Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/w-twdDgV_kRclYo8URfvJ1PTD34.mft
File: w-twdDgV_kRclYo8URfvJ1PTD34.mft (raw, json)
Hash identifier: vlaDCOK/Qd+Fzu2e5e7jn/+FAnVkySuSy6Nb/7hQXGg=
Subject key identifier: 55:2F:9C:4C:DA:A0:21:1A:EA:84:50:F4:DB:D8:EE:72:20:99:32:ED
Authority key identifier: C3:EB:70:74:38:15:FE:44:5C:95:8A:3C:51:17:EF:27:53:D3:0F:7E
Certificate issuer: /CN=c3eb70743815fe445c958a3c5117ef2753d30f7e
Certificate serial: 01977AF97540A6FE7DE095083D0197EF27AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w-twdDgV_kRclYo8URfvJ1PTD34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/w-twdDgV_kRclYo8URfvJ1PTD34.mft
Manifest number: 1596
Signing time: Mon 16 Jun 2025 23:00:58 +0000
Manifest this update: Mon 16 Jun 2025 23:00:58 +0000
Manifest next update: Tue 17 Jun 2025 23:00:58 +0000
Files and hashes: 1: GzCIBu4tHiFH76_Ly9Ei_0SMBpg.roa (hash: ucUps3PWBgmn642QIizMtNVpME3QV9nJ//n0R1ijDxA=)
2: w-twdDgV_kRclYo8URfvJ1PTD34.crl (hash: qUo09X7Cc75aKZD9G3ml7DgCzJZ0dnixdlEqqS/qhJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/w-twdDgV_kRclYo8URfvJ1PTD34.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/w-twdDgV_kRclYo8URfvJ1PTD34.mft
rsync://rpki.ripe.net/repository/DEFAULT/w-twdDgV_kRclYo8URfvJ1PTD34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 21:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:f9:75:40:a6:fe:7d:e0:95:08:3d:01:97:ef:27:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3eb70743815fe445c958a3c5117ef2753d30f7e
Validity
Not Before: Jun 16 23:00:58 2025 GMT
Not After : Jun 17 23:00:58 2025 GMT
Subject: CN=552f9c4cdaa0211aea8450f4dbd8ee72209932ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:13:98:e8:5e:45:9a:c9:d4:75:ac:a1:a3:8e:
0b:b6:d5:3a:73:05:19:d7:51:59:1c:54:03:12:d1:
62:3b:d0:1c:a5:a5:74:fe:c2:62:27:eb:2e:15:48:
b8:b1:0d:6e:5d:54:8b:9d:ce:7c:d9:e2:3f:f9:ba:
bd:6f:aa:9b:5f:d0:b9:b0:99:1a:94:99:3d:80:af:
49:2b:85:77:27:fe:11:c7:48:b2:d7:71:99:9a:fa:
cf:88:e2:24:2c:3a:8e:3a:13:6e:ce:71:3f:bf:4a:
99:f1:d4:e3:08:2d:41:36:23:f0:5f:7e:53:c5:79:
66:48:f7:00:c9:20:19:93:1b:91:bc:fc:17:3d:fc:
b4:ce:b5:a4:ea:57:b8:74:c8:d1:bf:ad:90:c5:ef:
1e:ed:04:ad:f1:16:c2:b5:f9:89:fd:cc:d4:1f:cf:
41:8e:c1:64:8d:5c:e2:f2:46:cf:1a:d9:1a:cc:76:
3b:89:76:a2:da:94:d8:b7:4f:32:87:d1:6c:2f:e2:
bd:9b:df:69:d7:db:11:a8:74:e8:33:a2:00:8d:78:
43:a8:f7:1e:2f:8e:0e:5b:db:f9:8e:89:5e:15:fa:
4f:18:cc:1b:04:d7:81:82:39:53:95:a9:e3:d8:a0:
71:80:85:b1:77:16:3e:cd:64:0c:c9:d7:68:4e:11:
ca:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:2F:9C:4C:DA:A0:21:1A:EA:84:50:F4:DB:D8:EE:72:20:99:32:ED
X509v3 Authority Key Identifier:
keyid:C3:EB:70:74:38:15:FE:44:5C:95:8A:3C:51:17:EF:27:53:D3:0F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-twdDgV_kRclYo8URfvJ1PTD34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/w-twdDgV_kRclYo8URfvJ1PTD34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/w-twdDgV_kRclYo8URfvJ1PTD34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:51:6b:8c:6f:92:b8:bf:f7:04:34:59:f1:26:ce:fb:e7:1a:
a6:3c:f7:14:86:fc:fe:76:05:38:b8:01:5a:97:ea:bc:86:40:
78:ca:01:0c:eb:19:bc:e9:14:db:fb:31:73:78:8b:38:f0:28:
b6:f4:71:d1:b7:ac:50:5a:e1:9a:28:32:6c:7d:0b:c7:5f:1a:
32:f2:b8:cb:9e:43:f5:2d:30:b6:89:51:7a:19:49:cb:bb:fd:
20:14:2f:2e:40:2a:1c:e8:c3:c2:6a:ee:24:38:85:7a:fd:46:
3f:87:46:9c:eb:6f:0d:4c:9f:c6:47:35:aa:44:f3:8e:b1:4d:
ca:5e:d2:43:0c:51:b8:ac:40:98:78:04:ac:53:c1:e8:6a:00:
ad:9b:a9:5a:c4:6b:2d:06:e8:c7:4f:98:df:a7:ec:25:6a:2b:
81:f1:ae:99:1a:c0:08:87:8a:d5:17:f2:8b:d3:bd:1d:49:29:
7a:f7:e4:d4:27:87:44:61:bb:6c:69:c1:fb:c3:f1:ad:1c:b1:
0f:75:0b:08:a5:6f:cb:a9:0a:00:e5:d1:10:24:f7:86:bc:ff:
83:ce:d6:0f:f7:a9:5f:5c:f2:db:7f:3d:07:b0:71:fc:39:73:
4f:23:3f:8e:59:4b:89:ef:5c:b3:d7:e2:34:70:e7:80:09:41:
b5:54:9d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 01:26:19 2025 by rpki-client