Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft
File: 1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft (raw, json)
Hash identifier: BhYKyIhkL6KK3CNHkfxCWq7PSftX4+AwK2NT16lCa74=
Subject key identifier: FA:37:15:BA:09:30:E8:45:33:E5:10:BE:16:35:23:F3:C6:5C:85:82
Authority key identifier: D5:62:0C:EC:70:97:4D:03:7D:77:69:75:8C:74:66:83:05:B3:2C:F2
Certificate issuer: /CN=d5620cec70974d037d7769758c74668305b32cf2
Certificate serial: 019747B109274AADF13B31BD9D0BCC9F9EE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft
Manifest number: 0CDF
Signing time: Sat 07 Jun 2025 00:01:13 +0000
Manifest this update: Sat 07 Jun 2025 00:01:13 +0000
Manifest next update: Sun 08 Jun 2025 00:01:13 +0000
Files and hashes: 1: 1WIM7HCXTQN9d2l1jHRmgwWzLPI.crl (hash: PIYEnQxPVOSNeTgMfx3KkZYIdvaPqinKomWqH7DB5wY=)
2: QCTiWGHEKmUOdJTM7oPATib-rWI.roa (hash: k26mJ2kyD6PN3QHWZlo9Dbc0a0mryGGisjgGFZ6rWDs=)
3: hrRzVBROURephwaz7IZClsaHDKQ.roa (hash: Fof+bR6X5zJSmDYDTc8T97sYO9am/Pj5PX1jkaREIks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:b1:09:27:4a:ad:f1:3b:31:bd:9d:0b:cc:9f:9e:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5620cec70974d037d7769758c74668305b32cf2
Validity
Not Before: Jun 7 00:01:13 2025 GMT
Not After : Jun 8 00:01:13 2025 GMT
Subject: CN=fa3715ba0930e84533e510be163523f3c65c8582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:43:63:1a:08:fe:c3:60:a6:fd:ff:02:62:7d:
b8:c4:ac:a1:2b:ff:24:39:ea:24:70:fa:27:c8:78:
4d:a4:ae:24:71:10:8d:1d:51:84:81:15:04:78:58:
f5:c3:38:88:8a:01:ae:e0:e2:3a:04:70:bd:ef:a0:
6b:bf:59:80:15:3e:bf:cc:de:7a:58:dc:17:94:03:
15:b2:93:da:17:58:6a:f1:ba:ac:07:b0:1b:c4:38:
61:44:7c:0b:05:f1:9a:91:15:b6:6d:0a:f7:29:a6:
6d:d7:eb:ee:9c:0c:8e:6a:ef:a9:a9:cf:00:1f:d7:
22:10:57:92:49:af:f3:ca:8c:3c:2e:a5:76:51:6f:
fe:1b:70:2a:9b:1b:a5:8e:9a:72:e4:10:1a:ca:08:
7e:ad:ca:50:39:c1:4a:fd:18:4e:52:45:a0:9e:ce:
97:c1:a1:65:66:10:e6:ba:f0:d2:ba:e7:97:89:e4:
4a:fe:7d:3f:08:ad:53:a1:6a:ba:0d:6b:d5:4c:1c:
a3:9b:ed:7e:58:02:d3:6f:7a:4d:17:fe:c5:a4:c4:
44:2c:60:b1:58:c2:dd:64:dc:df:f5:96:ef:90:06:
dd:d8:9a:6d:0a:6b:32:c8:a4:ea:6b:30:c5:6a:71:
44:d9:9a:e9:a1:75:9e:2b:9d:be:a7:fb:ab:c4:47:
99:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:37:15:BA:09:30:E8:45:33:E5:10:BE:16:35:23:F3:C6:5C:85:82
X509v3 Authority Key Identifier:
keyid:D5:62:0C:EC:70:97:4D:03:7D:77:69:75:8C:74:66:83:05:B3:2C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:f3:53:e3:84:fe:9f:30:69:87:0b:2c:b1:cb:f4:8a:ec:26:
41:06:2d:b9:22:58:fa:d1:49:bd:9b:09:9b:5e:d8:0e:0e:8f:
8f:d1:15:cc:c5:85:5e:10:b2:e3:49:e3:1a:da:ea:10:8e:6c:
5d:53:89:9b:05:0e:7c:4c:60:41:ce:b6:de:e0:f9:63:c0:b0:
87:58:47:9c:0c:eb:0b:05:08:fc:8e:4c:76:91:c6:1a:c9:f2:
6e:a3:2c:34:15:6f:c4:83:ef:c8:52:60:d2:b9:d7:d3:33:43:
16:61:21:ff:fd:a0:be:35:cb:7b:a6:37:da:e5:c0:e3:33:00:
81:e8:36:94:ac:ae:cd:12:c5:e3:91:12:2a:9c:c8:10:3b:4c:
39:80:1f:4f:94:aa:d7:9a:9c:f1:52:77:3b:f2:26:ea:cf:42:
af:2a:39:94:41:48:33:6f:48:b0:64:28:f9:e3:48:ae:52:fa:
33:a4:91:b4:fb:de:dd:a2:80:d9:09:f3:df:a4:65:11:bd:f6:
b9:c3:fd:a8:b1:38:68:15:3f:0a:cc:3a:ab:6e:fd:cf:76:b6:
aa:39:0f:36:05:57:f0:2a:b5:36:7e:64:52:8d:c7:67:0b:db:
5a:77:e0:9f:5c:5e:58:10:64:28:f8:dd:e9:40:06:d6:cd:51:
e9:14:f0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:11:19 2025 by rpki-client