Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.mft
File: _WNpJxttE6au3Koj67KeKbeWpGs.mft (raw, json)
Hash identifier: d9If0RGwrpJnZIh89apvblzj2jaPwD2uBSDLuw79J+I=
Subject key identifier: D0:8D:A9:8F:40:F5:6A:00:1A:C0:FA:50:E6:39:84:B2:49:D7:45:27
Authority key identifier: FD:63:69:27:1B:6D:13:A6:AE:DC:AA:23:EB:B2:9E:29:B7:96:A4:6B
Certificate issuer: /CN=fd6369271b6d13a6aedcaa23ebb29e29b796a46b
Certificate serial: 019771889FBA070B4D815EDD4E328DCA8287
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_WNpJxttE6au3Koj67KeKbeWpGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.mft
Manifest number: 0FC7
Signing time: Sun 15 Jun 2025 03:01:08 +0000
Manifest this update: Sun 15 Jun 2025 03:01:08 +0000
Manifest next update: Mon 16 Jun 2025 03:01:08 +0000
Files and hashes: 1: _WNpJxttE6au3Koj67KeKbeWpGs.crl (hash: hzJw7gmQIWYST/IyNUrsPRgI+txVAluO3Unq8RLLP+g=)
2: jJZ2HGBh9sf4zKvFBoawkCSE36M.roa (hash: /j0hgJuEgbh9wJPPT5skbRnDVTk4N5FaC35FuOjVz1M=)
3: lhJ5RbjQbCIcx6Snzw8-3JVMgGE.roa (hash: VcH6B7wbqshRYaE0Py9Bav3UnTpHMEOSu603CVWuDjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_WNpJxttE6au3Koj67KeKbeWpGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:88:9f:ba:07:0b:4d:81:5e:dd:4e:32:8d:ca:82:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd6369271b6d13a6aedcaa23ebb29e29b796a46b
Validity
Not Before: Jun 15 03:01:08 2025 GMT
Not After : Jun 16 03:01:08 2025 GMT
Subject: CN=d08da98f40f56a001ac0fa50e63984b249d74527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:51:86:7c:66:bd:c2:a1:a0:d4:95:61:b7:ec:
51:b6:23:5e:d0:ab:ea:e7:45:35:a5:ba:73:d5:db:
ad:94:b3:12:64:f5:62:f0:fb:08:f6:f7:5a:6c:9f:
c8:27:fb:78:a1:8b:53:ea:ad:19:58:44:31:25:f1:
ba:c6:a6:cb:56:f8:30:89:ff:bf:42:76:51:80:5e:
49:cd:e0:0d:09:00:49:28:a8:9e:7c:96:ad:c1:b0:
e2:a8:d3:24:b6:ba:6f:12:9e:cf:fb:ea:23:2d:76:
bb:55:9a:ec:c7:da:14:4a:7b:a0:5d:9e:07:52:86:
26:69:46:ac:95:d7:45:0e:dc:e7:98:52:d3:44:ae:
88:09:73:61:95:87:bf:bc:29:12:b2:bf:6e:d7:0e:
67:1c:29:a5:3f:b4:64:5a:26:c0:fd:9e:05:b6:55:
1a:e3:5a:ed:ee:9f:51:d1:7f:47:c5:21:a7:ea:3f:
9c:1b:26:e8:b7:02:47:c1:84:30:7f:c8:98:b0:2a:
d4:22:25:df:bf:30:6b:1b:9b:1f:b7:93:8d:e1:37:
e6:a9:20:f9:c0:e3:fd:b0:0b:85:21:d4:a7:78:08:
31:08:82:fe:50:07:dd:80:0f:07:e3:75:c9:33:73:
dd:7f:10:38:1b:9c:03:e7:74:6b:69:4b:78:88:12:
d9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:8D:A9:8F:40:F5:6A:00:1A:C0:FA:50:E6:39:84:B2:49:D7:45:27
X509v3 Authority Key Identifier:
keyid:FD:63:69:27:1B:6D:13:A6:AE:DC:AA:23:EB:B2:9E:29:B7:96:A4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_WNpJxttE6au3Koj67KeKbeWpGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:48:29:12:aa:39:66:2c:ca:f1:c6:06:93:73:92:f0:3d:a1:
9f:aa:b1:88:17:c1:7b:1a:fa:81:99:2f:b1:a0:6d:ff:57:a4:
a6:68:d2:e4:fa:b9:55:10:1e:62:5e:d9:de:11:79:83:f9:04:
0a:84:66:2b:7a:62:32:cf:20:81:bc:cd:25:ab:69:12:0a:5e:
db:71:cd:ea:47:3c:4e:72:e8:1b:6c:c7:c3:37:87:92:d7:65:
91:f9:9d:e5:c5:16:6e:23:97:68:71:26:76:3f:ec:c7:a0:f9:
e3:5b:2f:d6:29:e1:bc:86:5b:0f:ad:d0:14:bd:71:64:df:1b:
f7:e0:ce:6b:ea:a8:7a:da:e9:1b:94:f2:30:04:21:6d:a5:e9:
51:c6:6f:65:8b:02:aa:28:bd:41:5c:13:a0:84:66:92:48:5c:
8d:62:ab:05:bb:b6:b0:5d:25:6b:23:1a:32:51:3a:af:84:83:
d6:76:17:01:d0:ca:50:24:4d:d0:6c:5c:69:6f:39:e5:6d:9c:
33:b2:f8:82:cd:4c:44:16:7c:01:3d:e8:34:0f:e1:4b:82:48:
19:ea:e6:68:17:f2:57:d2:c4:f2:51:44:c0:43:e8:a3:c3:bd:
bd:c2:15:5d:1f:f2:e7:55:98:28:7b:5d:92:40:ab:dd:ef:92:
25:02:40:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:58:21 2025 by rpki-client