Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
File: w70m_iKV5GK-JnhTPvpTHiO38QI.mft (raw, json)
Hash identifier: Ne0uE2z9HqVjxyK8eXmgJ2hnMbmL0w3nDRimMe3lnDA=
Subject key identifier: 88:AF:CF:94:5E:AB:8D:7B:3A:57:56:95:CF:CF:7D:FE:AD:52:D9:88
Authority key identifier: C3:BD:26:FE:22:95:E4:62:BE:26:78:53:3E:FA:53:1E:23:B7:F1:02
Certificate issuer: /CN=c3bd26fe2295e462be2678533efa531e23b7f102
Certificate serial: 01974A7B2650EF1A44F7B9E0D6A67373D1B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 13:01:14 +0000
Manifest this update: Sat 07 Jun 2025 13:01:14 +0000
Manifest next update: Sun 08 Jun 2025 13:01:14 +0000
Files and hashes: 1: mdzOjm97CLLzPCbjlPobKIT1pLw.roa (hash: t6RlQNOZ4r0YZ3Um/Nvgu1T4czU0EwLc7Ga8Lg+Wxu4=)
2: w70m_iKV5GK-JnhTPvpTHiO38QI.crl (hash: YSj6Q1ROWVdYZz4perZ2uzJ+QSYbnCIFTBZC3aB4868=)
3: yHP9EGdLjDrqdAgK0gSgkfOYdDE.roa (hash: 9lzUExWqudI5IZaHPGACvDV+UoMVt4hmvKdyWsLEU8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:26:50:ef:1a:44:f7:b9:e0:d6:a6:73:73:d1:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3bd26fe2295e462be2678533efa531e23b7f102
Validity
Not Before: Jun 7 13:01:14 2025 GMT
Not After : Jun 8 13:01:14 2025 GMT
Subject: CN=88afcf945eab8d7b3a575695cfcf7dfead52d988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c8:c3:f1:c6:4b:e6:dc:86:12:48:68:f7:bb:
bc:e3:93:c7:7d:91:81:99:ac:db:c6:34:5c:a4:b5:
af:c5:55:d1:a1:49:88:58:4d:77:6b:08:11:c4:49:
5c:8d:a4:4d:28:cd:94:d4:77:df:63:3d:da:4c:6a:
00:91:ae:e3:b4:f1:f0:28:6d:3a:a3:c7:b7:d9:b8:
64:86:a3:33:46:cf:4c:b7:5d:8c:97:c7:fe:46:c5:
da:27:26:4d:d5:7c:7d:a8:2f:4b:74:c2:3a:0d:3b:
49:19:40:fa:7b:96:16:5f:29:b2:2f:ea:0e:de:6d:
49:e3:77:81:fb:77:1b:43:12:65:de:71:e5:26:d7:
6f:b8:8b:89:cd:52:ce:f3:45:b6:7a:72:95:ae:44:
0c:42:62:8e:ad:32:52:e1:42:82:a5:ae:c8:63:04:
43:83:dc:d4:71:0c:42:0d:09:84:ed:77:6b:ff:8e:
92:d2:10:94:65:d0:3a:65:ae:bc:45:d9:64:08:83:
a1:aa:3d:69:8c:35:d0:b2:1a:27:c8:43:04:87:50:
ce:07:fc:0d:24:2e:b3:75:ba:ea:c4:fd:5e:a7:39:
2c:ae:36:4a:59:fc:f7:44:70:9a:f6:8d:2b:59:cb:
a4:97:40:02:ce:1c:ec:2f:49:33:99:63:ac:4f:fa:
ea:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:AF:CF:94:5E:AB:8D:7B:3A:57:56:95:CF:CF:7D:FE:AD:52:D9:88
X509v3 Authority Key Identifier:
keyid:C3:BD:26:FE:22:95:E4:62:BE:26:78:53:3E:FA:53:1E:23:B7:F1:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:ee:e2:0e:e8:1d:2e:6d:99:59:b1:84:49:47:c7:d8:90:3d:
c9:f1:45:ae:7c:1b:e3:47:5e:cd:a5:e5:11:bf:b8:06:0c:4a:
4e:47:b5:fa:1c:d3:81:95:44:7b:f8:17:16:50:b1:1e:83:74:
d1:c4:73:66:18:80:46:ef:2b:48:86:48:d0:9b:3b:02:88:d5:
59:08:82:6e:38:05:6b:bb:60:8b:3d:52:49:68:8d:ee:61:75:
68:dd:a7:87:e4:b3:76:f0:6e:0f:11:e0:e9:b1:55:33:9a:4f:
a2:c4:83:22:df:06:24:63:c9:a5:1e:a5:cd:a5:e6:45:49:1c:
63:ea:84:38:a1:df:35:ce:fe:90:03:08:ee:26:4a:5a:2d:0b:
18:7b:5a:84:67:6d:bf:3e:79:89:6a:5b:92:9d:c2:14:65:b1:
af:ae:6d:85:96:ef:14:68:21:b0:04:46:9a:a2:3d:1b:3c:55:
2b:77:37:dd:e5:a8:a0:b2:7a:42:c8:29:21:b2:5b:8d:40:42:
07:80:79:cf:2f:44:0f:44:5e:09:b7:06:2e:78:82:ed:9b:c6:
68:4f:14:ae:b2:dd:d5:60:1c:25:11:df:b5:3d:51:49:bd:02:
f6:cb:50:89:2a:df:28:6f:f5:65:3a:71:6d:dd:8e:09:ef:da:
bd:70:69:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:42:53 2025 by rpki-client