Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.mft
File: RwSF9erGdaJBq24C2OU90oVW0u4.mft (raw, json)
Hash identifier: iM9pUTIiArJY54OSLogRlGzSWjjCbZUIdu0UkQsdnvY=
Subject key identifier: 12:6F:89:12:FF:0B:89:70:C4:38:CE:6E:08:AA:6D:1E:B3:A8:D6:A9
Authority key identifier: 47:04:85:F5:EA:C6:75:A2:41:AB:6E:02:D8:E5:3D:D2:85:56:D2:EE
Certificate issuer: /CN=470485f5eac675a241ab6e02d8e53dd28556d2ee
Certificate serial: 01977AC32E7A5FD721005C37781D5CA8C489
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RwSF9erGdaJBq24C2OU90oVW0u4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.mft
Manifest number: DC
Signing time: Mon 16 Jun 2025 22:01:41 +0000
Manifest this update: Mon 16 Jun 2025 22:01:41 +0000
Manifest next update: Tue 17 Jun 2025 22:01:41 +0000
Files and hashes: 1: 1-ytWl0hX9ynA9JXKT1kDTjFFd_k.roa (hash: SVFx2HIlhTnZm/5An2t1/eTf/PAIAECB7vLR+zIL0/U=)
2: 4lqvUj_aarjM1QCov1WKcZ47cD4.roa (hash: CUeCuFIy+7/m+7Rp9JxCjE4itMo0nF9rOUfz1A83JwI=)
3: RwSF9erGdaJBq24C2OU90oVW0u4.crl (hash: DUUekumj2Xp7vhQiE6rt//2oBqYhM7BDSaKpuey9ovg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RwSF9erGdaJBq24C2OU90oVW0u4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 21:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:c3:2e:7a:5f:d7:21:00:5c:37:78:1d:5c:a8:c4:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=470485f5eac675a241ab6e02d8e53dd28556d2ee
Validity
Not Before: Jun 16 22:01:41 2025 GMT
Not After : Jun 17 22:01:41 2025 GMT
Subject: CN=126f8912ff0b8970c438ce6e08aa6d1eb3a8d6a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c6:a6:2b:70:0e:7f:0d:64:fd:8d:c8:db:00:
07:f3:e7:68:41:b1:ee:c5:50:af:75:83:d0:aa:b3:
71:4d:c8:6a:20:65:24:e3:dc:23:a2:71:77:5d:68:
44:55:6d:2f:9e:a9:78:7a:b4:d8:e2:49:9d:70:d9:
eb:1e:34:d3:fc:19:0f:cc:e8:7d:9b:42:1c:6e:3b:
ba:4c:94:4b:0c:52:8e:e2:92:28:73:0d:ce:38:6a:
de:c6:7f:c2:64:d0:60:7a:03:c2:6c:6d:9c:c5:77:
ae:94:26:ed:0d:42:ca:f6:19:60:e3:0f:f5:03:ca:
51:3b:f5:11:b3:6d:f3:58:bb:87:bc:7d:53:7f:20:
a5:3a:93:ca:7c:a4:43:6e:6a:84:77:c3:40:c8:5b:
a6:76:2d:70:c4:d0:97:a9:07:23:c1:71:08:c3:60:
50:31:a2:96:06:11:19:ef:e1:5b:bd:f6:a8:7c:95:
2d:74:3e:d1:e6:dd:b5:c2:de:10:18:5d:7e:e1:e9:
bd:c4:20:00:43:e1:3c:47:67:6d:8a:09:54:d5:cb:
1c:26:53:29:6b:a0:77:a3:74:ea:22:80:4f:46:b9:
a7:16:3b:dc:f1:3c:d5:75:3c:6a:0b:72:35:38:2b:
6f:6e:30:49:35:5a:94:42:c4:77:c4:5f:76:2f:07:
60:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:6F:89:12:FF:0B:89:70:C4:38:CE:6E:08:AA:6D:1E:B3:A8:D6:A9
X509v3 Authority Key Identifier:
keyid:47:04:85:F5:EA:C6:75:A2:41:AB:6E:02:D8:E5:3D:D2:85:56:D2:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RwSF9erGdaJBq24C2OU90oVW0u4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:e0:75:b4:25:56:c7:43:76:cc:81:39:6c:08:b1:b4:93:1e:
d4:ff:98:33:b8:b6:a0:f4:f7:42:d4:43:87:5c:d1:57:98:22:
a0:e0:71:bc:1d:86:35:70:9b:9f:b5:af:05:f9:82:6c:e7:2a:
ee:a8:30:f6:1d:f0:ea:88:d0:61:6e:e3:11:bd:88:8b:13:65:
5f:f0:7b:4d:b9:d7:c9:9e:d4:6d:75:f4:d7:4e:16:7f:7c:3f:
3e:b7:77:1e:2e:e5:cd:6a:27:0c:62:c4:73:83:1f:ba:59:4c:
f3:98:54:d5:e3:06:b1:7c:8b:97:0f:0b:19:e3:7c:17:9b:87:
60:48:72:14:c8:d4:15:18:93:e1:e7:75:b6:1e:fe:41:0d:b0:
3a:1b:4d:2f:31:3a:9b:38:8e:a8:f3:12:15:7d:5c:5b:4b:fe:
40:7b:87:d5:34:19:bf:be:c4:21:ff:70:f1:39:f4:22:91:ab:
26:1f:ae:39:fb:14:ce:1e:6a:7a:21:bb:a1:f0:45:b7:18:aa:
16:cc:16:bc:73:54:3c:24:28:b2:b5:79:84:78:1e:1c:99:9d:
09:31:75:55:f0:f3:f8:2a:0a:f8:a9:ea:ca:77:69:56:8b:82:
d2:4f:35:09:7a:c2:0d:50:bc:96:8c:68:e8:c4:55:fe:68:f4:
bd:df:f5:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 05:00:28 2025 by rpki-client