Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft
File: r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft (raw, json)
Hash identifier: +1440gGFzwTZiCDqbgJC/OQtD8SiuOI1usQVWxL/gUQ=
Subject key identifier: 65:A0:24:F9:66:33:8D:BE:CA:4D:78:67:2D:F6:73:E5:08:19:5B:AA
Authority key identifier: AF:53:16:FC:4A:83:B3:D0:3E:29:75:F8:BE:C2:70:CB:0F:4E:FB:1D
Certificate issuer: /CN=af5316fc4a83b3d03e2975f8bec270cb0f4efb1d
Certificate serial: 01977308729C0D54FF62EBA908FD8A981995
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1MW_EqDs9A-KXX4vsJwyw9O-x0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft
Manifest number: 069C
Signing time: Sun 15 Jun 2025 10:00:22 +0000
Manifest this update: Sun 15 Jun 2025 10:00:22 +0000
Manifest next update: Mon 16 Jun 2025 10:00:22 +0000
Files and hashes: 1: 3hblAUbohBwFT91IssPjV90kLNw.roa (hash: 38EdVnlMAGIlx0Mlz1graFZq4XBH6eOlqF04LdXhHB4=)
2: 3u-LFDYOPDKUR_aD9yRJMe6LFho.roa (hash: euYR+CNCm6M5QEu0e13mte8Lec7fxC8lashK6MZRo8E=)
3: r1MW_EqDs9A-KXX4vsJwyw9O-x0.crl (hash: ovFvUH4DPNLKpPy5CgRpMXnb10r/8sfC2/DjDQFNdrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft
rsync://rpki.ripe.net/repository/DEFAULT/r1MW_EqDs9A-KXX4vsJwyw9O-x0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:08:72:9c:0d:54:ff:62:eb:a9:08:fd:8a:98:19:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af5316fc4a83b3d03e2975f8bec270cb0f4efb1d
Validity
Not Before: Jun 15 10:00:22 2025 GMT
Not After : Jun 16 10:00:22 2025 GMT
Subject: CN=65a024f966338dbeca4d78672df673e508195baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:69:08:70:5f:2f:a8:7a:0d:00:c4:77:a6:50:
1d:92:3a:e3:d9:ac:71:13:32:7e:d6:d3:fd:e5:a4:
1a:e8:e3:3b:14:f5:82:ae:eb:15:92:db:b7:c8:fa:
1b:9a:ec:0f:dd:6e:d2:76:51:19:29:0c:2e:d2:2a:
f8:86:3f:5c:0b:6d:fa:24:6c:3b:c7:6d:c7:f9:5b:
3b:fa:a6:4c:0e:45:f5:fe:30:24:24:d7:6f:94:9c:
bf:69:5e:71:fb:e7:aa:f9:d4:60:34:88:98:77:eb:
fa:53:38:14:14:86:2d:04:c9:af:43:86:08:49:3e:
4f:82:45:67:19:e2:ed:76:77:1f:4c:0b:d4:f4:e9:
9b:a1:12:a1:58:7c:43:fc:c9:9c:90:13:f9:e1:4a:
6a:0c:9c:6c:ba:08:94:e5:5b:02:71:68:4e:0f:76:
92:f0:10:64:ca:32:ae:0c:60:89:72:a7:06:2d:3d:
69:39:42:63:53:9c:e6:4b:0c:a0:b6:8d:b3:7e:be:
6b:16:89:fb:ef:9e:4c:69:6f:57:23:bc:23:58:0e:
24:e2:f0:72:e8:c0:31:48:b7:0d:a2:ad:6d:39:8f:
04:d5:cd:45:67:c0:98:30:15:e3:89:19:d6:fd:ce:
dc:9a:20:2f:a6:4a:fd:6a:01:3a:f8:34:56:9a:2f:
d1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A0:24:F9:66:33:8D:BE:CA:4D:78:67:2D:F6:73:E5:08:19:5B:AA
X509v3 Authority Key Identifier:
keyid:AF:53:16:FC:4A:83:B3:D0:3E:29:75:F8:BE:C2:70:CB:0F:4E:FB:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1MW_EqDs9A-KXX4vsJwyw9O-x0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:0b:8b:21:09:3c:b6:2f:16:fb:69:14:0c:d8:3b:61:10:e2:
86:33:55:7f:b4:17:b9:e3:8c:64:d0:9f:c2:5b:d9:1e:f8:70:
68:13:1b:11:7a:8d:c3:4a:09:f8:a6:7a:42:8e:c8:c0:53:29:
17:8d:0d:7b:41:ac:ad:03:c4:82:ab:c4:99:ec:92:b6:ec:d8:
ca:e0:47:97:2e:7c:26:12:e4:5e:ef:a1:a5:e4:4d:c8:e5:18:
d4:78:f1:a2:23:5d:32:e2:ab:06:22:2b:c5:8b:3d:6b:a3:47:
e2:0b:ef:b7:ee:92:e2:d4:de:5a:f0:ef:1b:fd:81:63:4a:cd:
e2:c5:8f:5a:1b:68:90:55:6f:e2:67:7a:66:47:4c:55:f0:86:
4e:82:d9:df:1f:71:e8:69:a2:f8:d9:4e:d8:98:19:85:85:52:
05:35:20:f7:33:cb:20:1e:ca:81:e9:4f:c2:3e:12:d3:7e:88:
fa:07:27:6f:1e:14:79:93:4b:15:3c:66:03:6f:96:4e:1a:a9:
ad:43:13:a2:47:f5:5e:cc:32:50:91:3d:4d:0b:7e:ec:20:54:
11:9d:90:f2:09:84:06:aa:35:30:3f:dc:71:78:c9:9e:dd:66:
1b:75:4f:6b:ca:92:e2:01:98:58:b0:da:dd:c3:b4:2d:99:5a:
cd:b9:a2:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:22:20 2025 by rpki-client