Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
File: rw9am9KtHpaGXwDQhSK5qtPpGk0.mft (raw, json)
Hash identifier: gDk+MFh32MJ1on9H9UMP3WP+cECZmxEmfBnCwZh5feg=
Subject key identifier: F0:76:7A:A2:FB:51:3C:C9:25:0A:38:03:2A:25:7B:92:E8:E5:BE:53
Authority key identifier: AF:0F:5A:9B:D2:AD:1E:96:86:5F:00:D0:85:22:B9:AA:D3:E9:1A:4D
Certificate issuer: /CN=af0f5a9bd2ad1e96865f00d08522b9aad3e91a4d
Certificate serial: 0197BA7DDD3EC2E0724AB26121F0A93AC39D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
Manifest number: 12CE
Signing time: Sun 29 Jun 2025 07:01:40 +0000
Manifest this update: Sun 29 Jun 2025 07:01:40 +0000
Manifest next update: Mon 30 Jun 2025 07:01:40 +0000
Files and hashes: 1: 0MOXDUv4IarmUDXJ_6_NJ_DNTjE.roa (hash: rLEoAgpILfeLseNAIpfgmASNTffHIHsRIbvYzKEOLhA=)
2: GoeAUL2QksRS16LiLx9M0SmG6h8.roa (hash: Lp7ZvoPe3FFQc8UoBl571bW941fIgYX0UUaKwSRXqLI=)
3: p9gQbHg8IpMtNLW0NQ42q_UAiDc.roa (hash: t3Lsla/WvydRj60ad7MeBwokpBl+kvF1NmkVZ9213jY=)
4: rw9am9KtHpaGXwDQhSK5qtPpGk0.crl (hash: FoHHdyAaPbbzy36T1rTWYg7c5s+1p4517LQ4qVEcjGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7d:dd:3e:c2:e0:72:4a:b2:61:21:f0:a9:3a:c3:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af0f5a9bd2ad1e96865f00d08522b9aad3e91a4d
Validity
Not Before: Jun 29 07:01:40 2025 GMT
Not After : Jun 30 07:01:40 2025 GMT
Subject: CN=f0767aa2fb513cc9250a38032a257b92e8e5be53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c4:10:b5:f5:5b:6a:6b:53:9c:12:fa:8a:b3:
7f:28:33:aa:18:23:f5:9c:37:36:af:ea:35:43:31:
3a:d7:ec:65:01:86:0f:53:0c:69:9d:97:17:c9:8b:
ed:17:7c:ee:61:84:cd:88:83:48:d5:ff:d0:a2:d5:
d2:ed:a7:a7:1b:74:d9:11:cb:b0:74:82:72:b4:44:
5f:3f:df:9b:e4:83:0f:4e:93:06:ff:7b:67:76:6c:
69:ac:5c:1f:b9:4a:d9:48:30:e3:1e:1c:51:78:3d:
26:2c:f3:62:8b:38:94:74:2d:38:93:cb:4c:b5:ed:
db:2e:99:dd:d0:61:62:19:1d:57:c2:44:cf:42:40:
52:cc:5d:49:7c:a5:81:ed:48:2a:64:cd:08:3f:e7:
67:54:2e:84:0d:d5:fc:6a:90:a6:51:7b:e8:f8:4f:
05:78:fc:d6:c6:cd:71:7a:db:eb:bb:7a:82:5c:b2:
0e:e9:07:d5:cc:3c:18:65:c4:c1:69:53:5a:51:b9:
d5:ba:5b:f4:38:b5:83:ae:77:3d:8f:be:d3:7e:6a:
22:89:f9:33:c3:bd:5f:a2:96:0c:d6:11:eb:c1:87:
ee:bb:93:c1:aa:5a:2f:74:9c:15:34:93:d0:22:ca:
af:76:cd:42:ea:05:7a:85:91:58:67:89:15:87:65:
f4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:76:7A:A2:FB:51:3C:C9:25:0A:38:03:2A:25:7B:92:E8:E5:BE:53
X509v3 Authority Key Identifier:
keyid:AF:0F:5A:9B:D2:AD:1E:96:86:5F:00:D0:85:22:B9:AA:D3:E9:1A:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:3e:13:76:dc:9d:0c:58:58:0a:13:86:11:64:ec:9d:b6:82:
5e:36:4a:fb:f8:2b:83:39:29:86:a8:97:73:59:61:da:61:e0:
11:83:3d:da:c9:f4:cd:5d:ea:92:bb:68:aa:1d:3e:83:7f:b6:
bc:30:2f:fd:cd:6d:5f:8f:08:da:b8:b1:77:6e:96:c4:ad:29:
26:58:b5:15:ac:02:d4:57:ca:28:01:01:79:9d:15:65:53:e8:
70:a2:2e:38:78:27:c7:28:23:a3:0b:81:fb:cd:b9:35:0c:93:
6c:00:37:2a:ae:b1:3a:79:72:44:a5:d2:7f:c8:6e:77:63:c5:
ee:89:7c:07:e8:16:59:8c:74:ee:38:47:56:9f:f4:b3:81:1b:
14:e1:48:83:4d:48:17:14:14:99:46:e2:c9:22:b5:f8:50:c8:
23:80:2c:15:5b:63:bb:4b:13:1b:85:30:94:c5:6f:1c:d6:bd:
32:a0:dd:75:a8:52:b4:25:14:c0:49:33:06:20:7c:29:ac:f1:
7a:20:32:96:f3:6d:f2:27:65:c0:4f:eb:04:64:c7:d7:30:d6:
3f:e6:1f:6a:63:d6:fc:03:59:c1:c4:8f:ae:20:03:69:6a:b1:
f5:1b:7b:c6:9c:a1:a3:82:3a:e1:5c:d5:80:13:ef:52:9c:4b:
47:5d:19:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:57:19 2025 by rpki-client