Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.mft
File: sIWATbFT63JMWFV8eTWcRAggVVA.mft (raw, json)
Hash identifier: 4BiMw7TNN3VwvAqdTyHiIV1MzqTldRQodz9Wisao6QU=
Subject key identifier: 21:DD:53:A9:8F:5F:8A:65:11:95:8F:EF:BF:BF:E8:BE:5B:E9:84:0E
Authority key identifier: B0:85:80:4D:B1:53:EB:72:4C:58:55:7C:79:35:9C:44:08:20:55:50
Certificate issuer: /CN=b085804db153eb724c58557c79359c4408205550
Certificate serial: 0197722D23B0B89C40A6BDA675EE483CD382
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sIWATbFT63JMWFV8eTWcRAggVVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.mft
Manifest number: 046D
Signing time: Sun 15 Jun 2025 06:00:50 +0000
Manifest this update: Sun 15 Jun 2025 06:00:50 +0000
Manifest next update: Mon 16 Jun 2025 06:00:50 +0000
Files and hashes: 1: 18TNS4gBaAj1nBKZLGQyvBGXDAA.roa (hash: yG6kNp39rMwW08RfUJ3Cw47Eb4R/ZRHq/FbYcN4tnj0=)
2: sIWATbFT63JMWFV8eTWcRAggVVA.crl (hash: 4s4mqw4AiXnEN/2w1x5Tx7Io5Fmg24vxyqw/ZFp0WIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sIWATbFT63JMWFV8eTWcRAggVVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:2d:23:b0:b8:9c:40:a6:bd:a6:75:ee:48:3c:d3:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b085804db153eb724c58557c79359c4408205550
Validity
Not Before: Jun 15 06:00:50 2025 GMT
Not After : Jun 16 06:00:50 2025 GMT
Subject: CN=21dd53a98f5f8a6511958fefbfbfe8be5be9840e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c8:78:42:dc:6b:97:03:3d:af:1c:62:e7:0e:
67:8e:4c:b6:68:4b:e6:78:8e:59:b4:97:ea:6d:67:
21:47:28:cd:9c:db:4a:cb:25:30:ee:38:52:08:25:
8f:54:02:0f:14:92:f8:2f:50:c8:57:46:ad:cd:5b:
84:7a:cb:b2:b2:37:69:75:85:9f:96:9e:af:fe:6b:
21:fd:88:c0:96:96:d3:c5:68:25:39:b6:a9:04:9a:
7b:a2:9f:ff:f5:8c:61:0f:d7:7d:08:c5:ee:34:3e:
c9:32:70:9c:b3:4b:32:76:0b:03:94:fb:6f:c7:91:
45:37:0f:b6:a3:33:96:6a:b2:cc:34:e6:36:26:ec:
9c:16:d9:0e:63:70:7f:41:b8:9d:e8:d4:a2:c7:64:
e1:a0:5e:26:4f:e9:3e:fe:26:b6:1e:40:38:be:b5:
b8:16:44:e4:7f:f8:5d:d6:c4:d0:1c:38:1b:1d:94:
b4:dd:41:d5:2d:9b:eb:a7:9d:96:cc:40:09:33:fb:
74:fe:dc:7f:7f:5d:cc:18:d4:ab:e7:59:75:b6:89:
44:5b:8e:2a:3d:46:2b:23:ad:4a:ec:ab:32:88:e3:
5b:a3:21:40:9a:5f:56:e2:66:99:95:61:c4:dc:9f:
4d:b7:47:15:d7:89:dd:9b:41:0f:42:1f:78:91:ac:
7e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:DD:53:A9:8F:5F:8A:65:11:95:8F:EF:BF:BF:E8:BE:5B:E9:84:0E
X509v3 Authority Key Identifier:
keyid:B0:85:80:4D:B1:53:EB:72:4C:58:55:7C:79:35:9C:44:08:20:55:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sIWATbFT63JMWFV8eTWcRAggVVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:de:cc:2b:87:8c:80:2a:5f:2e:92:bd:53:44:8e:84:c2:98:
b9:44:b4:da:98:10:5b:f5:4a:97:bc:2d:a4:94:ea:78:4b:5c:
ce:b0:50:d3:ef:b6:52:7f:b6:d7:02:d9:16:db:a6:90:57:e5:
80:66:79:84:fa:ab:c7:8a:ae:09:c1:cf:95:38:1b:a8:bf:a5:
bf:30:94:02:02:3b:0b:6e:83:2a:49:6b:41:a1:b9:a7:26:76:
ae:d5:b4:99:f7:80:0e:01:9c:06:2d:72:57:44:f9:0c:c0:d1:
20:df:30:92:00:86:1f:72:00:23:0b:c6:84:53:b2:25:a0:0c:
95:77:5e:35:2f:c8:c9:ae:d6:69:57:ee:97:08:e6:bc:3a:18:
df:68:e1:6d:c3:15:b9:8b:65:f5:44:dd:af:9d:a6:26:42:f4:
45:00:30:bb:85:b7:10:26:ae:6e:41:93:f0:e9:15:71:6d:f0:
d3:52:c9:12:bf:ec:05:11:cd:ac:a4:cb:f9:b6:b9:37:45:8a:
80:72:18:bc:79:68:5e:26:9d:c6:27:0e:bd:d8:0f:d4:0d:67:
5c:27:d8:35:d3:d6:a5:fc:d5:90:9d:a8:5a:a9:01:05:5e:05:
5a:71:92:78:04:a8:7e:bf:26:9d:08:be:8e:6d:b0:0f:a3:e7:
a3:64:10:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:41:25 2025 by rpki-client