Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft
File: 1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft (raw, json)
Hash identifier: lm+FLasFZzfBS5UXV2x7ooxcXPCU92u4lxaUumNGvN8=
Subject key identifier: 6D:28:BB:A5:D2:23:98:0C:EB:AD:58:37:97:A4:62:84:E2:4F:56:65
Authority key identifier: D5:62:0C:EC:70:97:4D:03:7D:77:69:75:8C:74:66:83:05:B3:2C:F2
Certificate issuer: /CN=d5620cec70974d037d7769758c74668305b32cf2
Certificate serial: 0198541FC2008BD4B8815D7E544A30F8D4A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft
Manifest number: 0D6A
Signing time: Tue 29 Jul 2025 03:00:24 +0000
Manifest this update: Tue 29 Jul 2025 03:00:24 +0000
Manifest next update: Wed 30 Jul 2025 03:00:24 +0000
Files and hashes: 1: 1WIM7HCXTQN9d2l1jHRmgwWzLPI.crl (hash: aX7gRcYtcMHzYcG1r36owhKHzsIodQ+Anu8oDVT9714=)
2: QCTiWGHEKmUOdJTM7oPATib-rWI.roa (hash: k26mJ2kyD6PN3QHWZlo9Dbc0a0mryGGisjgGFZ6rWDs=)
3: hrRzVBROURephwaz7IZClsaHDKQ.roa (hash: Fof+bR6X5zJSmDYDTc8T97sYO9am/Pj5PX1jkaREIks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:1f:c2:00:8b:d4:b8:81:5d:7e:54:4a:30:f8:d4:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5620cec70974d037d7769758c74668305b32cf2
Validity
Not Before: Jul 29 03:00:24 2025 GMT
Not After : Jul 30 03:00:24 2025 GMT
Subject: CN=6d28bba5d223980cebad583797a46284e24f5665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cc:ec:e7:af:df:e8:84:b9:05:04:eb:41:6d:
07:8e:98:aa:5f:73:d4:71:09:f7:d2:5f:1d:08:98:
90:e2:39:f1:1d:d2:fb:a7:f2:7c:98:96:05:e7:90:
e3:5e:7e:f1:44:25:1c:a5:94:c2:77:df:ac:26:3b:
ef:58:4b:98:80:b5:83:3c:f3:5a:a2:78:ee:2e:db:
e9:9d:c0:03:8a:4b:f1:33:f2:29:8f:7a:cd:4f:4a:
0d:87:b6:35:8f:97:81:d6:f9:75:9f:6e:5a:19:90:
fb:b5:3f:50:36:9b:ae:c7:e5:db:e2:b2:b0:9a:32:
ab:da:5c:31:d9:7f:4a:82:96:4c:29:4a:65:73:80:
2e:13:05:0f:b5:21:38:e8:65:61:f6:f1:ec:1b:d8:
31:b0:22:2c:2a:10:a9:3c:df:0d:a9:58:37:0c:08:
b3:b6:96:9f:03:e7:9d:29:49:1e:fc:1d:67:81:b4:
a8:78:d7:80:2f:20:85:d1:fb:ed:24:d7:ab:e9:ef:
27:33:57:0b:a3:b9:b1:d3:ed:da:98:a8:a1:1c:3d:
d3:23:e6:f7:28:a2:e0:73:86:48:c3:80:94:25:22:
09:81:e7:f2:99:f2:ab:ac:0c:23:df:20:44:00:48:
10:83:31:7f:46:aa:57:14:ad:9f:21:57:88:73:bf:
22:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:28:BB:A5:D2:23:98:0C:EB:AD:58:37:97:A4:62:84:E2:4F:56:65
X509v3 Authority Key Identifier:
keyid:D5:62:0C:EC:70:97:4D:03:7D:77:69:75:8C:74:66:83:05:B3:2C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:18:45:9d:28:24:c5:2b:fd:82:5e:db:35:df:db:28:fd:b2:
15:aa:e1:da:3c:78:d2:af:02:e0:cb:c6:86:a7:d5:fa:86:ee:
bd:86:26:08:82:08:c3:5d:b6:d7:d3:7d:78:8b:8a:79:c6:e2:
22:32:63:e1:42:a0:a6:80:60:65:42:a4:9c:0d:b4:51:b1:fa:
38:4a:df:00:6f:34:58:10:cb:98:1c:62:ff:30:53:78:61:6e:
aa:ca:35:c2:43:c4:33:b4:c0:f3:fd:d0:85:11:46:1c:8e:11:
e8:4b:f0:6d:bf:19:1a:ae:eb:c4:db:00:86:eb:a5:1c:02:16:
c3:f1:bc:90:3c:3b:e2:c3:62:01:0b:91:4f:47:e3:5c:96:1f:
a3:45:83:b7:d6:65:10:3f:79:b5:b8:72:b0:a5:eb:f7:6e:ba:
13:c7:43:94:63:fc:8c:7b:17:d3:e4:f4:8d:f0:6a:df:ff:9e:
b1:f6:02:9b:1f:2c:54:b2:0d:26:0e:ad:47:a2:48:5e:3f:0c:
e4:59:65:e4:43:f9:3a:68:5d:a0:ff:c0:40:92:cb:c6:35:bf:
b2:44:f8:5a:ba:1d:08:db:d4:e2:d2:0a:c1:9d:c9:ec:69:4c:
6c:f0:40:43:42:ac:a2:5c:a0:c9:4d:68:2a:43:62:b5:a4:2d:
f1:ac:db:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:31:02 2025 by rpki-client