Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/d2b23b-63e2-4cc0-a87e-cd0b26b4ecb8/1/_-W67rcNfV5-7SxR09WEe7NhtFU.mft
File: _-W67rcNfV5-7SxR09WEe7NhtFU.mft (raw, json)
Hash identifier: 3s9yA+PZGqasNrW3njvGglBVBW0+18+NWNG7IsONwvQ=
Subject key identifier: F1:7B:4C:45:72:5A:D8:B3:D2:14:78:2F:83:C4:C4:C5:14:47:6F:BB
Authority key identifier: FF:E5:BA:EE:B7:0D:7D:5E:7E:ED:2C:51:D3:D5:84:7B:B3:61:B4:55
Certificate issuer: /CN=ffe5baeeb70d7d5e7eed2c51d3d5847bb361b455
Certificate serial: 0197B77C7AE55ADCED00371F72CB06FFE8CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-W67rcNfV5-7SxR09WEe7NhtFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/d2b23b-63e2-4cc0-a87e-cd0b26b4ecb8/1/_-W67rcNfV5-7SxR09WEe7NhtFU.mft
Manifest number: 0134
Signing time: Sat 28 Jun 2025 17:01:17 +0000
Manifest this update: Sat 28 Jun 2025 17:01:17 +0000
Manifest next update: Sun 29 Jun 2025 17:01:17 +0000
Files and hashes: 1: _-W67rcNfV5-7SxR09WEe7NhtFU.crl (hash: OX0WQqDkiCZCk5Y9i0fEBgJvPf8Yn6BbTXVk8JLSkxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/d2b23b-63e2-4cc0-a87e-cd0b26b4ecb8/1/_-W67rcNfV5-7SxR09WEe7NhtFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/d2b23b-63e2-4cc0-a87e-cd0b26b4ecb8/1/_-W67rcNfV5-7SxR09WEe7NhtFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_-W67rcNfV5-7SxR09WEe7NhtFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:7a:e5:5a:dc:ed:00:37:1f:72:cb:06:ff:e8:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffe5baeeb70d7d5e7eed2c51d3d5847bb361b455
Validity
Not Before: Jun 28 17:01:17 2025 GMT
Not After : Jun 29 17:01:17 2025 GMT
Subject: CN=f17b4c45725ad8b3d214782f83c4c4c514476fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b6:bc:9d:23:e1:92:5f:fe:5a:61:fd:de:41:
d7:8e:76:20:bc:5f:fd:f7:54:aa:be:98:c1:39:53:
ec:8e:37:78:84:c3:e5:b3:49:37:8e:e6:59:c2:e0:
08:1d:8f:fc:1c:7e:a2:5e:1c:19:e7:a6:f9:37:47:
f4:c6:d5:93:72:a5:ff:66:57:e1:53:d6:6a:b7:70:
0e:b3:65:a0:fd:be:d9:6f:4f:85:c2:9d:fd:a8:e9:
55:26:b5:2e:79:f8:30:78:cd:fa:df:c5:45:4e:20:
54:b0:67:63:19:19:2c:8d:f1:3c:3b:5e:68:20:1f:
94:e2:07:2b:d8:5e:e0:b4:17:35:6e:59:fc:8d:1c:
04:16:75:6a:f3:46:6b:37:15:a5:1b:8f:75:7f:bd:
9c:49:07:41:92:41:d1:09:d3:fc:b6:32:5e:16:19:
29:70:58:28:3d:e0:f4:6a:77:38:36:06:0d:ab:97:
a1:98:26:85:a2:47:83:43:00:68:c2:fa:9a:ca:95:
9e:24:d3:da:1b:96:1a:80:15:b6:ca:23:7f:52:d3:
ab:af:d6:1b:d6:4e:38:5e:80:e3:c8:34:76:b1:5d:
04:dc:63:dc:63:4b:80:1e:58:d9:11:08:2b:23:8c:
67:4f:78:95:51:2c:53:11:d8:de:a8:52:29:82:f0:
0d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:7B:4C:45:72:5A:D8:B3:D2:14:78:2F:83:C4:C4:C5:14:47:6F:BB
X509v3 Authority Key Identifier:
keyid:FF:E5:BA:EE:B7:0D:7D:5E:7E:ED:2C:51:D3:D5:84:7B:B3:61:B4:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-W67rcNfV5-7SxR09WEe7NhtFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d2b23b-63e2-4cc0-a87e-cd0b26b4ecb8/1/_-W67rcNfV5-7SxR09WEe7NhtFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d2b23b-63e2-4cc0-a87e-cd0b26b4ecb8/1/_-W67rcNfV5-7SxR09WEe7NhtFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:40:02:30:f8:62:16:b1:d2:3a:ef:6a:2b:25:67:af:39:6b:
7b:da:76:20:70:db:b3:61:16:5d:00:c5:64:f9:8a:f6:57:52:
6c:a7:9d:74:d8:21:9c:6f:51:6c:27:1c:30:b5:b0:cd:19:89:
da:b2:32:01:22:83:21:8e:9f:0b:cf:48:4d:0a:79:93:47:6b:
e3:4e:95:ae:cd:95:dc:8e:43:ab:69:34:52:9d:5d:27:4e:ad:
c8:de:82:e7:04:9d:3e:48:05:07:c5:5a:5a:f2:aa:0a:fc:44:
44:40:b2:b7:24:43:42:9d:b2:c4:bc:2d:9a:8a:90:cc:17:d4:
75:ce:01:57:19:a3:11:ee:12:b0:b3:38:9a:10:2e:62:b2:6e:
53:c2:1b:0b:52:9c:d9:db:c9:65:23:be:70:bc:e9:aa:eb:6a:
2e:34:b6:48:74:13:35:dc:ed:c1:5c:7e:31:c6:5e:2b:d6:7a:
e1:93:0e:ac:86:95:eb:f3:b1:ae:11:12:74:4c:09:2a:a7:f4:
be:6d:41:d8:03:f6:c2:d4:ab:2d:94:e0:c1:92:75:24:81:89:
8b:45:87:4f:82:9b:bc:e3:af:ad:f0:35:b3:eb:3c:73:c8:da:
84:c3:f1:40:d8:51:10:32:da:cf:63:5b:4c:14:1d:e7:3e:9f:
6d:e0:a0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:26:22 2025 by rpki-client