e:f7:a8:
9d:93:eb:a0:5a:a8:84:cb:e3:ec:5c:7f:b7:2f:97:f8:f8:22:
35:91:30:87:64:d3:9d:da:f6:e5:56:53:af:2c:1b:38:9d:9c:
52:71:37:9e:22:ae:86:74:06:4a:b3:b5:b0:fb:e0:89:49:a2:
f9:12:2e:3c:09:e2:f4:dd:5f:99:61:43:25:36:6f:a0:1e:dd:
80:6c:dc:e8:31:1b:0b:08:69:4a:af:ea:e2:c3:76:6a:34:46:
8a:2f:85:0f:21:ca:cd:e3:1b:88:f7:ca:2b:fd:b8:36:4f:2b:
d5:a5:e4:2d:20:9d:b3:c0:8d:2d:c8:2a:0f:91:8d:3d:56:1b:
f9:78:16:42:a0:3a:1f:fa:b0:27:bc:dc:5c:c1:e2:b0:db:91:
73:c1:b3:28:59:c1:84:ac:0d:68:25:95:e6:a5:e1:3d:83:6e:
0d:34:a0:ef:81:9d:78:2e:96:60:48:37:81:04:56:1d:5e:88:
32:c9:a2:64:6f:a8:ac:2b:ec:89:bb:2e:cf:07:c9:87:e2:18:
ab:b5:96:41:bd:d6:43:63:eb:21:6f:76:65:a8:82:db:01:5b:
e0:d0:26:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:39:33 2025 by rpki-client