Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.mft
File: w6iCsQ8bqepLofp3BttkdH5ipBM.mft (raw, json)
Hash identifier: wjxxrh+T/b3dkuCIa7Zqvz6NTdNiRzZAmo3b6uDQBP8=
Subject key identifier: FB:09:68:11:3B:8D:0B:8D:57:BD:BB:99:BC:8C:B1:F8:FF:C8:0F:5E
Authority key identifier: C3:A8:82:B1:0F:1B:A9:EA:4B:A1:FA:77:06:DB:64:74:7E:62:A4:13
Certificate issuer: /CN=c3a882b10f1ba9ea4ba1fa7706db64747e62a413
Certificate serial: 0197C4256B57ED653A07B6C064175BE5FE30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w6iCsQ8bqepLofp3BttkdH5ipBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.mft
Manifest number: 15BB
Signing time: Tue 01 Jul 2025 04:01:15 +0000
Manifest this update: Tue 01 Jul 2025 04:01:15 +0000
Manifest next update: Wed 02 Jul 2025 04:01:15 +0000
Files and hashes: 1: a_tI6HP1FzzUH0r0poa89IN3meo.roa (hash: W0Z3kY29z8HP1pU9kcp4FsO8DLdrIX+XsxzLiYSWp8o=)
2: n66sSu3oH6YqRjQYMkqXYnUVvGI.roa (hash: oBf8U9TtdYD0BgLgRABjFu+My106UWYSpVHQ13ZhmvY=)
3: w6iCsQ8bqepLofp3BttkdH5ipBM.crl (hash: Nrjv2BkfUfq3c2f1uUJc2muBjMYGlWn2B+db3QQWMhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/w6iCsQ8bqepLofp3BttkdH5ipBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:25:6b:57:ed:65:3a:07:b6:c0:64:17:5b:e5:fe:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3a882b10f1ba9ea4ba1fa7706db64747e62a413
Validity
Not Before: Jul 1 04:01:15 2025 GMT
Not After : Jul 2 04:01:15 2025 GMT
Subject: CN=fb0968113b8d0b8d57bdbb99bc8cb1f8ffc80f5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8d:c4:27:4e:61:97:3b:39:fb:fc:a9:e2:03:
42:35:36:8b:16:38:9b:e3:9c:d0:eb:e2:97:28:6e:
a9:df:7c:df:ad:e1:73:93:10:8c:10:ac:56:a0:50:
bb:94:00:9f:b5:25:43:2d:52:ab:c7:cd:50:82:63:
c7:5d:f5:64:eb:c8:ca:02:4d:38:b2:b8:44:b5:aa:
8e:80:e3:c4:79:11:94:9a:4b:aa:24:56:63:23:02:
3b:61:61:c7:4e:1d:6a:1c:5a:aa:d6:39:0c:d7:f4:
74:80:b1:e4:28:61:a5:b4:06:37:43:5f:68:4d:53:
b3:49:05:37:ed:e6:6c:fb:a5:58:ee:5d:9f:88:52:
8a:22:38:15:96:ee:57:1b:e8:f1:f6:80:ce:6c:99:
4d:7b:23:5a:c8:42:14:21:37:8f:9d:4d:a1:65:80:
06:50:18:91:41:30:b2:89:89:82:42:b4:3d:d1:f4:
ab:2f:2f:51:b7:1a:6f:eb:7e:07:94:8f:af:67:9f:
e9:f4:09:00:33:71:cb:79:c4:a5:e4:31:71:5a:89:
23:2d:e2:00:20:37:5f:95:33:00:09:98:77:13:0f:
1c:62:c1:55:93:4c:bb:73:d7:d1:bc:3b:63:ec:f6:
a3:9e:a9:95:34:14:29:8e:c8:74:87:07:9d:a1:bd:
db:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:09:68:11:3B:8D:0B:8D:57:BD:BB:99:BC:8C:B1:F8:FF:C8:0F:5E
X509v3 Authority Key Identifier:
keyid:C3:A8:82:B1:0F:1B:A9:EA:4B:A1:FA:77:06:DB:64:74:7E:62:A4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6iCsQ8bqepLofp3BttkdH5ipBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:a6:f6:66:2f:fb:23:99:ec:40:d6:cf:f5:ea:90:56:12:f5:
db:c6:44:04:b2:8e:3d:d0:4f:93:a2:6d:26:a6:3b:ed:27:45:
da:bf:47:2e:86:21:2b:d8:4c:5c:ba:b0:0e:16:b7:e2:a6:af:
2d:27:fb:76:65:5a:62:7e:15:7e:e0:d7:27:37:14:df:64:4d:
ab:0d:a2:7f:d3:2a:33:58:98:a8:7a:99:ed:3a:5d:43:18:3e:
50:8a:fe:63:a9:8c:49:ca:25:f9:07:4a:91:cb:54:69:3f:6d:
4d:70:b8:ca:79:8c:4e:ad:1c:6f:61:e8:a3:09:4d:ed:07:e6:
da:98:34:0b:36:d8:a7:8d:08:85:09:aa:4e:a9:c7:e4:d0:5b:
3d:26:5c:4d:53:7d:06:c9:d3:3d:5f:4e:ca:a2:f4:71:0b:9d:
71:b5:40:4e:b8:79:49:57:a1:6a:2b:60:fe:27:ad:a0:ad:dd:
83:68:0b:58:83:ca:9a:a3:82:5a:97:f1:23:75:e5:20:55:2e:
0e:f9:2c:02:69:75:1e:7e:e5:23:ec:e7:27:ba:c3:5a:8c:ea:
6c:4f:18:04:1f:0c:83:3a:5a:a0:e2:51:bc:2c:2a:d0:27:87:
3d:a9:9b:83:c5:0b:a2:f1:b7:3b:c3:f7:00:83:6a:3a:c5:08:
85:cb:8e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 06:51:22 2025 by rpki-client