Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft
File: rw3BKw8bUz2NBOxhF9a55RL8qp8.mft (raw, json)
Hash identifier: BULOTYsk/khMA08eLclrwb18Pgn/w8Yw/4amVv65dvU=
Subject key identifier: 72:87:C4:36:A5:3C:C1:43:BD:87:68:DB:F9:39:25:CD:17:EF:F0:D9
Authority key identifier: AF:0D:C1:2B:0F:1B:53:3D:8D:04:EC:61:17:D6:B9:E5:12:FC:AA:9F
Certificate issuer: /CN=af0dc12b0f1b533d8d04ec6117d6b9e512fcaa9f
Certificate serial: 01976BBD78639E7C8419ABD50A4DE4113748
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft
Manifest number: 1339
Signing time: Sat 14 Jun 2025 00:01:08 +0000
Manifest this update: Sat 14 Jun 2025 00:01:08 +0000
Manifest next update: Sun 15 Jun 2025 00:01:08 +0000
Files and hashes: 1: IPW3rYP7oE9P_ES0-kMgln06Sio.roa (hash: 9eLRN0ajqZHckDjlFErwwqTneM3/U1IZfbIXWVVHKRk=)
2: S11P7YKPNs_v7YdolA0FgB6j23E.roa (hash: TBKKGcG+I3pRwCi4L7A30ry5+YnjawyAWGjuVum7Pns=)
3: rw3BKw8bUz2NBOxhF9a55RL8qp8.crl (hash: 5JLNEuHkQXEQ3lUIoI5ujKEBUqeqdJw7BIKj2If5Ynk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:78:63:9e:7c:84:19:ab:d5:0a:4d:e4:11:37:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af0dc12b0f1b533d8d04ec6117d6b9e512fcaa9f
Validity
Not Before: Jun 14 00:01:08 2025 GMT
Not After : Jun 15 00:01:08 2025 GMT
Subject: CN=7287c436a53cc143bd8768dbf93925cd17eff0d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ef:46:1d:88:56:ae:23:98:03:81:b1:74:29:
0e:82:bc:86:26:6b:8b:f3:96:54:10:bb:8f:42:a3:
80:0d:f7:05:1e:10:e6:c4:b9:83:5c:3b:69:54:60:
98:01:64:13:92:f2:6b:81:93:0a:9a:fd:24:43:59:
55:41:3c:1b:48:02:1b:fd:90:74:02:b2:06:51:a1:
bf:18:fa:00:63:c6:33:39:45:63:e6:76:02:69:9d:
b2:10:98:fe:f2:d1:c1:64:3c:b3:0a:52:e0:ba:d8:
54:b0:89:c7:57:0a:1f:82:03:fe:89:bc:c5:4c:7e:
62:3c:a1:3f:f6:62:dd:0c:28:4a:15:c7:92:50:61:
24:a4:fa:38:06:3d:db:28:3d:83:8a:4f:44:04:10:
89:c5:22:5d:8f:e2:22:b7:6e:50:a3:56:33:08:47:
6d:08:34:e6:bb:b8:ff:72:c2:37:33:05:31:55:8d:
55:e1:56:05:2d:87:50:12:40:41:d6:cd:83:ea:99:
9f:18:c2:94:8d:6d:23:89:c7:15:60:c7:04:5a:b9:
c1:4a:32:5b:b6:05:15:97:bc:b2:9c:63:e0:c5:ab:
ba:7c:1e:81:03:c5:7c:f6:12:9a:f1:6b:c3:c4:5b:
cc:22:35:c4:08:84:c6:62:44:28:d9:22:5d:05:86:
4a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:87:C4:36:A5:3C:C1:43:BD:87:68:DB:F9:39:25:CD:17:EF:F0:D9
X509v3 Authority Key Identifier:
keyid:AF:0D:C1:2B:0F:1B:53:3D:8D:04:EC:61:17:D6:B9:E5:12:FC:AA:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:1d:e9:23:dc:0f:cb:ca:9c:d1:6c:df:06:00:5d:92:70:3b:
93:73:ba:a1:6a:35:87:12:1a:3a:12:fc:9e:7b:ef:1a:8c:bb:
d3:7a:12:e4:92:dc:44:fe:2a:a2:b2:6c:82:92:3f:1a:a3:5e:
84:50:98:5f:6c:56:20:b0:5d:9d:a8:01:31:f9:3e:45:4c:4e:
0f:8f:53:5e:3a:74:7d:ed:30:93:89:93:6a:6e:0f:b7:7a:94:
9f:94:50:31:df:b4:a7:49:4f:42:f1:95:f9:e5:95:32:49:9c:
b2:06:55:40:fe:8d:20:0b:0e:1e:ee:b7:f1:88:2d:d3:e6:5e:
11:b6:36:75:fa:3e:26:48:17:c2:5a:93:c8:ec:06:95:b2:29:
8d:a9:6e:fa:34:9f:74:78:bc:85:33:c9:f6:94:40:ef:a7:4d:
2f:0f:69:73:9f:b6:a7:f1:58:9e:51:71:df:ee:3f:c8:9b:32:
95:67:47:fe:a4:ef:db:0c:6f:2a:2e:21:22:1d:7c:f1:7e:89:
aa:8e:93:89:da:a6:79:05:d2:00:e7:64:e5:52:5c:36:8e:67:
89:c0:62:d6:71:f3:c3:10:e5:60:9f:30:db:69:8f:bc:46:27:
42:52:4b:c1:d0:22:ad:0e:a8:83:e4:67:2c:e9:dd:91:35:ef:
f8:aa:42:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:44:50 2025 by rpki-client