Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.mft
File: w3URP9S_vTixBDhDwwkmoRDMD1E.mft (raw, json)
Hash identifier: lFNj59YJxaLRa1ZT/4FOxzINA+Ytgv1RchTb+w9DSAo=
Subject key identifier: BF:B3:50:A1:8F:B0:3C:21:71:78:15:C0:6E:43:5C:0A:C0:71:57:54
Authority key identifier: C3:75:11:3F:D4:BF:BD:38:B1:04:38:43:C3:09:26:A1:10:CC:0F:51
Certificate issuer: /CN=c375113fd4bfbd38b1043843c30926a110cc0f51
Certificate serial: 01976EF4E033E933F96B5FA9007D8165F1AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3URP9S_vTixBDhDwwkmoRDMD1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 15:00:31 +0000
Manifest this update: Sat 14 Jun 2025 15:00:31 +0000
Manifest next update: Sun 15 Jun 2025 15:00:31 +0000
Files and hashes: 1: TPJl-AnyNAOqe20bKX-5t3SrM4E.roa (hash: X6UgSBrAhCQSnYi9DhkcF/hdYKpsagcSW2GIdlVKxUg=)
2: w3URP9S_vTixBDhDwwkmoRDMD1E.crl (hash: 8AMsRwB3kGyas1V+JVIx7HlL8DXpiEfTrFw5rAKfgxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/w3URP9S_vTixBDhDwwkmoRDMD1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:f4:e0:33:e9:33:f9:6b:5f:a9:00:7d:81:65:f1:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c375113fd4bfbd38b1043843c30926a110cc0f51
Validity
Not Before: Jun 14 15:00:31 2025 GMT
Not After : Jun 15 15:00:31 2025 GMT
Subject: CN=bfb350a18fb03c21717815c06e435c0ac0715754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d9:ad:51:0b:88:ee:09:a1:99:69:13:8e:33:
12:ca:80:dc:00:30:05:19:b0:11:62:14:4b:6f:46:
12:f7:04:ff:73:a6:3d:3e:52:1a:2e:c5:e5:3e:2f:
fc:c8:f5:a8:43:80:4f:6b:c5:0a:f9:8a:8c:44:3c:
e4:54:b8:48:a6:92:ef:f5:a0:fd:cf:5f:dd:f2:8b:
e7:06:90:8f:ef:2e:40:04:f5:70:0c:8a:22:b0:23:
69:0d:7e:79:c7:eb:77:67:37:ea:96:82:db:7e:0c:
92:48:20:2d:32:70:ba:45:7c:05:4f:93:46:27:33:
7d:8f:f2:99:c1:ee:8e:99:52:18:49:3a:7b:01:90:
0a:d9:a5:12:66:cf:9c:82:a7:3e:19:4a:14:69:eb:
ff:89:62:22:79:e1:e6:3d:fa:bf:19:73:b4:45:37:
3c:2f:8b:70:fa:47:0e:0a:30:80:21:0f:de:e1:7d:
58:f0:5f:6f:1e:61:84:ac:99:79:3e:56:a2:41:51:
34:4c:29:97:38:f0:28:1a:b2:cb:60:ee:cf:44:7c:
d9:b4:eb:33:aa:0c:22:98:44:57:b7:c8:c1:2c:73:
91:1a:e7:a1:3f:e8:80:ea:e2:77:97:68:cb:2d:18:
06:35:86:dc:4a:fc:a8:55:16:3c:af:6f:60:2a:9f:
26:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B3:50:A1:8F:B0:3C:21:71:78:15:C0:6E:43:5C:0A:C0:71:57:54
X509v3 Authority Key Identifier:
keyid:C3:75:11:3F:D4:BF:BD:38:B1:04:38:43:C3:09:26:A1:10:CC:0F:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3URP9S_vTixBDhDwwkmoRDMD1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:b2:e9:ff:70:50:20:7f:d3:d8:9a:99:de:e4:e9:d6:c6:ad:
e8:6f:5c:ce:8b:71:30:33:e0:67:5c:e9:4c:58:04:f5:92:30:
0a:a2:d0:9d:6d:81:fa:0a:b2:21:fb:19:40:89:e8:38:f6:de:
8e:24:0b:45:51:ca:64:9d:6d:d7:5e:5b:70:b9:ee:75:50:e7:
aa:51:c0:a3:c3:22:2a:83:76:d0:98:bf:ce:fd:3a:98:ca:dd:
24:64:62:a6:b1:1f:95:52:65:9b:e5:31:a4:b8:29:fe:23:49:
e9:89:3b:1b:a2:21:69:57:bd:5b:e0:4a:da:f6:bd:6f:5b:93:
d8:b4:c6:88:19:98:55:4b:d0:6c:51:42:bd:ba:11:04:c2:91:
7d:a5:3d:01:98:88:94:82:88:fd:ae:09:2d:cb:f4:d8:18:ee:
cc:28:cf:d6:27:88:20:26:1b:27:d6:7a:e5:96:72:35:c0:8e:
f1:64:5e:fa:89:31:41:d8:43:d6:43:6a:62:85:4d:22:0d:20:
98:7c:3c:9a:cc:db:ed:c0:d2:3c:4f:22:a6:cf:3f:63:bc:07:
f2:da:31:14:75:8f:c8:13:81:c4:f9:a9:42:df:6a:2c:f2:47:
95:a4:fe:ac:8c:ee:83:93:d9:d3:ba:d9:4a:d1:d6:76:3e:5d:
24:1e:82:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:19:20 2025 by rpki-client