Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/64b6b4-7ce2-4c8b-8585-ed092dbc72b3/1/_7WFJ4AULkE_nxWyTVmRMxGhDsI.mft
File: _7WFJ4AULkE_nxWyTVmRMxGhDsI.mft (raw, json)
Hash identifier: OUAWX9CzpH8YgacBXVZ4gHdGQgWa9vD9QH6VlpgOffw=
Subject key identifier: A5:A8:70:AE:E5:24:F6:A0:9F:52:2B:95:44:3C:DF:5A:2E:FF:73:CE
Authority key identifier: FF:B5:85:27:80:14:2E:41:3F:9F:15:B2:4D:59:91:33:11:A1:0E:C2
Certificate issuer: /CN=ffb5852780142e413f9f15b24d59913311a10ec2
Certificate serial: 01974A43714ACF55DACE8F0B71CEF055173A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7WFJ4AULkE_nxWyTVmRMxGhDsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/64b6b4-7ce2-4c8b-8585-ed092dbc72b3/1/_7WFJ4AULkE_nxWyTVmRMxGhDsI.mft
Manifest number: 32
Signing time: Sat 07 Jun 2025 12:00:23 +0000
Manifest this update: Sat 07 Jun 2025 12:00:23 +0000
Manifest next update: Sun 08 Jun 2025 12:00:23 +0000
Files and hashes: 1: I32dN6KwFoewNSfpS4XBjG5myXU.roa (hash: PHYrnIWI7dP/AROY19OnK6Q0ENbOWp8OyZchyzmlbds=)
2: _7WFJ4AULkE_nxWyTVmRMxGhDsI.crl (hash: HNdMRIPM/9MIbSabXccZAhy5TNHt6SHRDheR201Fpzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/64b6b4-7ce2-4c8b-8585-ed092dbc72b3/1/_7WFJ4AULkE_nxWyTVmRMxGhDsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/64b6b4-7ce2-4c8b-8585-ed092dbc72b3/1/_7WFJ4AULkE_nxWyTVmRMxGhDsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_7WFJ4AULkE_nxWyTVmRMxGhDsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:71:4a:cf:55:da:ce:8f:0b:71:ce:f0:55:17:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffb5852780142e413f9f15b24d59913311a10ec2
Validity
Not Before: Jun 7 12:00:23 2025 GMT
Not After : Jun 8 12:00:23 2025 GMT
Subject: CN=a5a870aee524f6a09f522b95443cdf5a2eff73ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:53:6e:cf:87:89:af:20:78:b0:8a:3f:22:ec:
0a:5d:2f:76:83:da:c4:6d:cd:2e:51:72:e0:cc:47:
d3:d1:29:d1:8d:be:88:2f:35:59:a3:e0:82:69:0f:
24:46:ff:8c:a2:78:ab:ac:77:c1:f2:ec:bb:9e:22:
c0:ef:48:d8:86:d0:da:d9:5f:53:8a:39:20:e3:85:
aa:3f:23:ec:a5:25:1e:b7:18:77:54:18:ed:7f:e2:
03:56:d6:05:e9:0b:19:2a:07:a8:15:88:2f:ee:fe:
35:76:d7:2f:d5:6c:40:02:8b:b6:7a:ab:ba:28:a2:
b4:23:8f:98:5f:4f:7d:98:bc:a4:41:e1:d9:00:ba:
47:03:a5:9d:89:05:4a:7a:82:37:ee:ef:f2:54:87:
ba:b9:53:54:e4:e6:8b:68:c4:15:0b:14:fa:5f:a6:
f6:c4:2c:f0:4a:b7:18:d1:9b:0b:59:cf:b7:82:5d:
19:be:aa:1c:00:a6:26:4c:18:6a:16:53:2b:63:5a:
a9:d4:7c:3f:2a:6e:60:d4:9b:07:57:67:de:60:fc:
09:c0:64:d5:86:49:2a:59:1d:bf:ac:5f:6b:4f:89:
74:46:26:fc:7d:09:99:fd:76:a8:69:f1:7d:61:2d:
00:1f:da:89:69:bc:6d:5e:04:bb:fb:9b:bc:3c:4f:
cd:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A8:70:AE:E5:24:F6:A0:9F:52:2B:95:44:3C:DF:5A:2E:FF:73:CE
X509v3 Authority Key Identifier:
keyid:FF:B5:85:27:80:14:2E:41:3F:9F:15:B2:4D:59:91:33:11:A1:0E:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7WFJ4AULkE_nxWyTVmRMxGhDsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/64b6b4-7ce2-4c8b-8585-ed092dbc72b3/1/_7WFJ4AULkE_nxWyTVmRMxGhDsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/64b6b4-7ce2-4c8b-8585-ed092dbc72b3/1/_7WFJ4AULkE_nxWyTVmRMxGhDsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:a6:65:d8:9d:ee:75:0a:75:80:77:1e:2c:05:a4:26:70:e7:
d4:b9:73:b7:c8:05:8e:d5:6d:12:c1:70:c0:de:76:3b:63:5b:
4f:60:66:65:3c:db:02:e3:96:bf:91:34:7c:e8:06:8d:c5:b2:
ef:0e:0d:fb:68:27:af:8f:14:0e:ea:da:42:14:1a:81:d7:61:
02:cb:64:e3:19:11:4e:06:71:3a:63:d4:07:b9:9e:ca:ef:cc:
a2:28:71:75:a5:cc:ef:89:93:70:b7:05:74:41:2c:a0:0f:af:
b5:6d:66:a4:f2:01:ef:42:82:a6:de:69:11:9c:01:10:e3:c4:
0b:51:c0:58:87:af:28:b4:7b:a7:fa:67:72:16:ef:23:a0:cc:
54:da:2a:99:46:e9:96:f5:23:4a:a6:c9:f0:96:a5:28:cf:2b:
68:b2:55:20:2f:2f:26:a1:dc:a9:aa:7f:a9:19:54:50:88:76:
65:39:b1:f7:3d:63:63:3b:e2:2e:04:83:7b:78:24:58:f9:94:
61:34:a7:9b:d8:34:60:aa:fb:cc:0d:21:8a:df:67:ea:a8:40:
1c:38:43:ca:57:8e:5e:1b:0e:5e:fa:5c:2c:6b:92:e1:06:87:
ee:44:08:63:c5:20:a7:16:cf:12:2d:27:64:64:8e:ef:58:39:
4b:b0:8b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:58:27 2025 by rpki-client