Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft
File: w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft (raw, json)
Hash identifier: i501T53aYBy7Twei5BR6Uy8JzavSwnq9oB3dbzdqhaY=
Subject key identifier: D0:E6:3E:04:D2:36:D9:CD:EC:09:A5:63:8C:2F:A4:6D:BC:5D:48:5C
Authority key identifier: C3:C0:59:1E:2E:B4:9D:05:59:E6:FC:E7:EE:2A:A8:1F:0F:59:BA:6F
Certificate issuer: /CN=c3c0591e2eb49d0559e6fce7ee2aa81f0f59ba6f
Certificate serial: 0197DA3FD0B22794FF1B2D027A28BD7052BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft
Manifest number: 15D3
Signing time: Sat 05 Jul 2025 11:01:44 +0000
Manifest this update: Sat 05 Jul 2025 11:01:44 +0000
Manifest next update: Sun 06 Jul 2025 11:01:44 +0000
Files and hashes: 1: 2BUGtHga-91WOayxMZ7EN3sAoUE.roa (hash: 40eNzoOdvf9iy0CU470Iq6VAmpCnU36Mg3hoCFP9r9Q=)
2: Ka5Exl1GeddcELNpCklBpS5TlPs.roa (hash: kRYcEd/x8/mlJ+CtYhq56IHy4jqYQVlovD2KG8xYqY4=)
3: w8BZHi60nQVZ5vzn7iqoHw9Zum8.crl (hash: JJCFy/68R3Bdy6Q5G2p4zD8kMLSh/lKcwu9v/X9h+mA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:da:3f:d0:b2:27:94:ff:1b:2d:02:7a:28:bd:70:52:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c0591e2eb49d0559e6fce7ee2aa81f0f59ba6f
Validity
Not Before: Jul 5 11:01:44 2025 GMT
Not After : Jul 6 11:01:44 2025 GMT
Subject: CN=d0e63e04d236d9cdec09a5638c2fa46dbc5d485c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a3:47:f5:19:5a:3e:de:ac:2c:97:ec:eb:89:
27:e6:5d:4b:d9:ae:2c:0a:90:83:ec:4a:f7:59:fb:
2b:2d:66:e0:a8:70:cb:37:20:c3:a5:57:e4:85:97:
52:31:d2:67:87:28:74:cc:af:85:40:71:58:60:be:
34:7c:ad:00:43:1a:2a:02:31:7d:82:00:2a:50:f7:
10:6b:2a:37:00:07:e1:6b:ea:24:c9:dc:c9:5c:c1:
1c:00:81:c6:5b:29:e0:ba:a8:0b:b6:15:4c:b8:da:
0c:2b:de:f1:0e:c7:96:c8:05:ca:8e:ea:f5:2f:2a:
95:cf:77:46:88:0f:a0:97:f2:35:33:f6:45:37:23:
b1:90:86:1e:fd:f7:84:98:0c:a8:7e:be:f5:b3:f5:
47:62:dd:7c:81:bd:32:34:fe:8c:7e:e5:15:1f:6c:
25:9e:69:0d:73:a4:5c:8c:f3:dc:07:ed:2b:52:62:
6f:b4:5e:1d:00:3f:92:da:24:be:3d:45:7f:6f:fb:
aa:02:7c:58:35:82:70:e5:93:89:ae:e6:b4:41:25:
25:58:a2:24:38:07:e7:97:9f:e9:9e:2a:3d:9d:95:
2e:dc:26:26:e3:ec:d7:c3:23:18:07:28:70:cc:93:
22:54:45:63:ba:18:58:c0:fd:a6:2b:1b:ca:22:4a:
84:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:E6:3E:04:D2:36:D9:CD:EC:09:A5:63:8C:2F:A4:6D:BC:5D:48:5C
X509v3 Authority Key Identifier:
keyid:C3:C0:59:1E:2E:B4:9D:05:59:E6:FC:E7:EE:2A:A8:1F:0F:59:BA:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:d0:03:4b:1f:a1:a5:85:41:a3:86:a0:e7:71:af:74:f4:2a:
7f:95:51:68:07:36:8d:68:45:12:ce:f4:ae:5c:de:a1:85:0a:
ea:4f:dc:66:80:26:d8:76:41:23:2b:d5:25:a8:43:1b:0b:e9:
98:67:4c:11:19:e4:12:9f:8c:b9:b4:bb:ed:75:1c:5e:f4:61:
d0:8b:60:bf:6c:87:82:19:6f:7c:b8:fd:cf:2d:ad:0a:1b:92:
d6:04:04:69:f7:0b:40:cf:30:9b:bb:1f:8b:2c:55:4b:0e:30:
68:c4:68:db:8d:e3:42:9e:5c:77:9b:e9:2c:1e:ab:e6:a0:f6:
54:ee:65:c6:86:00:72:0a:18:ae:3c:0b:2c:91:2f:4d:b4:11:
67:c1:e0:d6:69:c2:ed:d2:f0:28:7c:79:e8:a3:66:aa:13:48:
b6:26:2e:f4:30:86:0c:5a:2c:22:30:3d:6e:99:48:c0:b4:a2:
03:2f:66:47:c2:86:57:c7:17:b5:32:49:b6:fb:a6:e0:9e:cc:
1a:f3:6c:4b:b4:a4:d8:3e:59:c4:2d:da:1c:94:0b:a3:3d:97:
2e:77:af:d7:4a:3d:a5:b1:6a:b5:2a:98:3f:15:62:95:4b:6c:
d6:39:f3:18:7a:f1:da:a1:1a:f3:f7:3b:19:cc:85:66:23:bd:
32:79:03:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 18:51:38 2025 by rpki-client