Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft
File: we7iyrhrXuQPwncMqMtcUMYrdVs.mft (raw, json)
Hash identifier: cDBIaNtDPUApc2bzeJMhy1SqJMysabRniWWhn65lU6I=
Subject key identifier: 5F:D0:90:63:62:CB:96:A5:77:CD:EF:2C:38:E1:1B:D9:B9:7C:F8:F4
Authority key identifier: C1:EE:E2:CA:B8:6B:5E:E4:0F:C2:77:0C:A8:CB:5C:50:C6:2B:75:5B
Certificate issuer: /CN=c1eee2cab86b5ee40fc2770ca8cb5c50c62b755b
Certificate serial: 01978E48E17C0AC676C5958C62908A01C025
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/we7iyrhrXuQPwncMqMtcUMYrdVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft
Manifest number: 121A
Signing time: Fri 20 Jun 2025 17:00:30 +0000
Manifest this update: Fri 20 Jun 2025 17:00:30 +0000
Manifest next update: Sat 21 Jun 2025 17:00:30 +0000
Files and hashes: 1: C82fBmTW8-iwXu5pgvR1VTX1CPI.roa (hash: VxKUMucn3gu4aXap48afqVYi1a/XU7LxwPuTbOudfsE=)
2: we7iyrhrXuQPwncMqMtcUMYrdVs.crl (hash: eN/FXORhnHSxfQUP5bohavVYRFHsLQT1DfPg3REglrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/we7iyrhrXuQPwncMqMtcUMYrdVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 17:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8e:48:e1:7c:0a:c6:76:c5:95:8c:62:90:8a:01:c0:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1eee2cab86b5ee40fc2770ca8cb5c50c62b755b
Validity
Not Before: Jun 20 17:00:30 2025 GMT
Not After : Jun 21 17:00:30 2025 GMT
Subject: CN=5fd0906362cb96a577cdef2c38e11bd9b97cf8f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:69:d4:ab:a6:a1:f0:5b:b5:0d:8c:2f:fe:e4:
5d:3a:0e:ef:d8:10:3d:d8:57:5e:d6:4b:1f:ca:c0:
a2:28:b3:95:0c:e9:46:f4:bc:62:82:1b:7d:35:2c:
0c:9a:80:88:65:99:15:eb:10:74:96:7d:27:27:eb:
fe:e5:ae:0c:55:9d:08:b5:6c:c5:f4:12:9d:8b:8c:
30:7e:8f:c7:7b:96:ed:9c:14:66:ff:b8:91:96:65:
67:a4:6b:7a:7c:d7:ae:38:3d:89:1f:de:f3:45:a2:
cf:a7:f9:7c:41:38:ac:5b:59:76:4c:99:83:96:d0:
d0:1f:75:c2:52:7f:55:f3:d9:70:67:96:26:58:86:
a4:8a:e9:0a:f5:a1:09:e8:dd:d5:95:cb:ab:0b:89:
e6:9f:cf:a0:f2:d6:43:0c:0f:fa:06:68:73:8d:9d:
39:c5:e2:81:f0:1a:d6:54:01:62:d1:99:e1:41:cc:
1a:0b:36:bb:f9:15:94:68:d7:03:a6:35:46:ee:9a:
7b:9d:9a:5c:2e:21:d5:b8:a4:88:c6:cf:98:32:51:
28:60:03:66:d4:67:a7:c7:6c:89:68:87:85:8b:82:
75:97:59:fb:fd:2f:71:db:e0:49:74:87:f3:b3:ad:
5a:32:34:e0:b0:2c:c0:e0:76:7d:4a:18:09:ab:f5:
4a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D0:90:63:62:CB:96:A5:77:CD:EF:2C:38:E1:1B:D9:B9:7C:F8:F4
X509v3 Authority Key Identifier:
keyid:C1:EE:E2:CA:B8:6B:5E:E4:0F:C2:77:0C:A8:CB:5C:50:C6:2B:75:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/we7iyrhrXuQPwncMqMtcUMYrdVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:bd:74:94:4a:a5:04:0c:5f:58:87:20:26:c6:a5:6a:be:e5:
07:a5:61:5d:98:2b:d0:a3:4e:99:69:27:0a:37:8e:14:31:04:
10:f4:7c:a1:75:55:37:51:41:ad:f2:b6:b1:4f:e7:a1:12:0e:
1b:ac:35:ef:38:c5:6d:be:6e:49:e5:f3:6a:1a:ef:4d:bf:c5:
ca:d5:2c:bd:54:d9:89:12:3f:13:73:5f:5a:6a:73:48:e8:c8:
7b:bf:66:e8:ab:75:6f:51:d3:90:0a:71:26:72:e6:b4:41:7b:
77:49:79:08:2a:fd:a9:5e:83:90:19:84:a2:4b:19:ae:1a:35:
95:19:85:0d:4c:a9:66:79:ef:0f:48:42:b6:81:40:16:da:47:
ed:d5:a9:22:e3:e7:3a:f9:a8:3d:d1:0b:54:b2:70:3e:93:37:
94:b1:89:fe:82:88:13:86:9f:d6:5c:12:2d:e3:12:fe:f6:a2:
50:8b:20:45:25:b8:4f:89:a9:1d:14:37:e5:b2:fa:cd:05:45:
20:9e:38:d0:47:15:e6:5a:0b:0c:b7:52:8d:1e:ee:18:57:6d:
3f:ab:17:ac:f3:53:06:03:4f:02:19:59:2f:73:40:3a:13:56:
6f:52:a8:9c:8d:c2:15:2c:57:d2:ee:f2:87:1c:60:24:80:17:
67:05:75:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 04:18:27 2025 by rpki-client