Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/w4Me3AugfH40q6cBw1c9jnKvGP4.mft
File: w4Me3AugfH40q6cBw1c9jnKvGP4.mft (raw, json)
Hash identifier: obYBt2cLWY1pZ/aHtSt9vYMgru5s0W/n3xyMSVny/YU=
Subject key identifier: 34:F4:A7:43:DF:5E:68:F9:7E:68:2F:37:07:7F:91:15:F6:0B:B7:E8
Authority key identifier: C3:83:1E:DC:0B:A0:7C:7E:34:AB:A7:01:C3:57:3D:8E:72:AF:18:FE
Certificate issuer: /CN=c3831edc0ba07c7e34aba701c3573d8e72af18fe
Certificate serial: 0197B6D7BA7AC78674F9C1595C14EAD5AA66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4Me3AugfH40q6cBw1c9jnKvGP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/w4Me3AugfH40q6cBw1c9jnKvGP4.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 14:01:20 +0000
Manifest this update: Sat 28 Jun 2025 14:01:20 +0000
Manifest next update: Sun 29 Jun 2025 14:01:20 +0000
Files and hashes: 1: UkowmR7j8dX0saZm2LcqRKWc1As.roa (hash: GBF5K+d4pg2yE1Y/OoUy9KgNyBcuaLjAQkgdpqJHVgo=)
2: w4Me3AugfH40q6cBw1c9jnKvGP4.crl (hash: ZKSUsiKY9rtbb3Y+tDCRiCC2c7PQDHCuzrLFqgkh5h0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/w4Me3AugfH40q6cBw1c9jnKvGP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/w4Me3AugfH40q6cBw1c9jnKvGP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/w4Me3AugfH40q6cBw1c9jnKvGP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:ba:7a:c7:86:74:f9:c1:59:5c:14:ea:d5:aa:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3831edc0ba07c7e34aba701c3573d8e72af18fe
Validity
Not Before: Jun 28 14:01:20 2025 GMT
Not After : Jun 29 14:01:20 2025 GMT
Subject: CN=34f4a743df5e68f97e682f37077f9115f60bb7e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a1:ce:ae:7c:3e:94:5c:ac:d7:67:6b:be:08:
76:e6:a6:02:e4:a1:ad:36:f9:76:ba:2e:81:f6:dc:
62:d0:14:87:d4:29:08:97:65:09:79:ba:91:6a:87:
e6:d4:fe:88:be:ad:c6:bd:87:60:89:bd:7e:03:03:
5f:c7:7b:50:80:e6:e3:9a:b4:f5:f0:8b:21:ad:2e:
8d:d2:8b:f9:70:4c:6d:7b:b4:f9:bb:13:17:19:36:
2b:a2:4b:be:b4:48:76:1b:b2:90:c6:59:44:8d:73:
33:67:72:ae:af:10:42:6b:fc:51:8e:5f:19:a0:93:
db:80:f7:7a:cc:e4:23:c9:19:a5:50:e6:ab:a8:4d:
19:22:ec:e6:86:82:c9:d6:aa:e7:f1:89:9e:22:29:
94:5d:2d:bb:6b:87:b9:70:2b:39:9e:96:a0:4c:09:
02:11:d0:b0:87:db:84:bf:bb:30:0c:76:92:c3:69:
0d:74:9b:09:27:2b:89:30:e3:88:32:5c:33:62:84:
3a:b0:b8:7a:6b:9f:af:e4:88:d3:88:92:d6:ff:80:
c4:ce:ea:61:63:3b:e4:80:d6:32:94:ca:e2:24:6f:
0c:f8:f5:40:b5:37:c9:c3:6a:4c:5a:c5:ff:d5:43:
eb:92:0e:2c:b9:e3:ea:80:a1:1e:0f:52:8b:eb:63:
02:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F4:A7:43:DF:5E:68:F9:7E:68:2F:37:07:7F:91:15:F6:0B:B7:E8
X509v3 Authority Key Identifier:
keyid:C3:83:1E:DC:0B:A0:7C:7E:34:AB:A7:01:C3:57:3D:8E:72:AF:18:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4Me3AugfH40q6cBw1c9jnKvGP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/w4Me3AugfH40q6cBw1c9jnKvGP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/w4Me3AugfH40q6cBw1c9jnKvGP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:00:79:bc:cd:09:7c:6d:fe:2c:dc:3b:d4:94:9a:72:60:52:
d6:eb:55:ae:84:7f:a6:24:80:de:85:40:d5:82:b4:f9:67:35:
4f:c3:3e:23:d0:71:b1:45:ed:ac:33:70:86:5e:c7:16:fb:db:
b9:2b:e2:07:14:96:85:b6:f6:6c:aa:e8:30:a9:39:1d:6c:07:
ee:fc:9a:05:0e:ea:4f:4a:68:31:db:cb:97:07:f6:d6:85:56:
62:c2:06:8c:5b:ef:13:0b:50:98:95:5e:50:a8:fd:f9:bd:ac:
d2:5f:de:bc:33:8e:bd:ba:f7:5a:2c:79:59:35:c8:e0:09:e2:
ad:3f:02:cd:01:8f:cd:58:0c:95:7f:8e:42:ba:80:f6:63:6f:
ff:81:4b:7d:3d:d9:e0:b2:b6:de:96:06:c8:ee:8e:4f:6d:1c:
ec:f3:b8:fc:55:c1:db:2b:0e:f0:a0:d5:36:4e:9f:22:b7:53:
45:ee:0e:3d:f9:9f:be:4e:a3:6c:ab:e5:d4:41:6b:29:11:6e:
31:0a:0e:c7:be:fb:24:d1:eb:9a:a0:f1:5c:8e:db:03:ef:37:
1d:33:9a:e9:74:07:7f:b9:4e:29:73:f1:43:b9:98:b4:fd:6f:
f0:31:f2:ec:9e:92:76:14:e9:d0:a2:a4:95:74:8c:e3:71:64:
f0:3a:58:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:56:58 2025 by rpki-client