Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.mft
File: sIWATbFT63JMWFV8eTWcRAggVVA.mft (raw, json)
Hash identifier: WV5kYnSsjbUx/liN9edvKOMbooHZ4CInxI+GHIjTSrc=
Subject key identifier: 32:15:0C:D6:CE:D8:2B:2D:78:70:AE:4F:6B:3E:0E:F3:53:A4:35:C9
Authority key identifier: B0:85:80:4D:B1:53:EB:72:4C:58:55:7C:79:35:9C:44:08:20:55:50
Certificate issuer: /CN=b085804db153eb724c58557c79359c4408205550
Certificate serial: 0197B7B33B3FF78C49F46C16D43EDF06349D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sIWATbFT63JMWFV8eTWcRAggVVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.mft
Manifest number: 0491
Signing time: Sat 28 Jun 2025 18:01:05 +0000
Manifest this update: Sat 28 Jun 2025 18:01:05 +0000
Manifest next update: Sun 29 Jun 2025 18:01:05 +0000
Files and hashes: 1: 18TNS4gBaAj1nBKZLGQyvBGXDAA.roa (hash: yG6kNp39rMwW08RfUJ3Cw47Eb4R/ZRHq/FbYcN4tnj0=)
2: sIWATbFT63JMWFV8eTWcRAggVVA.crl (hash: o5iuZbOMkTit0bARLHhXq75wSUI05hNhun1O37orXXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sIWATbFT63JMWFV8eTWcRAggVVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:3b:3f:f7:8c:49:f4:6c:16:d4:3e:df:06:34:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b085804db153eb724c58557c79359c4408205550
Validity
Not Before: Jun 28 18:01:05 2025 GMT
Not After : Jun 29 18:01:05 2025 GMT
Subject: CN=32150cd6ced82b2d7870ae4f6b3e0ef353a435c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cc:d7:60:12:3e:6c:c6:95:3a:2d:ec:bb:ee:
31:ad:73:45:fe:09:01:33:3a:b5:07:17:6b:5f:93:
1c:12:8c:8f:76:75:7d:37:bd:2f:04:ba:ff:55:5a:
3f:55:05:80:46:e9:04:95:42:95:e8:c6:89:de:ad:
e6:35:9a:10:f0:30:62:1a:5d:dc:52:09:e7:c0:e2:
7a:8b:c7:2b:45:fd:52:58:4d:15:bf:36:06:bf:47:
bd:3d:3f:34:84:7f:4f:df:d1:45:32:21:37:59:67:
a0:7e:6a:b3:c4:10:89:fa:2b:5e:fb:77:bc:e3:c1:
58:e0:c2:4a:be:0b:d7:2d:4e:11:41:80:55:bf:12:
ee:fc:89:42:a0:3f:75:b9:ca:55:2a:e9:d1:e6:1e:
d9:71:62:ed:2a:ff:a9:a3:59:cc:1c:08:e6:9c:9e:
a8:ad:39:64:20:0e:e1:d8:81:34:df:61:85:5e:47:
f1:4f:91:50:45:88:a3:d9:16:2d:33:2c:91:0a:b5:
48:da:70:72:2e:69:d8:41:ad:c4:a7:21:ec:c6:87:
ac:eb:8d:ab:93:94:2b:a7:84:6b:c3:0d:14:08:d2:
35:71:c3:fa:f9:35:c4:d2:e6:9b:d9:6b:d3:4c:62:
7f:d5:14:cc:74:b1:31:48:fa:ff:66:1c:e8:a0:ed:
7f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:15:0C:D6:CE:D8:2B:2D:78:70:AE:4F:6B:3E:0E:F3:53:A4:35:C9
X509v3 Authority Key Identifier:
keyid:B0:85:80:4D:B1:53:EB:72:4C:58:55:7C:79:35:9C:44:08:20:55:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sIWATbFT63JMWFV8eTWcRAggVVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:c0:26:ac:f6:36:e0:47:28:8b:a0:b4:b0:ed:a7:ba:a2:ce:
dc:be:c4:67:7c:47:9b:3a:a2:e8:05:66:87:00:3e:96:6b:5f:
c4:75:51:99:50:ca:63:74:79:af:cb:b1:00:26:99:0b:f9:32:
e2:ca:ee:87:f0:84:fd:3c:3f:bf:70:4a:0e:c5:d7:7b:30:10:
5b:57:f7:8b:53:ca:21:78:c1:cc:ac:15:cf:65:91:fe:50:c9:
00:84:3d:91:86:f5:0b:21:0f:53:c3:f1:e8:15:d7:62:19:d2:
3f:eb:11:17:16:4f:59:cf:cb:c6:6f:59:28:d4:3b:ff:1e:85:
cc:e2:16:43:7d:81:58:a0:a3:ce:e7:a7:82:8b:c9:68:3e:27:
71:22:2f:1d:25:f9:e1:ef:14:4b:47:57:fa:eb:81:df:14:c6:
4a:14:33:9d:74:ac:06:ad:cc:55:24:50:6e:ac:4b:2f:70:ef:
ea:61:b3:c3:9c:50:e8:23:61:43:dc:84:bf:b6:52:64:ca:4f:
70:30:29:d7:8b:0f:d3:af:a7:5e:3b:cb:6b:3a:1e:f1:c3:2e:
65:62:b8:d0:78:c2:9d:2e:55:6b:10:ba:df:94:36:f9:53:4a:
dc:5f:97:31:40:f0:ad:17:5d:d0:ea:53:ec:e5:4f:de:3c:f9:
4c:fe:c2:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:33:40 2025 by rpki-client