Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.mft
File: Ip-w-z0njhsoCnd94gDvvQi6rDA.mft (raw, json)
Hash identifier: 5qlg1roL0pCSRcJzAEQSlldPaGTsxsCK4CYCNmZv9gs=
Subject key identifier: 24:AE:0E:90:71:14:8A:BD:EC:DC:BC:88:34:1E:C9:2D:8A:99:8A:E7
Authority key identifier: 22:9F:B0:FB:3D:27:8E:1B:28:0A:77:7D:E2:00:EF:BD:08:BA:AC:30
Certificate issuer: /CN=229fb0fb3d278e1b280a777de200efbd08baac30
Certificate serial: 0197722D246A751A92AA568931009C7255C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ip-w-z0njhsoCnd94gDvvQi6rDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.mft
Manifest number: 0808
Signing time: Sun 15 Jun 2025 06:00:50 +0000
Manifest this update: Sun 15 Jun 2025 06:00:50 +0000
Manifest next update: Mon 16 Jun 2025 06:00:50 +0000
Files and hashes: 1: EdKpa32IZ9Dnd3k-vmeHaMU23Tw.roa (hash: WGOFdfPIgmzQx9aGUgM6u6XYxnkTJOLa0M2Z4HLrsFA=)
2: Ip-w-z0njhsoCnd94gDvvQi6rDA.crl (hash: qdgm3/1e199PpNa9Div5aRQ+7SDKW1gcoVmZKeFaxns=)
3: TaMd7DA-6NrsYwAIJaSvClB4fpo.roa (hash: dkRPf4s5CoCdHNuMtPMADul0c0mdFRvVK8/5OUkpYlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ip-w-z0njhsoCnd94gDvvQi6rDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:2d:24:6a:75:1a:92:aa:56:89:31:00:9c:72:55:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=229fb0fb3d278e1b280a777de200efbd08baac30
Validity
Not Before: Jun 15 06:00:50 2025 GMT
Not After : Jun 16 06:00:50 2025 GMT
Subject: CN=24ae0e9071148abdecdcbc88341ec92d8a998ae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:97:2b:76:d6:c8:89:3b:60:0b:e4:e5:6c:60:
e4:1c:a6:ad:d9:10:ef:56:bd:c5:d2:0b:fc:98:de:
ff:ee:5f:22:29:3c:fd:42:a9:c4:3b:c4:bd:b0:69:
f8:71:b9:75:07:df:77:54:ba:44:f1:38:64:16:54:
3b:e9:67:73:23:c0:d5:d8:52:79:77:4b:ff:0c:ef:
2f:9f:e9:36:a0:66:0b:60:1e:b9:7e:e4:53:12:4b:
60:e1:f2:26:c3:b5:44:5a:e3:d3:8e:19:69:ca:d3:
23:df:64:fa:22:f7:5f:6c:ca:15:ce:96:ee:01:b9:
b0:7b:4f:2e:1d:2d:f0:37:f0:f7:94:a4:29:63:f7:
76:fa:55:52:14:e1:a2:f1:6a:55:ec:7a:2b:03:84:
63:e4:42:f9:7d:1c:f6:70:41:1d:66:24:b6:5a:49:
05:79:51:d3:21:2e:e3:2c:ca:9c:53:75:29:e9:e7:
50:52:f5:79:37:e4:88:48:e6:83:80:31:f4:ea:27:
fd:63:27:9d:37:8c:1b:82:d8:bc:93:97:94:51:06:
6e:f7:f2:cf:40:6e:05:fb:bd:ee:8d:59:71:18:42:
66:ac:ff:67:43:1f:8f:06:a9:dc:c4:66:d4:2d:53:
39:e2:20:cf:b9:a6:8b:6e:14:59:48:2b:3f:d6:77:
21:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:AE:0E:90:71:14:8A:BD:EC:DC:BC:88:34:1E:C9:2D:8A:99:8A:E7
X509v3 Authority Key Identifier:
keyid:22:9F:B0:FB:3D:27:8E:1B:28:0A:77:7D:E2:00:EF:BD:08:BA:AC:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ip-w-z0njhsoCnd94gDvvQi6rDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:93:15:db:34:5e:c7:78:80:0e:2c:85:99:42:d2:f0:a0:30:
57:e5:8f:3f:e4:53:db:50:df:37:6e:9e:2b:cb:05:b6:61:66:
03:88:14:9d:ff:16:ac:77:16:a4:91:84:71:a5:e1:02:94:f0:
3b:25:35:66:df:e4:d3:f6:e2:24:b1:20:85:0b:44:6a:2a:fa:
30:30:a3:be:2c:04:17:c3:c9:99:22:a6:f2:7d:05:ff:93:76:
89:61:08:c8:8d:22:77:2a:86:35:fe:bc:b4:c0:a3:96:22:76:
f8:a2:e3:fe:ee:69:5a:e4:0f:d1:1e:cd:ec:3e:2f:34:d0:c8:
c6:bf:52:a7:3e:56:1c:05:7b:55:55:63:66:36:f7:5b:8f:76:
ce:90:af:f4:b5:6f:d7:30:38:73:71:b9:46:ba:a7:11:53:e0:
22:2a:42:15:c9:0b:e6:f1:50:04:47:ef:a8:42:f5:1c:e0:c2:
a2:e2:ed:6b:d5:0f:ff:48:d3:e8:94:79:af:ae:af:d7:6a:d9:
be:f0:2b:f3:1c:e0:39:3c:92:21:c5:c3:ab:b0:65:6c:4f:0e:
12:21:7e:26:aa:d5:5b:cf:64:97:b7:b1:30:6e:f1:b9:0f:01:
d0:4e:7b:81:e5:6a:2c:42:83:ff:6c:b7:75:22:bd:8f:ba:71:
e0:4d:26:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:42:10 2025 by rpki-client