
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/W_W9pYNlLgWH_vhBZrQfbNqPH3g.mft
File: W_W9pYNlLgWH_vhBZrQfbNqPH3g.mft (raw, json)
Hash identifier: 3EjNu3r3M9Kh1+MYgmgdYFCH0q+EEpcDmo1JYwqKY7U=
Subject key identifier: CF:7E:A5:F3:D5:FC:FB:5E:99:0F:90:71:12:10:E5:24:35:7A:0A:54
Authority key identifier: 5B:F5:BD:A5:83:65:2E:05:87:FE:F8:41:66:B4:1F:6C:DA:8F:1F:78
Certificate issuer: /CN=5bf5bda583652e0587fef84166b41f6cda8f1f78
Certificate serial: 01974BC450CD6A5EE9E3CCBA312F2A98B991
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W_W9pYNlLgWH_vhBZrQfbNqPH3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/W_W9pYNlLgWH_vhBZrQfbNqPH3g.mft
Manifest number: 0328
Signing time: Sat 07 Jun 2025 19:00:46 +0000
Manifest this update: Sat 07 Jun 2025 19:00:46 +0000
Manifest next update: Sun 08 Jun 2025 19:00:46 +0000
Files and hashes: 1: D11OUUhDT5UjGqOO2sYVKlSZfd0.roa (hash: 1HSM7rlxpcn34ZRTxOgco4d9oki6ca3htijNuPzC2SI=)
2: W_W9pYNlLgWH_vhBZrQfbNqPH3g.crl (hash: dDSO3TsNaxNJzdl8lZgWn2lFY2kHeIFgWUZ1d7k5ym0=)
3: sscr1AKks234H4_aH9W5QOyjBo0.roa (hash: QpgjlQcIAUxRiyA26HjeU1kRMWG1ZaRrrHu8xWpWD0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/W_W9pYNlLgWH_vhBZrQfbNqPH3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/W_W9pYNlLgWH_vhBZrQfbNqPH3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/W_W9pYNlLgWH_vhBZrQfbNqPH3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 19:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:c4:50:cd:6a:5e:e9:e3:cc:ba:31:2f:2a:98:b9:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bf5bda583652e0587fef84166b41f6cda8f1f78
Validity
Not Before: Jun 7 19:00:46 2025 GMT
Not After : Jun 8 19:00:46 2025 GMT
Subject: CN=cf7ea5f3d5fcfb5e990f90711210e524357a0a54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:48:6e:65:13:22:6e:17:64:6b:4f:7b:98:53:
ec:85:0c:78:6a:62:35:bf:d2:67:c5:c4:3d:a9:a7:
29:69:a3:4a:35:fe:94:ae:8f:70:d1:11:1a:d5:6d:
ba:9d:6c:66:fc:93:81:6f:17:9a:14:bd:79:91:0f:
3e:6e:fb:5f:be:0e:fe:67:24:72:99:e1:71:94:b2:
99:df:a2:b9:8b:c9:3f:7a:06:76:14:2b:16:9e:b0:
3b:e1:d5:9b:06:46:aa:e2:db:7a:93:8e:8d:45:5a:
e8:aa:f2:d0:ab:39:e1:e3:60:10:5d:95:c5:ee:82:
72:10:1f:6b:d3:c6:6d:f2:b5:54:2a:00:68:77:f6:
c9:6f:7e:75:c9:ca:75:a6:b9:db:2a:29:35:05:57:
3c:81:0e:b6:d9:da:01:2c:04:38:07:7e:01:9b:83:
2d:c4:fa:53:a3:0b:26:dd:fd:38:be:f5:67:1b:b1:
a3:21:9f:c6:16:f2:b4:9a:cb:21:5c:59:0f:59:a4:
a4:8e:8f:ce:48:13:13:06:6d:6e:b0:b4:ba:d1:02:
54:f2:a0:38:d2:b8:bd:8a:c1:17:f5:66:d8:9a:b5:
0e:7e:7f:21:7e:1d:49:6b:0e:49:e0:ca:af:49:99:
8f:72:c3:22:fa:e8:1b:a4:0d:b0:18:a4:5d:71:19:
bd:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:7E:A5:F3:D5:FC:FB:5E:99:0F:90:71:12:10:E5:24:35:7A:0A:54
X509v3 Authority Key Identifier:
keyid:5B:F5:BD:A5:83:65:2E:05:87:FE:F8:41:66:B4:1F:6C:DA:8F:1F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W_W9pYNlLgWH_vhBZrQfbNqPH3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/W_W9pYNlLgWH_vhBZrQfbNqPH3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/W_W9pYNlLgWH_vhBZrQfbNqPH3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:aa:d7:11:80:15:f5:68:2c:41:4e:f1:53:44:ae:c9:9a:0a:
ee:9b:f4:b2:c5:13:f2:a0:79:2a:02:d1:e8:37:80:0a:de:c4:
a8:41:4c:21:5b:d4:35:51:7e:aa:5a:e5:84:45:53:ae:dc:ac:
bd:2e:28:d7:04:71:e8:f2:07:92:b1:ef:a4:09:2c:32:2b:8f:
6d:83:a4:40:8f:5b:6e:fa:2c:1c:6a:32:3e:6f:ca:23:72:76:
4b:93:17:68:51:e6:c8:35:01:14:15:a7:68:9a:cc:1b:95:7a:
48:81:76:22:bb:70:7d:49:5c:61:c0:d8:5b:8c:c3:3a:6d:2d:
7c:2c:ec:a8:4e:aa:02:9a:90:65:74:0b:1a:49:b7:ae:b6:58:
a1:61:13:2c:4f:b0:88:a1:14:63:00:2b:e1:c7:b9:3b:0e:80:
07:51:73:80:26:1e:84:38:82:55:ed:f4:0f:f2:62:1e:11:59:
e2:8f:73:f0:7d:27:63:26:71:b7:dc:0e:17:8e:4b:48:90:82:
44:f2:0e:58:e0:49:17:1c:8c:8f:9f:01:5c:3c:5f:8c:04:a3:
89:6a:01:60:08:6a:0b:94:ea:89:52:16:b4:28:9a:e3:df:90:
7d:40:74:a9:38:6c:64:b5:c3:92:02:42:ea:7e:de:71:44:6c:
73:af:ca:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:07:22 2025 by rpki-client