Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft
File: 1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft (raw, json)
Hash identifier: /2GumknVi40MVLzN1BdostPAxnj4P7rlkoEhFaYolAI=
Subject key identifier: 97:41:22:57:6B:FC:D4:53:AC:7D:68:40:82:9A:E6:90:D1:C3:69:FC
Authority key identifier: D5:62:0C:EC:70:97:4D:03:7D:77:69:75:8C:74:66:83:05:B3:2C:F2
Certificate issuer: /CN=d5620cec70974d037d7769758c74668305b32cf2
Certificate serial: 01976E5030B96310A73C9E0C9BDB956A5444
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft
Manifest number: 0CF3
Signing time: Sat 14 Jun 2025 12:00:38 +0000
Manifest this update: Sat 14 Jun 2025 12:00:38 +0000
Manifest next update: Sun 15 Jun 2025 12:00:38 +0000
Files and hashes: 1: 1WIM7HCXTQN9d2l1jHRmgwWzLPI.crl (hash: Ekp9A/iBF2Rmhe/XMEjLDSOD1GnZm9AKrM5+3D9mKrI=)
2: QCTiWGHEKmUOdJTM7oPATib-rWI.roa (hash: k26mJ2kyD6PN3QHWZlo9Dbc0a0mryGGisjgGFZ6rWDs=)
3: hrRzVBROURephwaz7IZClsaHDKQ.roa (hash: Fof+bR6X5zJSmDYDTc8T97sYO9am/Pj5PX1jkaREIks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:50:30:b9:63:10:a7:3c:9e:0c:9b:db:95:6a:54:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5620cec70974d037d7769758c74668305b32cf2
Validity
Not Before: Jun 14 12:00:38 2025 GMT
Not After : Jun 15 12:00:38 2025 GMT
Subject: CN=974122576bfcd453ac7d6840829ae690d1c369fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8c:32:f5:b0:2d:be:78:06:fa:25:a9:7c:43:
34:d5:48:3f:6a:52:eb:3d:e5:a7:fe:f3:b4:a0:f8:
5c:44:e8:28:f9:61:37:2f:a3:6d:d4:40:b6:7d:a8:
1f:7e:75:fc:01:b5:9c:4d:f4:56:00:85:f2:3e:72:
7d:73:94:ee:19:19:48:cb:44:00:f5:10:89:b6:9f:
68:e4:14:13:2d:d3:90:d3:6f:6a:0f:1e:3a:aa:11:
a1:df:26:f6:5f:92:ce:b5:83:55:79:7d:3a:54:cd:
d7:39:e2:fb:47:64:c3:bc:b8:d3:75:e6:02:4e:0f:
40:04:96:73:ad:ab:9d:60:f6:aa:38:db:da:3c:20:
01:04:06:1f:09:dd:c8:43:54:dd:41:dd:a4:73:92:
ab:78:e7:a0:1b:d6:7f:7d:df:6a:1d:04:19:6e:a5:
0d:d0:84:19:ff:68:56:c4:5a:e6:31:e1:4d:ae:05:
ce:b7:d4:4d:2a:c8:24:e6:33:6e:02:40:2f:ef:89:
a1:94:e9:ec:4e:f7:b2:0a:83:53:c9:fc:2b:9c:6b:
9b:13:fc:7f:d1:9f:52:17:dd:2e:e0:8d:a3:cb:5e:
c1:c9:fe:3b:d4:8d:87:ee:26:7d:d7:90:d7:aa:12:
b9:14:61:41:6c:cb:83:ec:6c:44:d9:7d:ae:c9:60:
fe:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:41:22:57:6B:FC:D4:53:AC:7D:68:40:82:9A:E6:90:D1:C3:69:FC
X509v3 Authority Key Identifier:
keyid:D5:62:0C:EC:70:97:4D:03:7D:77:69:75:8C:74:66:83:05:B3:2C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:75:c8:64:aa:a3:6f:7c:54:52:35:54:a8:9b:d2:5a:41:6b:
74:06:81:82:69:25:d0:48:bd:93:16:67:ff:0c:5e:7a:f5:bc:
26:e8:2d:6e:c0:5b:38:d2:3c:46:54:aa:66:a1:55:c0:bf:cd:
70:10:e7:1c:c6:6e:37:58:6f:03:ba:b4:12:06:56:2a:14:ad:
5e:b3:17:06:3a:1e:e1:c0:db:b4:3e:60:bd:5a:db:fc:60:fd:
b4:14:8d:32:e4:57:f2:e8:02:3d:7e:be:ae:3a:82:65:30:72:
68:5b:73:a7:10:18:71:2f:bd:52:e5:2c:26:60:b0:9c:f9:82:
85:bd:47:b3:86:f8:49:86:34:ed:64:03:5f:58:c0:5c:97:cd:
b3:90:cf:6e:fd:6b:22:16:0f:13:48:65:76:70:c4:f9:a4:d1:
82:e1:68:11:11:26:06:41:33:a4:9a:31:30:93:b2:7f:49:cb:
35:8b:ad:f2:25:95:fc:da:aa:1c:83:dc:01:0a:e8:1e:70:d0:
02:ab:e5:a9:eb:31:14:90:d1:83:f3:cc:a3:45:1b:db:1c:4a:
47:c8:a1:77:a0:dd:43:2f:a0:de:4c:e4:4e:82:3e:c6:6a:f3:
c0:f1:22:99:b9:a7:07:6f:9d:e4:b8:72:99:aa:0f:45:ff:b3:
54:ec:38:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:20:58 2025 by rpki-client