Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.mft
File: w_sAsiDqeEoEaDBU_L9OS0ietCA.mft (raw, json)
Hash identifier: kiSwDGQ1OdCev0xQYXqSWKsAaU8JrGqY0fWYNmozSLg=
Subject key identifier: 6B:BD:B7:E3:CF:4D:20:FB:49:98:74:2C:93:49:3A:2D:82:18:D1:45
Authority key identifier: C3:FB:00:B2:20:EA:78:4A:04:68:30:54:FC:BF:4E:4B:48:9E:B4:20
Certificate issuer: /CN=c3fb00b220ea784a04683054fcbf4e4b489eb420
Certificate serial: 019771886B55872049037E2FD8EE25FAC49B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w_sAsiDqeEoEaDBU_L9OS0ietCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.mft
Manifest number: 0950
Signing time: Sun 15 Jun 2025 03:00:54 +0000
Manifest this update: Sun 15 Jun 2025 03:00:54 +0000
Manifest next update: Mon 16 Jun 2025 03:00:54 +0000
Files and hashes: 1: JXn11nJ90d5TiYF9GBYXGMgzBVU.roa (hash: xKanBKZfDLhsfcdAIiMFoN3EiNJRNn6FGvW7wSns+Xk=)
2: w_sAsiDqeEoEaDBU_L9OS0ietCA.crl (hash: L7fv+o4V/RBXO2JP+iGBSH9+n5KN0QjZT5hIvzTE6XQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/w_sAsiDqeEoEaDBU_L9OS0ietCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:88:6b:55:87:20:49:03:7e:2f:d8:ee:25:fa:c4:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3fb00b220ea784a04683054fcbf4e4b489eb420
Validity
Not Before: Jun 15 03:00:54 2025 GMT
Not After : Jun 16 03:00:54 2025 GMT
Subject: CN=6bbdb7e3cf4d20fb4998742c93493a2d8218d145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:49:dd:23:8a:f8:2f:ab:8d:2b:f4:27:58:d7:
80:79:8e:ab:d1:da:4c:84:e7:6e:25:26:ed:6b:6a:
0b:f1:39:70:ea:3d:6b:48:6d:80:b3:a4:92:6c:09:
db:aa:18:97:10:d6:5d:74:08:5c:de:40:a4:f8:fa:
cb:92:68:42:e7:7c:0a:9e:ea:6e:80:bb:52:24:66:
e0:14:b0:d8:e3:7e:07:09:82:a1:da:3d:f1:98:0f:
b2:c6:2d:7a:01:b3:ac:02:e2:2d:06:10:71:e6:51:
d9:27:15:bd:66:8d:f9:02:7a:55:5e:af:dd:4f:15:
87:4b:39:88:8f:7c:5d:ea:3e:79:1a:d3:65:e2:54:
da:59:6d:2e:41:17:a9:b9:04:3b:80:19:80:06:bd:
16:e5:f9:29:56:f7:12:b0:b1:b7:c6:99:91:47:5c:
d6:ec:9d:84:7e:a8:20:9c:78:30:e0:02:97:c8:e9:
11:79:c2:e9:35:37:92:f6:31:5f:2d:b5:91:97:1d:
98:67:2c:4f:5e:25:da:30:a8:51:36:a1:7b:87:71:
ee:55:e3:d7:42:05:a9:a1:b4:50:a5:81:68:86:45:
47:29:00:f0:fb:7b:38:1f:bd:3f:3d:fe:35:f6:04:
48:34:8a:75:59:3c:21:15:a7:10:c7:ad:1a:16:d0:
9f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:BD:B7:E3:CF:4D:20:FB:49:98:74:2C:93:49:3A:2D:82:18:D1:45
X509v3 Authority Key Identifier:
keyid:C3:FB:00:B2:20:EA:78:4A:04:68:30:54:FC:BF:4E:4B:48:9E:B4:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_sAsiDqeEoEaDBU_L9OS0ietCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:a6:49:3c:7f:81:06:a1:c8:20:20:07:c9:89:cc:97:32:01:
8e:50:88:b9:56:97:82:9d:9e:7b:2c:8f:fe:7f:7c:ac:2e:66:
94:48:0c:8b:26:fc:14:ba:61:df:5b:33:e6:1a:be:f5:8d:5d:
e6:46:0b:f2:d7:e8:99:58:0d:f2:e1:66:a8:ab:4c:c2:e7:8a:
bf:07:db:58:dc:c6:0a:02:b5:69:aa:d3:31:4a:5f:ab:e0:f5:
d7:cd:b5:7d:9b:ef:36:7f:f6:4a:ab:55:99:ef:de:33:b4:95:
5e:03:a6:fc:dc:78:c2:98:38:ba:28:7a:6f:91:4c:3c:a2:65:
33:e9:0d:a0:5e:fc:a1:81:f0:dd:61:83:82:aa:78:35:5d:0a:
9c:de:a7:d5:47:25:97:f9:28:d4:d2:56:dc:90:e5:28:41:57:
5a:9f:62:70:46:19:98:b5:36:1b:74:5e:57:a2:8c:95:6c:c1:
98:b2:64:4a:b4:02:64:5d:2f:9f:66:65:80:11:ab:b1:f0:4b:
56:bc:df:56:b9:6f:be:8e:12:1c:50:13:b1:bf:2f:a2:91:f4:
76:d5:5a:e3:ff:9a:0e:1d:cd:86:60:e0:64:e8:80:d8:a1:fb:
37:d9:0d:a7:6c:1b:9f:f1:34:04:96:ed:b1:16:00:95:a5:6e:
7e:b9:0c:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdxiGtVhyBJA34v2O4l+sSbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzZmIwMGIyMjBlYTc4NGEwNDY4MzA1NGZjYmY0ZTRiNDg5
ZWI0MjAwHhcNMjUwNjE1MDMwMDU0WhcNMjUwNjE2MDMwMDU0WjAzMTEwLwYDVQQD
Eyg2YmJkYjdlM2NmNGQyMGZiNDk5ODc0MmM5MzQ5M2EyZDgyMThkMTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUndI4r4L6uNK/QnWNeAeY6r0dpM
hOduJSbta2oL8Tlw6j1rSG2As6SSbAnbqhiXENZddAhc3kCk+PrLkmhC53wKnupu
gLtSJGbgFLDY434HCYKh2j3xmA+yxi16AbOsAuItBhBx5lHZJxW9Zo35AnpVXq/d
TxWHSzmIj3xd6j55GtNl4lTaWW0uQRepuQQ7gBmABr0W5fkpVvcSsLG3xpmRR1zW
7J2EfqggnHgw4AKXyOkRecLpNTeS9jFfLbWRlx2YZyxPXiXaMKhRNqF7h3HuVePX
QgWpobRQpYFohkVHKQDw+3s4H70/Pf419gRINIp1WTwhFacQx60aFtCfiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGu9t+PPTSD7SZh0LJNJOi2CGNFFMB8GA1UdIwQY
MBaAFMP7ALIg6nhKBGgwVPy/TktInrQgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd19zQXNpRHFlRW9FYURCVV9MOU9TMGlldENBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8yMTAyMTEtZmZlYS00N2VlLTg5YmEt
NmNjY2JhOTk3NGVjLzEvd19zQXNpRHFlRW9FYURCVV9MOU9TMGlldENBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8yMTAyMTEtZmZlYS00N2VlLTg5YmEtNmNjY2JhOTk3NGVj
LzEvd19zQXNpRHFlRW9FYURCVV9MOU9TMGlldENBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfqZJPH+B
BqHIICAHyYnMlzIBjlCIuVaXgp2eeyyP/n98rC5mlEgMiyb8FLph31sz5hq+9Y1d
5kYL8tfomVgN8uFmqKtMwueKvwfbWNzGCgK1aarTMUpfq+D11821fZvvNn/2SqtV
me/eM7SVXgOm/Nx4wpg4uih6b5FMPKJlM+kNoF78oYHw3WGDgqp4NV0KnN6n1Ucl
l/ko1NJW3JDlKEFXWp9icEYZmLU2G3ReV6KMlWzBmLJkSrQCZF0vn2ZlgBGrsfBL
VrzfVrlvvo4SHFATsb8vopH0dtVa4/+aDh3NhmDgZOiA2KH7N9kNp2wbn/E0BJbt
sRYAlaVufrkMbQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 07:44:39 2025 by rpki-client