Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft
File: 9WPabrO3oH_cRSWIMASXDWQLA2s.mft (raw, json)
Hash identifier: HxbnRZY9MwxhTYCptz6rOFrnOUmziohdffe2LAqeG7M=
Subject key identifier: 8E:A3:42:5B:F6:71:A6:9A:3E:BB:58:97:08:F7:85:37:74:42:7E:7B
Authority key identifier: F5:63:DA:6E:B3:B7:A0:7F:DC:45:25:88:30:04:97:0D:64:0B:03:6B
Certificate issuer: /CN=f563da6eb3b7a07fdc4525883004970d640b036b
Certificate serial: 019746303233B5474D82EDDCA61B4CC09A71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WPabrO3oH_cRSWIMASXDWQLA2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft
Manifest number: 1583
Signing time: Fri 06 Jun 2025 17:00:53 +0000
Manifest this update: Fri 06 Jun 2025 17:00:53 +0000
Manifest next update: Sat 07 Jun 2025 17:00:53 +0000
Files and hashes: 1: 9WPabrO3oH_cRSWIMASXDWQLA2s.crl (hash: CG/Rl9bbfIDL9rb8CBWSWoGlwglpAWdu9jP/QAvqNO0=)
2: h04E6GUTfk7g-nszYeXV5v59Z7g.roa (hash: D0nODnBLfeAlBTbUkjxGcmmT4S/QYeiGnt9Aow5Sjx0=)
3: xJetAjXRbPTX957PRc-ZRikOCag.roa (hash: zIdEISxA+75bDRZATAE0MJ7G/Gr2I74NP3sEuTFZFW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WPabrO3oH_cRSWIMASXDWQLA2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:30:32:33:b5:47:4d:82:ed:dc:a6:1b:4c:c0:9a:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f563da6eb3b7a07fdc4525883004970d640b036b
Validity
Not Before: Jun 6 17:00:53 2025 GMT
Not After : Jun 7 17:00:53 2025 GMT
Subject: CN=8ea3425bf671a69a3ebb589708f7853774427e7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2c:d6:71:39:42:0d:39:72:b6:ea:69:8e:3c:
42:58:c8:01:32:c4:78:9e:31:b1:41:4f:d4:e1:b6:
fb:60:f5:44:5c:bd:3b:30:c2:5d:de:b2:19:39:15:
87:aa:a0:bc:01:fc:e0:51:57:63:ae:4c:c0:16:31:
53:a3:46:fe:a9:65:c0:d7:81:dd:f4:d6:6f:db:54:
9c:bf:75:58:e3:5c:2c:49:2e:05:8c:13:c8:8b:98:
ae:c7:15:f6:7a:9f:c1:d3:ee:5c:7b:f8:f6:f7:56:
43:46:9e:ae:62:d6:58:61:2c:cd:ce:9f:80:e3:2f:
ad:b5:2e:c0:4e:13:2a:6e:7d:63:12:c0:48:68:9d:
78:11:04:20:36:b5:45:85:7c:a5:e0:1c:06:b4:04:
a6:c0:18:d1:c2:c7:f8:a7:7b:b7:04:fc:f7:c0:f4:
50:d9:20:22:93:2f:b2:cd:d8:1e:02:3c:e5:ef:95:
3b:73:09:85:e3:43:1b:46:bc:32:77:22:18:9e:ef:
57:bc:2d:a1:9a:96:e1:63:79:1c:44:d8:81:a1:3b:
a3:82:31:00:f9:96:a0:ea:02:ae:3b:91:6a:dd:ff:
f9:a7:94:f9:87:5c:89:c5:66:87:75:1d:04:6f:9c:
ad:77:20:a5:b5:58:bc:cb:2b:de:f8:70:4b:26:48:
ff:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A3:42:5B:F6:71:A6:9A:3E:BB:58:97:08:F7:85:37:74:42:7E:7B
X509v3 Authority Key Identifier:
keyid:F5:63:DA:6E:B3:B7:A0:7F:DC:45:25:88:30:04:97:0D:64:0B:03:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WPabrO3oH_cRSWIMASXDWQLA2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:4a:4c:ab:00:48:65:74:b1:f3:84:ae:c3:40:ca:c9:73:6d:
1b:85:c1:3c:d2:2e:02:8a:d6:d6:df:a9:f0:32:0a:39:99:ad:
64:43:a0:e7:a9:d3:a2:2c:0e:ff:ee:52:11:d0:2b:20:68:d6:
9e:4d:86:f3:a0:d1:32:2e:8a:2b:4f:26:4f:44:9b:54:94:c3:
1c:57:fc:ec:aa:3b:dc:4f:c0:97:5e:39:68:7a:28:bc:48:a2:
b0:d5:33:44:0e:09:fd:35:ff:f8:90:e7:68:01:fd:00:69:a6:
2c:67:8e:ec:ce:6e:92:ab:6a:55:87:53:1a:dd:c0:ff:d7:c7:
88:9b:05:69:6c:74:95:f2:8d:d1:11:d9:89:fe:68:04:ae:67:
3a:c8:17:3a:54:70:72:d8:3c:1b:5d:7d:2b:f8:e5:dc:45:07:
15:94:59:c3:a5:16:b6:2d:fb:42:a8:d3:dd:81:3e:ee:2f:f7:
86:f1:8d:b6:36:33:f4:47:68:ff:e8:18:40:97:3d:54:02:54:
dd:79:95:bc:cc:2d:51:a3:7a:26:49:0a:e5:0a:5e:f6:81:7b:
de:b6:c8:6c:47:6a:66:b1:6a:4f:07:e8:96:72:a9:f8:d1:c8:
49:69:f9:9b:30:70:57:79:9f:f3:06:b6:ff:65:56:03:e6:1c:
a1:a7:68:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:59:01 2025 by rpki-client