Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.mft
File: W7HFcFXCnWafKJqfaPOSgjlCEyo.mft (raw, json)
Hash identifier: lPuN/Q2zLX076QIozcnZUrOgWiuS4U0XsxwfymZcDo0=
Subject key identifier: AF:6C:A1:3D:61:7D:C9:94:93:E8:A0:FE:1E:70:10:F6:D6:CF:E1:8C
Authority key identifier: 5B:B1:C5:70:55:C2:9D:66:9F:28:9A:9F:68:F3:92:82:39:42:13:2A
Certificate issuer: /CN=5bb1c57055c29d669f289a9f68f392823942132a
Certificate serial: 01974C69C514491FEC13B72435F04EEABAC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W7HFcFXCnWafKJqfaPOSgjlCEyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.mft
Manifest number: 118B
Signing time: Sat 07 Jun 2025 22:01:29 +0000
Manifest this update: Sat 07 Jun 2025 22:01:29 +0000
Manifest next update: Sun 08 Jun 2025 22:01:29 +0000
Files and hashes: 1: W7HFcFXCnWafKJqfaPOSgjlCEyo.crl (hash: /31BajDWFSpcIhdIrhkqpedg1gmHvhbl4phtO2LF0/s=)
2: oLD0eFUFYxck4v3i6OymPCRtKqc.roa (hash: d9IQhkXi9el+adqbpk+yqo7QWqWaJxfrg/LT1tEGEMY=)
3: uB1fsTN5xt9prk3FmqA_vfOk3V8.roa (hash: Xbk+Y99PsH3Ea8NbCtaJ5KS35ZMdZP+5pz4Y3JKvU0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/W7HFcFXCnWafKJqfaPOSgjlCEyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:69:c5:14:49:1f:ec:13:b7:24:35:f0:4e:ea:ba:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bb1c57055c29d669f289a9f68f392823942132a
Validity
Not Before: Jun 7 22:01:29 2025 GMT
Not After : Jun 8 22:01:29 2025 GMT
Subject: CN=af6ca13d617dc99493e8a0fe1e7010f6d6cfe18c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:de:40:b7:44:ed:32:56:62:a6:61:9f:5a:47:
82:6a:9d:86:88:62:c0:72:44:59:9e:29:62:ee:a9:
ec:2d:5a:e2:42:41:4b:b8:db:6d:2c:1b:71:41:c5:
6b:a9:e6:e2:7f:f6:1d:de:53:fd:99:d8:ff:d7:f4:
60:13:59:32:91:c3:87:b2:a9:37:23:f2:42:23:9b:
92:f2:dd:86:bf:ab:71:04:c1:c4:00:bf:b9:03:b6:
7a:03:55:b7:4d:6e:08:d1:c7:b4:8b:37:a6:8d:85:
33:7b:5f:18:9e:94:5c:12:b1:3a:5e:b8:74:e5:39:
ef:66:d1:b1:74:c9:42:bb:7d:95:a5:f2:18:54:5d:
6c:74:85:2f:02:f0:03:80:1f:c1:ba:85:30:a7:f1:
c1:20:3e:46:55:f0:c6:d7:6f:59:72:a0:8e:08:5f:
18:63:3b:33:33:ce:4c:39:3d:1e:53:1b:44:81:f1:
ec:67:21:48:f4:fc:ba:e9:51:74:ff:85:81:42:fa:
4a:8c:63:d5:27:a2:3c:3b:81:3a:be:f3:f9:46:a9:
e9:ac:98:94:51:65:18:5e:de:d7:63:1d:7c:4d:5a:
f1:a4:58:6b:e9:85:33:5f:1a:7b:4b:84:5b:ab:b3:
31:00:74:4f:19:cb:3e:38:19:99:37:bf:e6:bf:9f:
a8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:6C:A1:3D:61:7D:C9:94:93:E8:A0:FE:1E:70:10:F6:D6:CF:E1:8C
X509v3 Authority Key Identifier:
keyid:5B:B1:C5:70:55:C2:9D:66:9F:28:9A:9F:68:F3:92:82:39:42:13:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W7HFcFXCnWafKJqfaPOSgjlCEyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:40:71:59:20:5e:26:db:e7:46:17:ff:cd:17:eb:9a:26:18:
78:82:5c:c6:a6:ec:5b:a7:6d:36:4b:14:2f:5d:ea:4b:a1:d4:
f4:d9:99:5a:33:b9:64:74:2c:5c:73:48:2f:c0:7c:02:e8:79:
ce:3d:ca:93:b3:40:0e:f7:2d:4c:19:7f:fa:e8:69:a6:50:4e:
a9:55:5f:c8:9d:08:61:c3:10:e1:b6:af:75:02:f6:22:c6:9d:
a2:6d:0f:46:10:88:da:67:81:d8:4c:93:3c:1b:37:18:a5:34:
41:9c:fc:00:65:f1:bc:f2:f5:55:18:74:87:14:ce:ba:73:46:
63:17:7e:22:65:ae:87:17:65:58:69:01:87:c8:58:50:88:2e:
cb:ba:55:42:3f:bf:75:64:56:8f:44:c3:a7:08:d8:7c:a7:d8:
f5:3e:94:32:05:17:98:f7:76:f8:97:d1:c2:a3:4b:7e:e6:2b:
83:f4:9d:98:a0:16:72:83:86:04:af:b0:66:c8:34:2e:14:40:
bd:1f:1c:56:ab:30:1d:84:2a:39:a1:24:43:23:01:2e:51:5c:
6f:35:c0:6a:33:7e:ef:66:22:3b:01:be:b9:50:33:e6:3c:ec:
fc:cd:d3:07:98:63:a9:ab:3d:79:60:de:49:ae:c6:4b:a9:99:
cc:fb:c1:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:23:19 2025 by rpki-client