Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft
File: rwAta7hamGvIjbzZMyCUVOW14II.mft (raw, json)
Hash identifier: ZIJYCxYsLqDfQTAMwecqo8wTmqQjH79ASBmTMz5vuwk=
Subject key identifier: 73:F9:73:C2:69:47:92:2C:32:02:CF:87:FD:B5:3E:04:1E:C9:54:3C
Authority key identifier: AF:00:2D:6B:B8:5A:98:6B:C8:8D:BC:D9:33:20:94:54:E5:B5:E0:82
Certificate issuer: /CN=af002d6bb85a986bc88dbcd933209454e5b5e082
Certificate serial: 01974B569740E8CA0D392CCEF98004CB8D5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwAta7hamGvIjbzZMyCUVOW14II.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft
Manifest number: 107D
Signing time: Sat 07 Jun 2025 17:00:55 +0000
Manifest this update: Sat 07 Jun 2025 17:00:55 +0000
Manifest next update: Sun 08 Jun 2025 17:00:55 +0000
Files and hashes: 1: FSst80BStcOZoxcVEEn7HUNlaMg.roa (hash: MkzJ0Sac3ZN5iWdcIOjWwvYuR5zj6qypIoySO/md3YQ=)
2: rwAta7hamGvIjbzZMyCUVOW14II.crl (hash: mx3k9abeHKz2I+EdgXhdDCuq6ysa37Lowi8I0pPsffc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwAta7hamGvIjbzZMyCUVOW14II.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 17:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:97:40:e8:ca:0d:39:2c:ce:f9:80:04:cb:8d:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af002d6bb85a986bc88dbcd933209454e5b5e082
Validity
Not Before: Jun 7 17:00:55 2025 GMT
Not After : Jun 8 17:00:55 2025 GMT
Subject: CN=73f973c26947922c3202cf87fdb53e041ec9543c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0b:63:28:e6:14:cb:24:a9:c9:86:1b:7c:a5:
1e:d9:f8:40:8a:fe:72:79:aa:69:2f:d2:31:32:4e:
c7:a9:5f:09:19:d6:ec:80:63:39:2b:e9:50:db:1e:
a6:b1:97:76:93:a0:2c:3a:3a:78:5d:25:f3:80:9f:
97:1a:e2:b7:f3:b2:c9:d1:a4:a9:ab:76:08:f8:5d:
8d:e5:d3:84:f3:57:a3:c0:c0:a2:b8:53:5b:ae:b3:
59:b4:fd:7b:9d:38:db:bb:a7:8b:d4:d9:90:f7:a3:
3b:1e:ae:d7:2a:e0:ae:3a:0c:1b:8b:0d:a0:eb:fe:
0d:21:7d:0d:39:97:e9:ad:78:80:e9:fc:91:db:18:
3c:b0:ae:13:29:a5:75:36:20:63:e5:bf:5f:35:13:
12:e9:da:68:0c:c7:85:72:98:2f:e7:08:f4:44:42:
cd:0e:1a:fc:f9:24:9a:88:1a:5b:01:c2:1c:10:10:
11:7a:14:3b:26:ce:92:2c:e1:a6:1b:f6:3e:67:ee:
f4:a4:c3:d9:75:bc:04:e5:6f:0f:87:50:8b:9a:a3:
72:33:c8:ca:d4:85:d2:23:81:ea:ac:1e:c7:8b:41:
cf:00:55:33:4b:7a:9d:e4:21:6d:67:1d:08:67:5f:
e4:cc:97:41:4c:9c:71:ab:af:6c:41:d2:b4:61:ad:
24:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F9:73:C2:69:47:92:2C:32:02:CF:87:FD:B5:3E:04:1E:C9:54:3C
X509v3 Authority Key Identifier:
keyid:AF:00:2D:6B:B8:5A:98:6B:C8:8D:BC:D9:33:20:94:54:E5:B5:E0:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwAta7hamGvIjbzZMyCUVOW14II.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:8a:3e:43:61:6d:98:14:26:47:ee:c4:32:c2:4b:21:d0:88:
c7:3f:35:c9:c2:43:cc:37:19:a1:88:7a:7b:53:12:23:67:cf:
83:87:d5:f0:3d:a6:2e:ff:d3:56:db:10:a8:2a:bd:ed:cd:76:
b6:d1:13:f6:1a:1e:1e:b6:c7:57:2f:cb:26:7f:27:0c:cf:f0:
07:0c:00:39:58:eb:5d:72:80:38:95:48:b5:4f:88:0a:41:97:
a0:92:79:20:ea:5c:8a:36:ed:59:e5:58:03:b9:0f:18:b1:b2:
3b:97:3d:8a:41:31:eb:25:52:69:47:e6:ca:e9:2b:65:67:c5:
71:18:25:1d:e9:06:6b:c4:55:b2:6e:34:32:5d:4a:09:8c:43:
69:85:0c:33:7a:9b:9c:fd:ce:fc:2c:2a:30:cb:ee:a3:c1:06:
99:19:90:37:28:4e:cb:73:1c:a1:a3:ff:e2:51:64:d3:14:27:
73:ca:42:17:ff:f6:b7:87:da:66:b9:08:93:cf:f6:68:03:a8:
49:1c:42:aa:95:e1:1b:cd:e2:85:29:75:6a:cd:12:c2:30:16:
bb:9d:b0:76:eb:1a:51:83:d6:4a:97:df:85:2f:f0:0c:d6:99:
15:28:7e:14:eb:79:d1:03:77:b2:86:0d:d8:c6:f6:24:f9:5a:
dc:9c:49:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:30:38 2025 by rpki-client