Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.mft
File: w4yh1BjCGOJveVGBqeO7e3nURD8.mft (raw, json)
Hash identifier: +J1N4ZXDPiF/uWiK9WK9u9Guh8HWMwRYyeP6st2zIDQ=
Subject key identifier: 21:69:8C:6A:53:ED:9E:6F:29:34:6F:20:0F:35:93:1F:91:C7:97:52
Authority key identifier: C3:8C:A1:D4:18:C2:18:E2:6F:79:51:81:A9:E3:BB:7B:79:D4:44:3F
Certificate issuer: /CN=c38ca1d418c218e26f795181a9e3bb7b79d4443f
Certificate serial: 01975F81C1C55CD8ABCF289A077AE43D0AC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4yh1BjCGOJveVGBqeO7e3nURD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.mft
Manifest number: 1589
Signing time: Wed 11 Jun 2025 15:00:28 +0000
Manifest this update: Wed 11 Jun 2025 15:00:28 +0000
Manifest next update: Thu 12 Jun 2025 15:00:28 +0000
Files and hashes: 1: HtKtiVg-0zn3K5n3LScDDg1_p88.roa (hash: to3WuOq+FMznKALAAApfBe9RQEcWrRQ420WrsW7wdUU=)
2: w4yh1BjCGOJveVGBqeO7e3nURD8.crl (hash: dkkxmYcyJ/uk2oyjBWLmK0MqQ1H/xSqI0nVa2lHszfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w4yh1BjCGOJveVGBqeO7e3nURD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 15:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:81:c1:c5:5c:d8:ab:cf:28:9a:07:7a:e4:3d:0a:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c38ca1d418c218e26f795181a9e3bb7b79d4443f
Validity
Not Before: Jun 11 15:00:28 2025 GMT
Not After : Jun 12 15:00:28 2025 GMT
Subject: CN=21698c6a53ed9e6f29346f200f35931f91c79752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0f:42:09:d8:25:b6:fe:d8:6e:b6:71:f8:24:
be:50:b6:01:97:76:60:26:d0:27:02:31:e8:c9:7e:
26:95:63:a4:80:7c:03:27:cc:d9:69:56:7a:66:10:
f9:2f:49:f3:3f:d1:58:29:55:06:a4:09:1f:fa:6c:
1c:15:5d:b9:26:c9:83:6e:01:50:5e:1a:fa:9d:a9:
3f:62:2d:91:b9:37:34:ff:29:99:b2:4c:8f:57:a9:
97:cf:c2:a2:78:2e:14:68:58:4c:ed:9a:72:d3:76:
9b:71:f8:fb:2d:00:a2:fa:72:4a:16:dd:5b:1b:ca:
ce:64:a2:85:3d:48:68:e0:56:ec:55:9a:ba:a4:99:
37:ae:a1:2b:17:1b:5a:39:a6:be:55:3b:07:45:bc:
c9:f8:4c:bf:13:f9:35:a3:44:26:0a:0b:cc:7a:ce:
3c:bf:7d:97:05:1b:11:6e:d9:50:1d:a3:bb:75:a7:
3c:f2:f6:59:3b:ba:8c:42:c8:eb:27:cf:57:79:82:
8d:3d:cd:35:92:1c:f1:13:41:ed:7a:3b:2a:8d:dc:
47:bf:f2:5c:8d:82:11:4f:e0:73:b8:49:6c:c5:f0:
a6:8b:e0:59:2b:ab:49:b4:c7:b9:b9:34:26:9d:ff:
c3:bb:bb:81:4a:b7:e1:fd:08:a8:5d:3a:ba:b2:50:
28:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:69:8C:6A:53:ED:9E:6F:29:34:6F:20:0F:35:93:1F:91:C7:97:52
X509v3 Authority Key Identifier:
keyid:C3:8C:A1:D4:18:C2:18:E2:6F:79:51:81:A9:E3:BB:7B:79:D4:44:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4yh1BjCGOJveVGBqeO7e3nURD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:92:9a:79:f9:28:ff:0d:94:1c:c5:c4:73:b5:a9:da:cb:6e:
3e:46:3c:32:41:ef:54:43:03:92:a8:16:93:aa:7e:5b:7c:95:
86:35:ec:a4:6f:33:81:42:4d:1d:e2:5d:08:3d:4d:ef:e7:5b:
96:06:d5:2e:de:23:11:04:af:bb:c6:62:bc:1c:10:71:82:ad:
c6:35:f1:1d:b1:b9:5f:d5:2b:92:b1:e1:ca:61:3c:85:cc:bf:
e6:65:f2:4e:b9:f6:4c:4a:11:13:13:22:9b:c7:bb:5c:5c:fe:
ab:c2:07:e2:f3:05:d3:d0:e7:6f:7d:52:9a:24:de:ee:36:49:
af:71:c3:23:1e:55:2d:81:c9:af:a6:9d:b7:01:81:31:f5:41:
36:5c:fd:51:f5:d2:f7:04:ab:11:66:31:ec:c8:27:0f:56:50:
99:89:a2:e4:ac:d4:e0:23:3b:99:10:55:cf:ed:b7:fd:f9:81:
7d:0c:11:83:55:1b:dd:f2:0e:bc:79:80:25:18:70:0b:8e:9d:
21:21:c0:77:db:65:9e:e2:e9:0a:ae:7f:33:58:41:fe:09:c5:
b0:6e:21:ab:6e:86:58:e6:65:87:e5:ee:e5:8e:74:bf:87:fe:
69:9f:f9:8c:81:28:8f:d5:7f:39:4f:87:b3:f3:12:23:92:1f:
17:14:73:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 20:37:48 2025 by rpki-client