
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
File: clwMcRHi9X_K-BE6QuVW6ILdXEs.mft (raw, json)
Hash identifier: utYUAPavTqObU+9EBeQqQEmQI+HaX9FsnD0mkj85BjM=
Subject key identifier: B6:BF:14:54:13:89:75:5F:C5:31:95:EE:6F:4B:F6:F3:34:55:F7:D9
Authority key identifier: 72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B
Certificate issuer: /CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
Certificate serial: 01977DC3315087D75CEBFFBBDE55C5EDB94B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
Manifest number: 15A0
Signing time: Tue 17 Jun 2025 12:00:33 +0000
Manifest this update: Tue 17 Jun 2025 12:00:33 +0000
Manifest next update: Wed 18 Jun 2025 12:00:33 +0000
Files and hashes: 1: 1RGgWDKxb5y298L2tt-0tOvqbNw.roa (hash: 2bZZWO6omsg2Mwm30E/Z1rRX+nPqPKuGxYg/2ZzCe0k=)
2: 3sxlJEA8BaERqC36Ubw3FlVF9Ek.roa (hash: YdpNn1ufX9tbeWscBU0U/F4gP263cfdud5JqGKKNPWQ=)
3: 68QeHj6JI2_T8Kr8hKctEhMPtbw.roa (hash: XnmM0ObtZKLV7g04CkYP3n/e5tgHKBrd4Q5O9o5IvnE=)
4: KoGcuhEWGpdaiyvAQhahi6JGn3c.roa (hash: 1hE6GXWKyFKYOi6wNNjRCkxxkmT7Rr3/DXP+/VqRcqY=)
5: ZLxVHxzZvKjjn2s6lQPPZdNzPyw.roa (hash: 9UddYVQskYka8RNl5TAXIUT0fsGnIVLCOhL+P2BIpeA=)
6: cLFXpbvXQ7ewA43ckj0WniT4JUE.roa (hash: MA0V95ed/gECxNSaptpMKxS+abLgaLPgcexWWf8XVhY=)
7: clwMcRHi9X_K-BE6QuVW6ILdXEs.crl (hash: aZxQnTXsxthKcrCy/2z/iOtWSdIz32LSQ5uG6RoEsQk=)
8: ejg2o5Q2dvoWaESAzfB0HEPf7xI.roa (hash: s8Vh1yl+9P0cPDEhtTkn7ElHKgWmn1YwQsHChgTqjlY=)
9: fN3bfVZFsYAwSt6ljIKuFdIrYTw.roa (hash: 2nn1lj90yzh4RI2kdOg6btEhvs2/WJxkszduCB8J4u4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 12:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:c3:31:50:87:d7:5c:eb:ff:bb:de:55:c5:ed:b9:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
Validity
Not Before: Jun 17 12:00:33 2025 GMT
Not After : Jun 18 12:00:33 2025 GMT
Subject: CN=b6bf14541389755fc53195ee6f4bf6f33455f7d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:50:b1:59:1c:5f:39:ac:f1:70:30:69:a0:b2:
e9:e0:35:9e:d2:12:09:45:7c:97:7b:e1:3c:d0:75:
01:97:fb:ff:40:e4:f9:37:f7:e4:a5:4b:b2:2e:7b:
09:9f:e0:a2:63:23:9d:58:7a:1f:3d:47:8f:84:98:
72:fa:93:10:29:94:20:87:a8:4c:81:02:29:45:68:
98:ce:96:9b:1d:3b:68:4a:75:4d:2a:7d:ed:c8:8f:
ab:2f:5c:a5:2c:e6:f4:22:7a:23:a1:6f:7f:9f:0b:
a8:5f:77:8a:ba:56:62:32:14:c6:ab:d3:c4:d3:da:
0a:20:53:42:65:72:97:cf:04:26:3e:a9:60:0a:eb:
ad:65:c8:fc:f1:5f:c5:83:66:b3:a4:66:97:a7:dc:
ae:7e:58:d6:b7:a6:4c:87:ce:d7:56:b0:5c:02:05:
bc:e6:ab:3c:bc:88:00:af:a1:5b:6b:fd:02:13:c6:
df:d0:cf:3d:4c:b6:39:c6:85:9e:6d:c7:eb:12:80:
b3:66:42:62:a2:1f:41:de:1d:3e:57:1c:d9:7e:b6:
35:f0:d0:24:2c:ef:21:45:4a:62:1b:7b:c5:a2:61:
fc:45:6a:12:e6:dd:7d:27:a2:04:54:a0:a4:96:88:
40:0f:73:80:51:81:dc:6c:50:0e:87:51:52:bd:a2:
cb:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:BF:14:54:13:89:75:5F:C5:31:95:EE:6F:4B:F6:F3:34:55:F7:D9
X509v3 Authority Key Identifier:
keyid:72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:7d:6f:89:0e:9f:28:34:c8:2e:3e:07:e0:89:95:d9:f9:6b:
50:33:ba:61:24:e9:ec:8e:f9:fc:13:63:13:e0:de:2f:dd:c4:
99:16:21:0e:26:40:b0:cc:3c:1c:69:0f:9f:7c:37:c7:51:da:
2e:8e:9b:23:b9:56:73:86:bd:e6:0b:17:21:2e:50:a0:d7:a1:
3c:33:e3:09:4f:20:18:5c:d5:b2:5c:b8:b4:4e:01:fb:59:f2:
85:c9:9b:6a:32:6c:51:56:d8:c5:a8:12:4b:15:3b:7d:ab:69:
ef:fb:45:e8:61:1a:b4:73:7a:f1:1f:f5:a7:63:f8:13:27:69:
35:bd:4a:49:d5:3e:da:cb:29:81:f6:27:96:6e:e2:3a:fc:e4:
c0:a2:1f:37:66:b7:69:ae:31:3f:78:b3:35:0d:49:6b:cf:09:
70:35:1f:06:bc:62:09:d1:30:e8:6d:29:88:ee:a3:18:b0:83:
55:c8:44:ce:da:8c:85:26:b9:76:a9:43:de:c2:26:e4:89:ab:
f0:da:ad:c3:d7:d7:d2:ef:c8:61:64:cc:5d:d8:f2:70:cb:a9:
7e:f5:45:73:9c:0b:03:97:fa:68:6b:06:3d:e0:21:53:2f:7e:
3b:2c:46:e6:ec:fb:d1:70:40:d4:8d:73:e4:f2:0e:a0:1a:25:
1b:23:5f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 20:17:10 2025 by rpki-client