Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.mft
File: w_sAsiDqeEoEaDBU_L9OS0ietCA.mft (raw, json)
Hash identifier: Yf6HejIKhQZy3UTvOli80lqA9LmiJn22tK763UQXGFQ=
Subject key identifier: DF:5F:A2:7A:2C:D8:C8:96:4B:3A:3E:C1:66:27:66:A9:59:FF:E7:84
Authority key identifier: C3:FB:00:B2:20:EA:78:4A:04:68:30:54:FC:BF:4E:4B:48:9E:B4:20
Certificate issuer: /CN=c3fb00b220ea784a04683054fcbf4e4b489eb420
Certificate serial: 0197B70E65AB22721CEF130DB78EC0E3B7C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w_sAsiDqeEoEaDBU_L9OS0ietCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.mft
Manifest number: 0974
Signing time: Sat 28 Jun 2025 15:01:03 +0000
Manifest this update: Sat 28 Jun 2025 15:01:03 +0000
Manifest next update: Sun 29 Jun 2025 15:01:03 +0000
Files and hashes: 1: JXn11nJ90d5TiYF9GBYXGMgzBVU.roa (hash: xKanBKZfDLhsfcdAIiMFoN3EiNJRNn6FGvW7wSns+Xk=)
2: w_sAsiDqeEoEaDBU_L9OS0ietCA.crl (hash: fQKBhtUlZFI9vloAaRVaa0ZOxqqomqVcHnHVyTaobko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/w_sAsiDqeEoEaDBU_L9OS0ietCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:65:ab:22:72:1c:ef:13:0d:b7:8e:c0:e3:b7:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3fb00b220ea784a04683054fcbf4e4b489eb420
Validity
Not Before: Jun 28 15:01:03 2025 GMT
Not After : Jun 29 15:01:03 2025 GMT
Subject: CN=df5fa27a2cd8c8964b3a3ec1662766a959ffe784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3d:f5:c7:2e:d0:fc:37:d6:10:8b:5f:3e:36:
47:32:5c:12:99:ab:a7:9c:6b:12:47:0d:c4:a5:09:
08:2b:0f:26:02:bf:3c:d2:96:0e:5f:a7:35:1f:71:
93:b2:f3:9d:4e:15:ea:c5:4e:50:34:83:bc:cf:0e:
c7:a5:2b:68:c9:8d:3f:d1:f4:53:66:14:b0:86:ce:
05:b8:a7:23:78:77:de:f0:d1:97:f3:10:08:e1:0a:
07:23:c9:33:ad:66:29:24:88:ca:63:1d:ab:68:a6:
db:8d:81:c9:ba:2e:f2:5f:3e:6a:a4:ec:1d:92:80:
97:b5:52:2b:0d:d2:ae:fe:39:49:5d:32:b3:9a:df:
88:f6:45:09:02:3c:0d:28:79:0c:fa:1a:71:93:b9:
f1:ff:47:3a:d2:b8:4d:94:61:8c:85:aa:99:39:79:
fe:26:63:45:05:aa:71:0e:2c:38:50:19:fd:00:6e:
82:fa:7a:5c:47:86:ae:f6:54:2e:a9:04:b6:4f:3b:
31:f0:56:4c:9e:b2:7f:a6:1d:76:a1:d6:0d:8b:ec:
c9:b0:2c:d0:59:8e:98:cd:99:a8:63:16:a2:b0:f6:
df:43:c7:01:2b:e4:3d:a6:8b:01:ed:af:e0:a2:47:
86:0b:02:94:59:27:5f:54:a5:58:d8:0c:54:bd:c6:
00:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:5F:A2:7A:2C:D8:C8:96:4B:3A:3E:C1:66:27:66:A9:59:FF:E7:84
X509v3 Authority Key Identifier:
keyid:C3:FB:00:B2:20:EA:78:4A:04:68:30:54:FC:BF:4E:4B:48:9E:B4:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_sAsiDqeEoEaDBU_L9OS0ietCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:3f:66:e2:61:9d:fa:00:a3:c5:e7:6b:26:80:31:ae:83:d8:
62:ad:7f:af:fe:0d:73:b0:3d:4e:8c:d6:3e:04:2b:a9:58:ed:
74:23:e5:80:dd:ad:b9:59:bc:8d:eb:3c:24:62:d0:4a:01:01:
44:9d:56:92:dc:b9:10:0e:2a:d2:6c:26:ac:65:e9:11:2c:ff:
fe:b9:cc:29:73:32:ee:d2:32:db:3a:34:31:87:65:16:3c:31:
31:25:f3:99:84:f5:9d:59:45:53:52:04:c6:3c:4e:16:5a:fa:
e7:28:c5:43:78:e3:55:84:79:3b:c3:2e:54:e6:76:b2:1a:ef:
89:3f:ba:9e:be:0a:74:74:7c:92:2d:7c:e9:0b:60:17:18:a6:
8d:b4:2a:5e:23:c8:d6:2c:b2:8f:a4:d4:cf:75:d2:ae:75:ac:
2d:f7:cd:87:ed:03:25:a0:f5:84:ae:b5:e0:51:b8:78:a7:f2:
a6:85:f2:24:bf:cb:81:34:07:2e:5f:db:35:8f:d5:66:0e:04:
01:61:4a:d8:00:5b:ac:7e:e5:fd:5b:f0:47:5b:b6:b2:5c:9c:
9c:b1:b0:de:08:9c:8b:16:33:79:ef:88:b3:a5:79:03:17:31:
25:49:ae:b7:24:8f:82:48:5d:60:a1:f7:b6:5c:b0:c2:a6:6a:
d1:7c:78:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:38:03 2025 by rpki-client