Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft
File: _caA7hsnw6bwcBPI_CXr_wxn-50.mft (raw, json)
Hash identifier: YS6mETbfkO9XUyb5Zdv9LgyVUodzDWD46w1u2vdvyok=
Subject key identifier: D2:C9:9E:6B:27:A4:47:81:8C:A5:34:4D:CF:95:F9:86:DB:66:C9:48
Authority key identifier: FD:C6:80:EE:1B:27:C3:A6:F0:70:13:C8:FC:25:EB:FF:0C:67:FB:9D
Certificate issuer: /CN=fdc680ee1b27c3a6f07013c8fc25ebff0c67fb9d
Certificate serial: 0197B7455C7F45BC9A6BC4476F9A072CD48E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_caA7hsnw6bwcBPI_CXr_wxn-50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft
Manifest number: 0C96
Signing time: Sat 28 Jun 2025 16:01:05 +0000
Manifest this update: Sat 28 Jun 2025 16:01:05 +0000
Manifest next update: Sun 29 Jun 2025 16:01:05 +0000
Files and hashes: 1: H5zExKsN_X1SPJQSwEakZzqeC2I.roa (hash: FjXiEi3V3MLLSMvrOdppNODHARmQ2b/yPySFztutI1Q=)
2: _caA7hsnw6bwcBPI_CXr_wxn-50.crl (hash: Ms1oNCDNYeGUym753UlYN6odAdg0wwKyOZOCiimZX0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft
rsync://rpki.ripe.net/repository/DEFAULT/_caA7hsnw6bwcBPI_CXr_wxn-50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:5c:7f:45:bc:9a:6b:c4:47:6f:9a:07:2c:d4:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdc680ee1b27c3a6f07013c8fc25ebff0c67fb9d
Validity
Not Before: Jun 28 16:01:05 2025 GMT
Not After : Jun 29 16:01:05 2025 GMT
Subject: CN=d2c99e6b27a447818ca5344dcf95f986db66c948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d7:b4:b9:30:17:2a:0a:b1:cc:ad:0d:a7:f7:
de:e4:d4:a4:e3:f9:da:e1:d0:a3:43:3c:db:a2:19:
53:80:94:a0:f7:4a:eb:ba:fc:b3:31:24:c4:d3:25:
c2:a1:2d:68:2a:40:f0:ca:8d:a0:31:c6:74:56:c3:
38:50:a4:d3:ac:52:5f:28:d2:c9:f8:d0:ca:a5:bd:
92:fa:9b:13:b7:df:63:8a:f0:33:ac:d1:77:ba:9b:
9e:3e:30:67:ef:c6:a6:92:6c:01:6d:b9:0e:47:82:
48:f0:e9:09:12:2e:6a:ab:e3:5e:0d:eb:d4:8b:37:
4f:61:21:41:7c:e0:a9:57:c5:90:20:45:1c:42:e6:
ee:61:b9:28:50:05:1a:01:c6:a7:73:ff:7e:20:61:
e6:aa:30:95:67:7d:50:e3:f1:20:09:d6:1e:de:6c:
e5:ca:1e:94:56:7c:64:bb:b1:b3:77:db:56:24:bb:
08:e6:79:21:ad:44:bc:1c:9f:03:e5:19:8c:4d:fe:
08:4f:ed:c9:7c:d8:7b:6e:62:b3:6b:d3:dc:0e:f2:
a0:4d:70:30:91:68:82:8c:c4:9a:e0:ba:81:b8:59:
c3:7c:f2:d2:cb:c8:41:1d:2b:1d:12:13:80:a7:da:
6a:a8:c7:b7:33:41:11:4f:f1:56:ba:36:f1:f5:59:
39:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C9:9E:6B:27:A4:47:81:8C:A5:34:4D:CF:95:F9:86:DB:66:C9:48
X509v3 Authority Key Identifier:
keyid:FD:C6:80:EE:1B:27:C3:A6:F0:70:13:C8:FC:25:EB:FF:0C:67:FB:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_caA7hsnw6bwcBPI_CXr_wxn-50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:19:1d:75:67:40:66:cb:70:8d:15:7b:ad:a6:67:fa:1f:25:
ed:79:e6:bd:0c:59:34:e9:16:7b:bf:4b:1f:9a:f5:b7:58:e6:
db:9e:0d:cb:50:07:68:8e:c8:74:31:c8:5e:42:97:b1:d4:34:
17:d8:27:7f:d6:6f:37:ce:31:eb:6f:03:5f:f8:c6:8f:09:84:
1d:fd:5d:01:dc:4e:f8:a9:88:4c:89:ed:68:1f:c5:d8:71:2c:
09:ff:82:3f:cf:e7:5a:9d:fc:14:01:04:a2:46:34:ed:26:77:
47:97:23:14:0e:7e:88:a8:4b:a6:5e:91:b0:03:34:51:e4:67:
fe:7e:7f:80:3e:d5:c1:91:60:5b:08:8e:c1:97:be:05:9d:af:
a1:9c:b5:64:32:1b:57:2b:07:d2:61:2d:9f:1e:59:e6:b6:df:
b8:6a:18:d8:dd:83:bb:a2:39:44:83:a0:fe:77:39:98:8c:d9:
bb:43:fe:aa:0f:15:6f:04:be:5f:07:0f:bb:d2:60:77:3d:84:
f5:d9:da:22:86:d5:6c:3b:66:31:61:7a:4a:eb:cf:26:d0:b0:
5c:8a:03:48:6d:a6:c6:45:02:30:49:7f:18:7b:79:f8:5b:35:
81:b9:92:ca:f4:39:43:ad:9c:2a:08:85:8b:f8:49:43:fb:3a:
68:fe:9a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:23:00 2025 by rpki-client