Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft
File: cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft (raw, json)
Hash identifier: FkJu8lJsoeP/iJQzVsctdY0iyUQqIJRsk1Ri0qETh9I=
Subject key identifier: 3E:F4:61:87:C5:2D:56:B2:D6:66:39:F4:16:C6:98:73:33:6D:9E:89
Authority key identifier: 71:68:42:DC:43:98:36:63:5A:5C:9E:D6:C0:A4:95:B3:E6:34:4A:03
Certificate issuer: /CN=716842dc439836635a5c9ed6c0a495b3e6344a03
Certificate serial: 01974DB25B95E8B778F7088B47C2AB1F5A4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft
Manifest number: 0563
Signing time: Sun 08 Jun 2025 04:00:23 +0000
Manifest this update: Sun 08 Jun 2025 04:00:23 +0000
Manifest next update: Mon 09 Jun 2025 04:00:23 +0000
Files and hashes: 1: 2eV3LLHue0F4_ix9uAQjG0RjeyM.roa (hash: voDescMFunJFQQ5TLKb+tVFSLAofvJuHvYtHn/Yjp+c=)
2: cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.crl (hash: q7RuFA8PxEjsyz9LsydUrQwi87u1nA81n5LM8i8JK3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:5b:95:e8:b7:78:f7:08:8b:47:c2:ab:1f:5a:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=716842dc439836635a5c9ed6c0a495b3e6344a03
Validity
Not Before: Jun 8 04:00:23 2025 GMT
Not After : Jun 9 04:00:23 2025 GMT
Subject: CN=3ef46187c52d56b2d66639f416c69873336d9e89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:97:fb:99:20:05:e8:ce:b7:ae:8f:e9:c2:bc:
62:a1:ca:b6:10:08:e5:3d:88:a4:37:28:5b:1f:10:
96:44:95:e4:c5:28:4f:48:af:92:f0:17:51:cd:85:
a6:94:a0:6c:fb:a7:35:c2:e7:83:a8:4c:74:91:1a:
52:95:c0:14:14:2f:a4:e7:7a:78:b2:f9:15:ed:8a:
dc:1a:f7:3d:90:e1:2e:a9:7b:e8:a2:15:1c:6f:93:
07:dc:c7:ac:49:18:79:2a:13:f6:b9:f6:4a:58:e9:
02:31:fd:45:ec:fd:3a:6a:66:9c:a0:e9:3f:93:cd:
35:b8:8c:cb:27:87:8d:63:11:96:60:db:87:26:2a:
ac:bb:5b:be:1e:f4:96:c6:31:cf:9d:5f:4c:95:3b:
1e:dd:4b:19:ed:ac:43:7e:84:b2:d5:a6:4f:2f:c6:
2a:53:dd:26:be:0d:71:67:89:9d:74:d2:eb:a0:32:
ef:03:aa:a9:e7:cb:cf:94:86:6b:fa:a0:aa:81:00:
d5:59:68:4d:58:82:af:63:f8:84:7c:e1:99:9c:43:
f9:5f:fb:8e:0a:66:d7:ca:4c:7d:1b:49:93:51:88:
39:64:9a:06:b2:b8:3f:dc:52:1d:05:47:6b:c0:57:
94:35:3d:aa:8d:b4:e1:19:25:f8:4a:a4:63:42:9f:
3b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F4:61:87:C5:2D:56:B2:D6:66:39:F4:16:C6:98:73:33:6D:9E:89
X509v3 Authority Key Identifier:
keyid:71:68:42:DC:43:98:36:63:5A:5C:9E:D6:C0:A4:95:B3:E6:34:4A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:8f:42:92:b7:e9:c9:d8:55:76:13:51:4e:5e:00:7d:e2:bf:
d1:27:43:8d:82:26:c8:1e:d7:69:41:8c:5f:5c:6f:b5:4f:ad:
10:b1:35:8e:b3:a5:aa:7a:80:f1:9c:5e:d5:8c:cc:3d:51:f5:
64:b7:f9:46:ab:8c:3e:de:c6:99:e3:e9:83:5a:08:5a:30:90:
09:4e:ba:8f:cb:66:41:cb:10:5e:0f:8d:61:59:25:a9:88:01:
0f:ff:c9:37:db:59:74:bd:14:37:a1:7b:c5:5b:8d:6a:03:e3:
70:62:b4:9c:2d:c8:41:57:06:8e:8f:11:28:ec:7d:00:e8:d7:
61:1c:76:96:d8:54:45:bf:c3:c8:73:4d:60:aa:70:bf:d7:43:
d8:28:72:cb:7a:f2:e6:36:5b:0b:cb:63:6a:b9:88:c1:35:aa:
73:5d:d5:2a:2e:12:80:50:6b:92:26:15:33:96:af:e4:cb:e2:
fd:5c:a1:3f:66:10:4b:71:f7:41:cd:8e:a7:13:e5:45:b2:02:
c0:06:b5:0c:b3:07:5a:43:7d:48:e4:2e:8f:29:8f:f1:43:5c:
07:9c:51:78:34:93:b3:c6:82:97:7b:b3:70:67:96:c6:10:31:
4c:9f:9f:4d:28:5d:05:8e:e8:49:0c:de:06:cf:02:fd:54:7d:
d0:c5:2e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:06:41 2025 by rpki-client