Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.mft
File: w0CQmuwyCowu4cq84TAsu31OBIY.mft (raw, json)
Hash identifier: s2IX2pKyaGwsONr0nU/KMAT+gs2HlmX7wXzmXdG33BI=
Subject key identifier: 38:E0:85:50:F6:9D:25:4D:F7:43:3B:12:DA:3E:50:18:37:F7:9E:52
Authority key identifier: C3:40:90:9A:EC:32:0A:8C:2E:E1:CA:BC:E1:30:2C:BB:7D:4E:04:86
Certificate issuer: /CN=c340909aec320a8c2ee1cabce1302cbb7d4e0486
Certificate serial: 01974DE9E6AD3864ABEA9731DD802F4804BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w0CQmuwyCowu4cq84TAsu31OBIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.mft
Manifest number: 1211
Signing time: Sun 08 Jun 2025 05:01:03 +0000
Manifest this update: Sun 08 Jun 2025 05:01:03 +0000
Manifest next update: Mon 09 Jun 2025 05:01:03 +0000
Files and hashes: 1: 1JRmPjjw2eEyAEj7-d9EaoFd8tQ.roa (hash: qUFNGxht8SatseV7uTcgdf36n0Wje2HhZXA6lIEPzt8=)
2: jb-zD-QZseypOhoYrz7-lEkthR4.roa (hash: NVATDU2rQowVsA5kxCOsDlRv1YWlJaECqpg6RYlVt8g=)
3: w0CQmuwyCowu4cq84TAsu31OBIY.crl (hash: a983rnqy/IrQ7doA1NfgbVXmBmi7g7F+HUSfWL7+cRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/w0CQmuwyCowu4cq84TAsu31OBIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:e9:e6:ad:38:64:ab:ea:97:31:dd:80:2f:48:04:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c340909aec320a8c2ee1cabce1302cbb7d4e0486
Validity
Not Before: Jun 8 05:01:03 2025 GMT
Not After : Jun 9 05:01:03 2025 GMT
Subject: CN=38e08550f69d254df7433b12da3e501837f79e52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:15:c3:53:b9:72:28:df:5d:ab:f1:67:a4:0c:
94:1e:a2:82:57:fa:c9:8c:94:d0:6d:56:e7:20:e1:
71:66:44:32:c4:ca:9e:27:46:8e:df:0b:cc:1b:b6:
1e:1a:ca:1f:18:8a:64:7a:1f:20:20:fa:9c:ad:6e:
53:a1:67:dc:8c:02:53:8f:18:28:fc:79:0b:ab:5a:
de:a6:83:07:d0:ff:32:80:73:0f:a5:a4:86:38:ba:
da:14:f2:6f:a7:73:54:11:a3:b4:90:27:74:23:42:
9d:04:7b:4c:8b:9e:61:69:b8:0d:2f:42:40:a5:ac:
4e:0b:3d:2e:fa:7f:12:62:03:8f:48:a0:a0:73:b3:
29:df:27:85:e1:fc:3c:f1:68:14:2b:ab:29:3f:c2:
ea:99:28:fc:4f:62:96:b2:87:06:47:fa:d1:9f:9e:
6a:c3:68:d8:f2:13:d6:e4:d6:21:60:e8:40:de:39:
b6:6e:9f:6f:8f:84:e1:61:58:31:80:a3:6e:c6:5f:
13:20:ed:27:1e:78:45:be:3e:cf:6f:64:29:e1:72:
da:c1:23:b7:0a:bb:e4:ea:9b:cf:c3:20:95:0e:ea:
22:50:e7:ff:89:6b:c6:8b:2a:f6:97:be:ef:40:3a:
8c:41:3a:7d:ea:52:9e:9f:a6:9c:9f:2a:bd:ba:55:
c5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E0:85:50:F6:9D:25:4D:F7:43:3B:12:DA:3E:50:18:37:F7:9E:52
X509v3 Authority Key Identifier:
keyid:C3:40:90:9A:EC:32:0A:8C:2E:E1:CA:BC:E1:30:2C:BB:7D:4E:04:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w0CQmuwyCowu4cq84TAsu31OBIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ec:f9:96:53:c6:27:cd:9c:ab:6b:75:12:d0:f8:de:22:89:2e:
05:13:d5:52:37:06:7d:31:82:e7:ea:03:39:26:d9:24:6f:81:
b3:6d:a1:32:0a:17:2b:e2:c5:e1:37:fc:5c:ee:21:32:10:93:
cd:fd:61:32:7b:33:04:89:d1:ad:12:1e:d4:1f:2c:6a:c6:66:
2e:65:2d:7a:d0:9f:4f:c5:e1:6e:10:2d:bb:12:0a:2f:8e:33:
1b:0b:50:7c:82:c0:e4:3d:a6:02:38:2c:d3:fb:0e:9c:c3:74:
55:41:50:95:78:c5:2d:fe:61:f5:ce:18:17:aa:32:7a:ec:13:
57:fd:b7:bf:5a:28:fd:2b:e7:cd:ff:2b:43:f4:72:50:94:67:
e0:49:fa:b1:4a:e2:08:3f:f5:28:0d:7d:a7:c3:fa:6d:a6:42:
a3:c9:d2:46:53:ba:83:44:f5:7b:65:48:4d:1d:99:a8:ad:ea:
e3:01:0e:93:43:6e:22:24:14:63:f8:cd:5e:8b:17:cf:c0:17:
80:e1:3a:e0:63:dc:8d:d7:63:4c:ed:f5:04:88:71:a8:1b:1b:
db:4f:07:df:c2:72:9f:84:ff:ca:a6:1d:f1:15:be:ce:fd:45:
91:a1:c0:75:cd:4e:a5:04:73:3c:fe:b5:16:4e:5d:dc:e0:8b:
77:a8:df:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:34:20 2025 by rpki-client