Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
File: w70m_iKV5GK-JnhTPvpTHiO38QI.mft (raw, json)
Hash identifier: G+rVTb157TNQ22zmFYdfgYD5hhEiT2Zd47DP1ibVRCk=
Subject key identifier: 3B:70:94:1A:27:2B:C1:7A:DB:A6:29:21:F8:E2:5C:36:2E:32:81:57
Authority key identifier: C3:BD:26:FE:22:95:E4:62:BE:26:78:53:3E:FA:53:1E:23:B7:F1:02
Certificate issuer: /CN=c3bd26fe2295e462be2678533efa531e23b7f102
Certificate serial: 01984965F06B4275A23AD01E392DF366C47F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 01:01:13 +0000
Manifest this update: Sun 27 Jul 2025 01:01:13 +0000
Manifest next update: Mon 28 Jul 2025 01:01:13 +0000
Files and hashes: 1: mdzOjm97CLLzPCbjlPobKIT1pLw.roa (hash: t6RlQNOZ4r0YZ3Um/Nvgu1T4czU0EwLc7Ga8Lg+Wxu4=)
2: w70m_iKV5GK-JnhTPvpTHiO38QI.crl (hash: bRxdKhkxrmtg9d1MJg+X+m0v3Iz2zSSs+ra5GHrqsGY=)
3: yHP9EGdLjDrqdAgK0gSgkfOYdDE.roa (hash: 9lzUExWqudI5IZaHPGACvDV+UoMVt4hmvKdyWsLEU8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:f0:6b:42:75:a2:3a:d0:1e:39:2d:f3:66:c4:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3bd26fe2295e462be2678533efa531e23b7f102
Validity
Not Before: Jul 27 01:01:13 2025 GMT
Not After : Jul 28 01:01:13 2025 GMT
Subject: CN=3b70941a272bc17adba62921f8e25c362e328157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b3:fc:b4:06:92:a5:62:c0:7d:4d:96:48:c5:
6c:8d:7b:f2:bf:37:55:00:84:48:e5:36:1a:94:fd:
cc:52:49:b2:7f:cd:f2:dc:f9:8c:fd:8f:5b:ff:ff:
6f:e1:9d:a1:54:f4:98:c0:17:b1:f2:68:b3:d9:ff:
5f:ae:11:9a:52:39:fe:be:6f:e9:63:2c:f1:ac:93:
10:c8:cf:67:56:36:e0:fd:2b:1f:33:dc:06:e7:e9:
a0:ae:8b:cb:ac:99:54:dc:c7:de:d8:02:07:42:25:
57:95:78:97:8d:0d:c2:42:36:02:32:a1:82:ff:f8:
30:e1:28:3c:37:1a:67:19:d7:55:2a:0b:df:ad:98:
4a:85:55:99:cb:fe:f2:92:ce:7f:e7:f6:96:e9:39:
2a:c0:ae:b3:b7:cd:39:17:93:d5:af:75:af:c6:0c:
87:f0:ad:1f:17:04:f7:74:ec:ad:a2:09:48:68:ae:
d3:54:6d:1e:aa:a5:33:7e:c3:9f:eb:2f:c1:77:3e:
50:a4:90:5d:8c:54:95:92:25:5c:84:e8:3e:89:35:
7b:ea:c3:54:46:15:c6:ff:c2:56:49:0d:bc:0e:85:
98:00:75:bc:9a:c3:3e:fe:cd:83:73:ec:34:f3:50:
96:a3:b8:a2:b9:78:b0:40:33:9b:ad:16:8a:f6:2a:
f3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:70:94:1A:27:2B:C1:7A:DB:A6:29:21:F8:E2:5C:36:2E:32:81:57
X509v3 Authority Key Identifier:
keyid:C3:BD:26:FE:22:95:E4:62:BE:26:78:53:3E:FA:53:1E:23:B7:F1:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:c5:35:ba:14:52:71:19:90:f8:46:d9:79:b7:33:18:66:f5:
dc:6c:14:20:65:de:da:d3:f0:b9:9c:d8:43:f6:9c:8c:bf:1a:
43:9f:68:ce:79:fa:75:99:9a:23:2c:ba:47:a9:82:cc:d8:14:
64:98:02:e9:32:04:fc:d8:c8:65:01:20:eb:e7:d6:13:14:8a:
71:d4:d2:cf:c7:eb:d4:e3:89:c5:05:72:54:4c:77:ed:b1:66:
11:8c:74:d5:0d:cc:e3:23:c4:8f:5b:70:ea:f7:46:75:9b:0b:
66:3a:2a:e9:f6:e0:12:43:81:01:f8:13:40:9f:ca:67:8e:96:
da:1b:3f:94:a4:77:ad:aa:b7:4c:78:f9:ff:3c:9b:dc:b8:ba:
eb:54:4a:97:f7:94:3f:f0:07:a4:bf:96:9f:8d:7c:ef:6e:1a:
a1:b9:e0:88:b2:2c:b4:72:11:57:cd:05:87:a4:79:33:3a:f2:
a0:ad:ac:74:23:e0:37:59:80:4a:39:e3:6e:9b:93:9c:6b:b2:
98:4c:3d:15:47:c8:49:9a:16:9c:13:0c:e1:31:2e:6f:18:d7:
1a:3b:93:e5:45:02:42:33:af:38:13:4e:d4:ed:c7:64:ad:5c:
6b:20:2e:8c:98:8a:a6:61:44:82:59:38:b2:d3:2f:ea:68:80:
0a:b6:01:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:12:56 2025 by rpki-client