Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.mft
File: w7Q1HgpJXCbv3G5BXwuxifu9bt8.mft (raw, json)
Hash identifier: uEcQrXIa5/c5hHNTYGfsqz5n7Hd248RXP/eJLrQR15Y=
Subject key identifier: 86:43:2B:08:5E:7D:2D:8F:EF:12:2A:44:71:27:17:40:31:36:33:54
Authority key identifier: C3:B4:35:1E:0A:49:5C:26:EF:DC:6E:41:5F:0B:B1:89:FB:BD:6E:DF
Certificate issuer: /CN=c3b4351e0a495c26efdc6e415f0bb189fbbd6edf
Certificate serial: 01977E67EDBB8AA6EF62F0C8EE30E0E71A73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w7Q1HgpJXCbv3G5BXwuxifu9bt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.mft
Manifest number: 159A
Signing time: Tue 17 Jun 2025 15:00:29 +0000
Manifest this update: Tue 17 Jun 2025 15:00:29 +0000
Manifest next update: Wed 18 Jun 2025 15:00:29 +0000
Files and hashes: 1: 4mL1zKKLOxGn25fl7m9On5y2ZYA.roa (hash: 9EgYMO8cQ5z/aiE1aC8zT4GRbu01MVUJ2bPVFVsvu8U=)
2: jdL88fKfBRcDZQd2LJ3KQAGZWz0.roa (hash: Rtx6TLOA/PMGBKD0sU4jO9D8OJMlb2E7ArhYwQT50vQ=)
3: w7Q1HgpJXCbv3G5BXwuxifu9bt8.crl (hash: sPVSVXgi+i11eItGaZ6C5gG40jd5Qs/cXWHHw0Uderw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w7Q1HgpJXCbv3G5BXwuxifu9bt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 13:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7e:67:ed:bb:8a:a6:ef:62:f0:c8:ee:30:e0:e7:1a:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3b4351e0a495c26efdc6e415f0bb189fbbd6edf
Validity
Not Before: Jun 17 15:00:29 2025 GMT
Not After : Jun 18 15:00:29 2025 GMT
Subject: CN=86432b085e7d2d8fef122a447127174031363354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6f:6e:7e:f5:f0:83:e5:ab:6b:80:13:e5:87:
7c:d6:fb:26:b4:2b:c4:b9:03:16:1f:77:0a:0b:54:
f5:ba:d4:76:55:ef:99:42:88:91:95:ab:80:88:1e:
e6:56:ab:20:ce:5d:49:d0:d4:81:6f:d0:ec:64:d3:
53:3f:8c:49:12:36:17:10:bc:af:79:9c:32:c5:9e:
da:be:0f:45:4f:87:d2:73:c7:f4:91:27:2b:92:d1:
37:c8:d1:aa:dc:f3:1b:20:91:33:c9:2f:9e:8c:28:
c4:ba:ec:69:f9:32:ab:96:94:78:c0:6d:bf:b8:9d:
64:e9:77:d1:1c:5b:2a:4a:fe:4f:9c:7b:02:30:85:
3d:bc:30:ab:e4:80:42:ea:47:c6:d9:10:d5:11:f9:
46:18:7b:16:27:e7:1c:e5:7e:a8:1b:7a:05:d6:a6:
8a:28:49:7d:50:45:34:7b:57:d2:79:2d:3c:06:c2:
94:17:ba:97:d9:69:c7:5f:ca:30:bb:64:69:2b:c0:
73:fa:5a:02:dd:59:1c:ae:91:4a:9f:b5:c2:b7:8f:
ca:61:60:89:14:d4:86:e4:48:f3:75:f3:83:e5:3c:
b0:f9:0f:48:a7:fd:ac:42:e1:23:a0:c7:4c:5f:bb:
e0:1e:88:a0:87:7b:c2:16:e3:63:71:3a:74:8b:0a:
2c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:43:2B:08:5E:7D:2D:8F:EF:12:2A:44:71:27:17:40:31:36:33:54
X509v3 Authority Key Identifier:
keyid:C3:B4:35:1E:0A:49:5C:26:EF:DC:6E:41:5F:0B:B1:89:FB:BD:6E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7Q1HgpJXCbv3G5BXwuxifu9bt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:10:8d:64:88:16:7c:98:cb:f8:1c:3f:a7:49:34:4e:6a:02:
d6:1a:b5:07:8e:59:bc:22:15:56:8d:f7:5d:73:07:cd:73:6c:
d6:f0:0b:95:c8:6e:af:92:e8:ae:20:13:85:3c:16:3e:4f:89:
5c:70:b4:ef:2f:a5:7f:3f:41:9d:87:c7:45:f7:fc:ce:70:2a:
e9:4c:66:8a:38:43:1c:55:1e:76:dc:6a:d7:34:84:5a:c5:8f:
60:ce:12:c1:02:9a:47:23:2d:89:48:eb:ea:ab:59:a3:44:ac:
b1:57:b5:d9:45:7d:19:d9:e6:71:c0:64:cd:09:3b:09:79:1d:
d5:39:ba:03:55:b1:5a:b7:3c:27:84:b8:a7:8b:d4:a9:71:9e:
0a:04:b4:67:aa:00:cb:f6:4c:40:e7:1f:2c:a5:00:e6:ce:26:
42:e4:6d:e3:b3:e6:34:0c:fa:a7:a2:16:c0:9b:b7:d0:63:ef:
1b:30:88:a0:33:55:43:59:20:58:0c:cf:99:96:8d:6b:53:af:
a7:ad:2f:3d:d1:08:7c:cb:e1:4c:46:3c:24:67:d8:5e:29:dd:
b9:7b:63:88:6b:fd:39:81:a2:1c:64:86:fe:af:3c:32:87:67:
c9:4c:96:89:ec:fd:49:18:c7:d9:e9:6b:4e:af:f5:92:ef:ce:
94:f0:75:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 20:10:57 2025 by rpki-client