Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft
File: rw3BKw8bUz2NBOxhF9a55RL8qp8.mft (raw, json)
Hash identifier: TSaEsQ/Pb68M1RACQQbrhg2IODFrgnPCZ9w7akmRCBM=
Subject key identifier: 00:D6:EE:84:41:95:D2:06:F8:7D:29:3E:96:63:18:50:72:21:63:22
Authority key identifier: AF:0D:C1:2B:0F:1B:53:3D:8D:04:EC:61:17:D6:B9:E5:12:FC:AA:9F
Certificate issuer: /CN=af0dc12b0f1b533d8d04ec6117d6b9e512fcaa9f
Certificate serial: 019752A28A7EC8F34C69EDC7AAF071320578
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft
Manifest number: 132C
Signing time: Mon 09 Jun 2025 03:01:13 +0000
Manifest this update: Mon 09 Jun 2025 03:01:13 +0000
Manifest next update: Tue 10 Jun 2025 03:01:13 +0000
Files and hashes: 1: IPW3rYP7oE9P_ES0-kMgln06Sio.roa (hash: 9eLRN0ajqZHckDjlFErwwqTneM3/U1IZfbIXWVVHKRk=)
2: S11P7YKPNs_v7YdolA0FgB6j23E.roa (hash: TBKKGcG+I3pRwCi4L7A30ry5+YnjawyAWGjuVum7Pns=)
3: rw3BKw8bUz2NBOxhF9a55RL8qp8.crl (hash: OceOxXV2jS/y7rjc94iwDi5pR2iOF/Q+0gIOHq9zWIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:a2:8a:7e:c8:f3:4c:69:ed:c7:aa:f0:71:32:05:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af0dc12b0f1b533d8d04ec6117d6b9e512fcaa9f
Validity
Not Before: Jun 9 03:01:13 2025 GMT
Not After : Jun 10 03:01:13 2025 GMT
Subject: CN=00d6ee844195d206f87d293e9663185072216322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2e:a7:cc:8b:bc:f7:02:f8:c2:42:40:ee:78:
00:be:49:3c:c8:ff:99:57:e7:33:55:f8:55:0f:79:
c9:e0:7e:28:be:63:1b:e7:c3:d6:43:19:c3:41:1d:
af:d3:ec:c6:79:8f:76:ca:f5:06:e9:a8:73:2e:25:
c9:2f:1c:6e:6a:2a:b4:80:33:a0:ed:01:54:d8:19:
f4:f9:82:70:4f:c1:18:f6:bd:84:41:80:dd:97:51:
34:bb:eb:3a:c3:72:f9:72:24:16:1f:c3:be:ec:92:
fd:12:a3:19:7d:9c:40:73:91:ea:e3:7c:39:ab:83:
db:66:17:a3:eb:37:d9:0b:d3:59:fc:19:e9:a6:0a:
7e:d0:53:74:e5:e0:ff:2f:b5:cb:c5:37:cb:15:25:
07:9f:68:40:65:6c:b5:ad:8d:c9:c3:bc:b6:48:a2:
0b:54:93:29:4b:b5:dd:22:3a:8e:7d:bd:cc:78:e1:
bf:66:a3:ed:8c:60:65:d0:cf:fb:ed:cc:22:41:c9:
a1:2a:c0:6c:9e:2f:5a:16:4b:a1:ea:b9:52:fa:33:
2d:60:65:4f:a9:b7:b2:02:6b:79:d7:40:23:b0:cd:
d1:02:db:d4:9d:97:21:8b:a7:85:19:ca:d4:69:18:
d4:95:d6:ef:4d:d2:92:1f:83:c0:dd:ff:6c:3e:65:
2d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D6:EE:84:41:95:D2:06:F8:7D:29:3E:96:63:18:50:72:21:63:22
X509v3 Authority Key Identifier:
keyid:AF:0D:C1:2B:0F:1B:53:3D:8D:04:EC:61:17:D6:B9:E5:12:FC:AA:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:bb:3a:27:26:4c:3b:3a:20:37:e7:a1:0e:0b:c2:94:c7:c2:
99:af:33:c8:dc:ec:2c:34:23:27:a5:03:b8:46:c5:64:09:41:
ff:51:1a:54:e3:60:6e:68:3b:c2:36:91:ba:92:6f:ab:24:25:
b9:a8:8a:d5:87:c0:85:fa:9d:97:7a:70:d7:a7:63:88:d5:d0:
4a:59:b3:e8:df:37:af:9c:29:5c:c9:b3:76:86:26:08:ce:66:
5b:57:c1:36:64:ac:5a:fc:10:5a:db:e3:f2:cc:a7:ce:3a:58:
65:bf:e3:b6:d7:d4:91:df:10:e1:08:05:da:e9:d1:b6:fa:9e:
3f:fa:f5:fe:de:02:b4:3d:3c:b1:1e:18:5f:51:8a:5b:ae:48:
7f:aa:10:69:c9:bf:0f:31:06:94:20:60:b6:b4:8d:f1:91:c0:
e3:78:46:46:33:18:4d:25:f1:a4:89:2c:a9:b8:91:be:72:85:
48:8b:42:96:f5:64:50:40:29:62:8f:b0:cc:5c:bc:17:d5:62:
8e:56:a8:af:c2:e5:92:da:ec:7c:b4:a0:76:0d:26:92:ca:e4:
9a:d8:b7:b9:22:c6:dd:99:4f:95:75:cd:45:e7:4e:43:90:d5:
ae:79:d9:30:5a:e4:71:d5:5d:86:71:04:b7:c3:1f:80:21:1c:
98:62:e8:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 05:03:18 2025 by rpki-client