Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.mft
File: _w3fP-V3IgGv94wk6X-UTDgF_2s.mft (raw, json)
Hash identifier: +i1k6MQxl3vWiArgLMZ6uctT+0pwoECzKt+S7PhMC/Q=
Subject key identifier: F4:61:1C:80:70:5D:5C:2B:3D:1D:86:A7:78:F7:E0:18:B5:DB:06:65
Authority key identifier: FF:0D:DF:3F:E5:77:22:01:AF:F7:8C:24:E9:7F:94:4C:38:05:FF:6B
Certificate issuer: /CN=ff0ddf3fe5772201aff78c24e97f944c3805ff6b
Certificate serial: 019769CEEDEE0ADF546F1F6AB1888DDCEA32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_w3fP-V3IgGv94wk6X-UTDgF_2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.mft
Manifest number: 040A
Signing time: Fri 13 Jun 2025 15:00:58 +0000
Manifest this update: Fri 13 Jun 2025 15:00:58 +0000
Manifest next update: Sat 14 Jun 2025 15:00:58 +0000
Files and hashes: 1: 9ia0_iaxbX6JryuxqnLg3hd0L3g.roa (hash: KiNlWxgmk2eySTFhfbvvmaccM60Lf3LwZy/tqN4KWhY=)
2: ASer5kiqDiVWOaPZMylwsoahAIw.roa (hash: u7jpBR9dXty+UTW4qdoR89luPMWxLAPFa0EB+Y83dzY=)
3: U6zuk58ajYVysKNz6qXWGH9vBbQ.roa (hash: 61zuuE5vE5Y4+HWAkm8iJSGF4xuX2/gytqBlot9g8YQ=)
4: _w3fP-V3IgGv94wk6X-UTDgF_2s.crl (hash: c6bEXcQPjHChhmyjPWPud0bSW0zIdmWb7YYnbwxdWKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/_w3fP-V3IgGv94wk6X-UTDgF_2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:ed:ee:0a:df:54:6f:1f:6a:b1:88:8d:dc:ea:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff0ddf3fe5772201aff78c24e97f944c3805ff6b
Validity
Not Before: Jun 13 15:00:58 2025 GMT
Not After : Jun 14 15:00:58 2025 GMT
Subject: CN=f4611c80705d5c2b3d1d86a778f7e018b5db0665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:82:05:56:bf:94:a3:7c:0d:07:43:7a:16:9a:
6e:51:fd:52:71:c8:a9:e3:05:b2:69:95:7d:71:f7:
04:31:da:c8:f3:77:37:b1:db:89:38:3b:06:cd:65:
18:c1:65:56:42:b1:96:c9:ae:b6:18:50:05:a6:8c:
f7:17:92:89:9b:00:ff:3a:de:d9:1e:f8:0d:67:e7:
20:df:ec:36:e1:5d:c7:ce:21:10:41:04:90:ca:b0:
4f:22:71:72:9d:c6:94:79:30:18:56:1d:bb:0a:b6:
68:bf:4e:0b:97:57:2f:f3:f7:59:21:1e:64:1a:13:
17:1a:e8:78:7c:76:64:df:9b:4d:8b:e8:14:67:ac:
37:23:2b:21:5c:ad:48:1c:cb:05:37:e5:9d:60:ec:
a0:aa:44:bc:61:bc:7a:ba:18:45:c9:7a:8f:0e:89:
5b:85:b0:2a:a3:a7:f4:eb:ea:d3:73:b2:2b:39:88:
74:ff:6f:39:94:db:bc:00:e2:73:d7:71:78:1a:df:
7f:71:6c:d0:41:2d:f9:4d:db:6f:35:1a:8b:e3:7f:
c0:7c:2f:a4:46:fa:16:58:50:6e:93:e2:3a:7a:07:
a5:e9:78:ae:3c:d8:6b:97:b7:3a:07:38:ea:a0:19:
53:aa:ae:50:5c:58:9d:fa:76:57:ef:2a:ef:43:97:
c8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:61:1C:80:70:5D:5C:2B:3D:1D:86:A7:78:F7:E0:18:B5:DB:06:65
X509v3 Authority Key Identifier:
keyid:FF:0D:DF:3F:E5:77:22:01:AF:F7:8C:24:E9:7F:94:4C:38:05:FF:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_w3fP-V3IgGv94wk6X-UTDgF_2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:72:0a:7a:94:ef:e8:49:e1:1e:19:3a:14:aa:c3:ea:2c:b1:
85:a5:c2:32:87:36:f5:92:64:9b:c2:4f:86:84:cb:8e:97:af:
3a:ab:21:5d:2e:18:7f:93:4c:b2:d5:3e:82:d9:1b:4d:0c:df:
7a:8f:17:6c:8d:d7:9a:40:a6:22:46:e3:f7:7d:97:7f:6e:41:
38:81:3a:a5:d0:3c:4c:c4:6f:5b:e7:ad:6f:0a:3d:08:70:10:
a4:9d:ec:70:bf:cb:be:48:91:bb:06:26:41:d7:e5:9e:df:c5:
96:c5:19:ba:8e:3e:3c:ad:d0:63:93:0a:3e:bb:2c:0a:3d:06:
4e:b1:18:a4:11:c5:ac:b8:52:68:67:45:5e:27:15:18:c9:d2:
10:d0:43:4e:98:42:10:79:7c:a8:f2:3f:13:ba:04:7a:29:33:
72:b4:cc:77:34:06:81:9a:68:68:05:d5:22:66:a4:a6:ec:4f:
5b:2c:98:a4:e1:e2:1e:6f:6d:53:7e:e5:ba:ab:e2:69:bd:b5:
0d:ae:10:13:94:48:57:d3:6c:a7:df:62:4c:37:2b:58:55:ee:
3d:54:a7:42:0e:dc:9d:83:e7:51:c3:9e:53:15:8a:72:92:56:
c3:47:98:0d:38:c0:76:20:44:c2:79:16:b6:61:8e:58:58:f9:
fe:f5:4f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:07:10 2025 by rpki-client