Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
File: w70m_iKV5GK-JnhTPvpTHiO38QI.mft (raw, json)
Hash identifier: 7aeyGE8IZw8El9ZCd6Ujf6TbcMTfJKZ5Rq5blSNrBXY=
Subject key identifier: 54:41:30:92:0E:AE:09:17:BA:80:27:1A:10:80:45:0D:AA:F3:91:46
Authority key identifier: C3:BD:26:FE:22:95:E4:62:BE:26:78:53:3E:FA:53:1E:23:B7:F1:02
Certificate issuer: /CN=c3bd26fe2295e462be2678533efa531e23b7f102
Certificate serial: 01976F2D04625B944E72700EA91E0604272D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 16:01:50 +0000
Manifest this update: Sat 14 Jun 2025 16:01:50 +0000
Manifest next update: Sun 15 Jun 2025 16:01:50 +0000
Files and hashes: 1: mdzOjm97CLLzPCbjlPobKIT1pLw.roa (hash: t6RlQNOZ4r0YZ3Um/Nvgu1T4czU0EwLc7Ga8Lg+Wxu4=)
2: w70m_iKV5GK-JnhTPvpTHiO38QI.crl (hash: FbI2WqdMD1Z2aOxxPTIWaQ2jTu+WqyrR1FZ+AJNbXiI=)
3: yHP9EGdLjDrqdAgK0gSgkfOYdDE.roa (hash: 9lzUExWqudI5IZaHPGACvDV+UoMVt4hmvKdyWsLEU8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2d:04:62:5b:94:4e:72:70:0e:a9:1e:06:04:27:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3bd26fe2295e462be2678533efa531e23b7f102
Validity
Not Before: Jun 14 16:01:50 2025 GMT
Not After : Jun 15 16:01:50 2025 GMT
Subject: CN=544130920eae0917ba80271a1080450daaf39146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:db:de:ce:f7:d0:11:a4:03:e8:ee:cf:91:96:
d6:84:71:e0:b8:1a:68:77:d9:6a:1c:21:c4:d5:b7:
62:6d:85:42:80:b9:2c:af:d4:53:a6:92:e1:ec:89:
00:b4:aa:ea:ea:3c:97:c5:e5:8f:7a:0f:bd:95:e0:
96:40:96:2c:c2:14:e3:84:3b:a0:97:35:c1:2d:7a:
d2:32:c5:c8:ac:7c:dc:d1:6f:29:53:06:64:2d:93:
85:f4:73:63:f2:a3:da:94:a5:13:2b:ec:2a:70:f7:
2d:2b:a2:fe:bd:e1:56:1d:c3:ed:98:d8:a4:2e:2d:
d6:65:3b:76:81:10:13:1a:d6:21:01:86:93:4c:bc:
4a:57:10:71:a3:15:a9:d3:fb:36:a3:32:6b:07:cd:
bc:ee:17:c7:ee:af:6e:cc:10:24:16:5d:14:36:72:
af:98:d2:5b:09:bb:c2:fa:95:fb:a8:76:61:7a:3c:
77:89:cc:1a:3a:8e:94:94:d2:ad:f0:5c:b8:c6:61:
20:97:36:84:47:4c:b9:00:17:0f:70:2c:25:47:32:
58:c1:be:98:0b:3d:ec:9c:7c:38:f8:f1:62:b6:7d:
93:6f:82:43:d2:e1:71:c7:0d:e5:7e:5b:ca:f0:35:
43:d3:5c:0f:2a:a9:c6:c1:0a:5c:48:ec:67:c3:e1:
89:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:41:30:92:0E:AE:09:17:BA:80:27:1A:10:80:45:0D:AA:F3:91:46
X509v3 Authority Key Identifier:
keyid:C3:BD:26:FE:22:95:E4:62:BE:26:78:53:3E:FA:53:1E:23:B7:F1:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:b2:05:bc:34:20:73:47:fa:38:2d:d1:5a:61:4a:18:f6:1e:
42:d0:e1:04:de:0e:b7:43:98:df:5f:0a:d1:29:11:78:c8:59:
63:46:23:a0:b1:92:1b:f4:a9:39:12:49:c5:d5:93:8f:ec:bb:
3b:57:6d:32:06:51:39:0a:7c:57:83:23:0d:67:c5:e6:ff:b3:
60:ab:f4:84:f2:01:dd:39:7d:62:4d:73:b0:5b:0b:20:69:38:
e9:a1:57:53:9d:8e:05:3f:ff:90:83:7c:fc:56:bb:ab:7d:ba:
e3:e6:b3:7d:64:a8:59:f2:59:f7:c4:c0:ab:dd:f4:ce:ca:8f:
ce:ab:b6:56:07:70:fd:65:12:43:4e:25:d3:b9:d1:32:58:8b:
4b:f5:e0:d8:6a:c6:54:4d:f4:7b:9a:3c:47:0b:ab:d7:7a:f8:
4c:8d:e9:3a:56:96:7b:94:b8:0a:3b:68:90:0c:50:bc:27:2f:
a2:5f:e3:27:45:a6:df:19:be:55:2f:be:5f:60:1a:75:a8:9d:
66:69:94:f6:17:06:19:e6:ce:55:14:a0:04:fe:b8:40:70:cd:
d4:9c:2a:f2:81:07:5c:3f:00:f6:95:2b:72:1f:bb:11:37:2c:
28:cd:01:de:a1:f7:d1:d5:98:ec:33:8f:1f:f0:7b:20:09:f4:
20:bc:69:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:08:38 2025 by rpki-client