Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/3663ba-a80d-4108-8708-0b15d97ad561/1/mWsinL82Z6zid7FgBcOQctBnP88.mft
File: mWsinL82Z6zid7FgBcOQctBnP88.mft (raw, json)
Hash identifier: 97BZLriC7by6GJNes1mwWS13+PEMcpnnNu9yp8+mnmo=
Subject key identifier: E7:17:C4:F3:E5:FE:1C:0C:56:77:32:5E:2B:CA:A5:11:19:4F:B3:1E
Authority key identifier: 99:6B:22:9C:BF:36:67:AC:E2:77:B1:60:05:C3:90:72:D0:67:3F:CF
Certificate issuer: /CN=996b229cbf3667ace277b16005c39072d0673fcf
Certificate serial: 0197B745B35934CF6204AC1EEE9416CF5BF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mWsinL82Z6zid7FgBcOQctBnP88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/3663ba-a80d-4108-8708-0b15d97ad561/1/mWsinL82Z6zid7FgBcOQctBnP88.mft
Manifest number: 041B
Signing time: Sat 28 Jun 2025 16:01:27 +0000
Manifest this update: Sat 28 Jun 2025 16:01:27 +0000
Manifest next update: Sun 29 Jun 2025 16:01:27 +0000
Files and hashes: 1: YKl2f2IPF1HilabBLdWdBFhWqWU.roa (hash: Ji5xPVt5I1nXvu8659S7ksrNu2RDx/GRkGsd+dxvHXE=)
2: mWsinL82Z6zid7FgBcOQctBnP88.crl (hash: kDxl9YmB0+HYVq54mnwuFNIBTm6qSo1GjmuCLBNx2Mk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/3663ba-a80d-4108-8708-0b15d97ad561/1/mWsinL82Z6zid7FgBcOQctBnP88.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/3663ba-a80d-4108-8708-0b15d97ad561/1/mWsinL82Z6zid7FgBcOQctBnP88.mft
rsync://rpki.ripe.net/repository/DEFAULT/mWsinL82Z6zid7FgBcOQctBnP88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:b3:59:34:cf:62:04:ac:1e:ee:94:16:cf:5b:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=996b229cbf3667ace277b16005c39072d0673fcf
Validity
Not Before: Jun 28 16:01:27 2025 GMT
Not After : Jun 29 16:01:27 2025 GMT
Subject: CN=e717c4f3e5fe1c0c5677325e2bcaa511194fb31e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ba:88:b4:b7:9a:92:f0:78:8e:f1:75:25:40:
fd:c0:cb:d2:5f:63:cc:2d:ad:11:cd:96:a5:6b:33:
bd:4f:a5:36:15:3d:2d:29:dd:ae:c9:77:ca:e3:70:
bf:f8:38:a7:75:49:73:f1:40:71:2d:cf:67:98:09:
aa:51:bd:91:a2:dc:f5:8e:c1:79:6c:4f:3f:ed:44:
c2:10:24:3e:5c:4f:02:c1:c6:f1:9a:c4:46:e4:a2:
43:50:88:6a:9a:2d:82:4b:a6:9b:87:ad:0d:36:23:
d4:1c:44:61:d1:18:1b:2f:3d:5a:5d:fd:60:0b:1d:
86:e8:7a:56:71:86:04:20:05:c1:ac:c5:04:63:4d:
89:e7:0d:19:56:ea:ab:7f:33:c9:1c:31:f6:79:1c:
be:e3:5d:d8:b3:0a:fe:55:cf:7b:34:f2:c2:d9:20:
a2:3e:83:9c:58:27:ce:38:b0:1a:b9:1c:14:52:7a:
c7:11:65:33:11:c6:96:47:74:e4:23:56:59:0f:6e:
70:08:8e:73:f7:38:42:cf:0e:8a:2c:fb:01:d1:41:
b3:08:57:95:96:14:89:4f:f4:e5:d4:df:4c:e4:89:
8f:85:ad:e2:20:72:af:c0:33:0a:e1:b9:9c:bc:35:
4a:49:cd:07:e4:3d:d9:43:46:cc:b7:e0:a5:b0:0c:
14:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:17:C4:F3:E5:FE:1C:0C:56:77:32:5E:2B:CA:A5:11:19:4F:B3:1E
X509v3 Authority Key Identifier:
keyid:99:6B:22:9C:BF:36:67:AC:E2:77:B1:60:05:C3:90:72:D0:67:3F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mWsinL82Z6zid7FgBcOQctBnP88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/3663ba-a80d-4108-8708-0b15d97ad561/1/mWsinL82Z6zid7FgBcOQctBnP88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/3663ba-a80d-4108-8708-0b15d97ad561/1/mWsinL82Z6zid7FgBcOQctBnP88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:3d:8c:12:74:cf:da:b8:8b:b7:b6:59:8c:fb:89:af:2d:ef:
8f:8f:56:40:8a:90:5a:9a:01:32:ce:89:f6:96:44:09:a3:89:
e6:37:ef:b1:98:4c:2f:c3:25:1c:7d:b8:20:b1:de:c6:ba:fc:
2c:70:c6:b6:be:6f:20:c9:38:5e:fd:15:19:45:8b:44:13:0f:
81:c4:6f:4f:29:c5:27:7a:b9:01:8c:b6:8b:04:54:1f:fb:b8:
3d:47:3f:59:54:a7:fb:0f:a5:1a:ea:dd:e2:35:52:57:bb:4f:
d2:f8:db:21:2b:83:fb:cd:42:36:fe:57:a9:c0:ca:ba:66:3c:
6c:d0:2a:bc:24:da:bf:bf:7c:80:4b:8d:01:09:31:a0:34:06:
c9:fb:5f:8f:e9:7e:8e:69:72:ee:1d:ed:4d:9e:db:ad:51:e8:
42:99:a6:22:ce:90:34:dc:34:4b:88:d2:37:5a:01:b5:03:63:
70:9e:ca:92:77:10:b2:c3:00:06:30:51:16:1a:c8:56:9d:5d:
37:28:50:65:95:57:23:5c:b9:53:ac:00:ae:cf:42:93:10:eb:
f8:34:72:3f:c1:c0:5a:a3:31:1e:8c:28:46:1e:db:70:6d:5e:
d4:60:99:45:66:4a:42:7c:6c:10:47:56:b5:e7:5c:12:26:70:
50:bf:dc:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:12:05 2025 by rpki-client