Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.mft
File: fWG4N46PNorkmY1Rw6ms5kFI1s0.mft (raw, json)
Hash identifier: z8aIDA7OVtKXjT6GFwxc2ugNSqXm79i+YpZa3yLaPtc=
Subject key identifier: 06:1A:9C:EC:B7:8C:D1:5D:F0:DE:60:C2:E4:07:C6:6D:68:7A:20:AA
Authority key identifier: 7D:61:B8:37:8E:8F:36:8A:E4:99:8D:51:C3:A9:AC:E6:41:48:D6:CD
Certificate issuer: /CN=7d61b8378e8f368ae4998d51c3a9ace64148d6cd
Certificate serial: 0197C26D82E72E3D9CC1C04ADA6F3AC05562
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fWG4N46PNorkmY1Rw6ms5kFI1s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.mft
Manifest number: 15CE
Signing time: Mon 30 Jun 2025 20:00:46 +0000
Manifest this update: Mon 30 Jun 2025 20:00:46 +0000
Manifest next update: Tue 01 Jul 2025 20:00:46 +0000
Files and hashes: 1: fWG4N46PNorkmY1Rw6ms5kFI1s0.crl (hash: 4ILcvXFADkUxGKfDe0Rc/pO2D7uKtTs21E94w/Wm+P4=)
2: twpPI3s0M0CHfpsRtqw1y94__1Q.roa (hash: 9YvNSCEe8cpoY/bygIYeVTlYIEufzY0ULaNZDfOCQKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fWG4N46PNorkmY1Rw6ms5kFI1s0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 20:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:6d:82:e7:2e:3d:9c:c1:c0:4a:da:6f:3a:c0:55:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d61b8378e8f368ae4998d51c3a9ace64148d6cd
Validity
Not Before: Jun 30 20:00:46 2025 GMT
Not After : Jul 1 20:00:46 2025 GMT
Subject: CN=061a9cecb78cd15df0de60c2e407c66d687a20aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8e:47:d3:c6:f7:b4:63:2a:89:89:e5:a2:ca:
a5:a3:af:6e:4b:74:fb:06:9a:75:05:48:76:84:5e:
81:f4:96:1e:43:c5:e5:b5:b5:cc:31:3d:a5:f1:29:
32:1b:6f:9b:4b:f2:29:67:2f:e4:6d:de:8d:c3:1e:
24:2d:1b:8b:e9:90:17:b7:60:63:52:b1:ab:79:87:
8a:95:49:78:09:31:41:8d:8f:3c:7e:0a:70:96:a4:
69:48:ac:7d:27:b5:38:9a:63:e8:9d:b2:11:44:80:
73:0f:59:9c:40:67:99:a1:56:36:b3:4e:0f:b2:d0:
77:41:58:14:b4:dd:f6:70:19:ef:37:e8:ac:08:f5:
8d:4e:a0:64:fb:7a:4a:ee:6d:e3:e7:5e:33:65:65:
d3:28:f8:06:18:9a:c1:58:4c:db:95:74:a5:b6:f5:
b9:ef:48:a6:3f:69:76:cb:b3:ab:d1:e1:17:87:ee:
08:05:b7:6b:0b:1a:5d:57:7a:d5:a5:e4:f8:75:99:
8b:b5:52:0b:03:b6:d9:01:20:54:82:60:74:ca:a0:
09:f2:43:f8:71:be:0d:07:06:b8:72:db:15:0e:1d:
a8:61:51:b1:46:65:ba:d5:37:d2:4f:fa:a4:ed:c2:
31:23:da:8a:9f:03:7c:1c:d3:0d:0a:6f:ae:64:ff:
39:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:1A:9C:EC:B7:8C:D1:5D:F0:DE:60:C2:E4:07:C6:6D:68:7A:20:AA
X509v3 Authority Key Identifier:
keyid:7D:61:B8:37:8E:8F:36:8A:E4:99:8D:51:C3:A9:AC:E6:41:48:D6:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWG4N46PNorkmY1Rw6ms5kFI1s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:d8:f7:e1:89:7f:7c:a6:14:99:b4:d1:a7:66:a8:e9:2a:fb:
9c:8d:b5:34:82:a1:10:bb:4a:a0:37:60:23:c8:d4:ec:db:f5:
c9:e0:a7:55:ef:3d:7a:af:de:eb:93:4e:18:ae:22:c2:e2:ae:
73:cb:d5:99:4f:0d:01:92:fd:16:b5:93:f2:50:b8:39:df:3f:
27:2c:6e:cf:46:61:e0:c9:79:c1:0b:cc:92:8b:6e:c3:d2:4c:
c1:d5:21:21:82:83:e2:d2:7c:24:fe:50:22:35:fd:22:38:a9:
c7:14:2a:57:36:aa:cd:2d:b1:30:57:ce:89:51:6c:2e:6f:39:
51:14:b2:45:cc:52:21:80:95:96:70:79:a4:ca:a5:a0:95:bf:
58:88:eb:86:d9:76:85:82:6e:23:c9:17:b8:53:f1:55:02:d1:
a4:d0:06:12:f9:20:84:d7:1f:ab:36:48:60:28:b0:30:5a:f4:
31:cb:d7:60:a3:82:6a:88:ca:4d:6d:8d:c7:ee:4f:48:22:54:
59:0d:78:c4:0a:43:84:3d:ad:42:12:8f:b8:b3:23:27:56:6d:
4d:c5:b8:b9:3a:dc:3a:86:79:cf:68:00:75:62:36:c3:a6:cd:
f5:ea:8f:9f:89:45:fd:bb:54:b3:0d:0b:26:82:bf:1e:00:6e:
27:ff:e6:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 03:14:43 2025 by rpki-client