Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft
File: rwXUKRyugYXGw0LiXe6bfpIPdt0.mft (raw, json)
Hash identifier: Li7z5QkXCyaxblit4htkBv9sD2tOg1qU1QBw2iIX77c=
Subject key identifier: A8:C0:FF:5B:7D:A3:DA:68:AB:2F:01:70:5C:2A:C8:E7:D7:C9:14:77
Authority key identifier: AF:05:D4:29:1C:AE:81:85:C6:C3:42:E2:5D:EE:9B:7E:92:0F:76:DD
Certificate issuer: /CN=af05d4291cae8185c6c342e25dee9b7e920f76dd
Certificate serial: 0197488D4E0C74631594FA54DB36E0B3E2C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwXUKRyugYXGw0LiXe6bfpIPdt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft
Manifest number: 0444
Signing time: Sat 07 Jun 2025 04:01:49 +0000
Manifest this update: Sat 07 Jun 2025 04:01:49 +0000
Manifest next update: Sun 08 Jun 2025 04:01:49 +0000
Files and hashes: 1: 41rmP0fRaJ_Rp04VkDrnen4Ff9k.roa (hash: hIEQZsD1Luj1wzFwd6Ncf1xZemUGDUraVaNuYs6VnsA=)
2: rwXUKRyugYXGw0LiXe6bfpIPdt0.crl (hash: NXSRSOZ+HY8wkK95sgGRwJAGgtPm/EYeQS+eFkcXC9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwXUKRyugYXGw0LiXe6bfpIPdt0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8d:4e:0c:74:63:15:94:fa:54:db:36:e0:b3:e2:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af05d4291cae8185c6c342e25dee9b7e920f76dd
Validity
Not Before: Jun 7 04:01:49 2025 GMT
Not After : Jun 8 04:01:49 2025 GMT
Subject: CN=a8c0ff5b7da3da68ab2f01705c2ac8e7d7c91477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:38:32:94:47:dd:46:f5:d0:e0:90:12:f9:ed:
aa:ea:c9:bd:32:28:e3:69:fc:66:54:4c:f2:3a:92:
31:cc:d6:41:01:d3:2c:70:2a:8a:0c:c2:4d:a0:4b:
9a:75:0c:1f:81:c7:cc:f4:a6:85:c5:cd:35:8d:b1:
1a:d0:19:48:6b:bf:19:e6:4c:be:7b:ad:32:58:d8:
2c:92:09:55:ed:d9:02:1f:6b:e8:b9:e1:7d:a8:8e:
a6:f0:a3:c8:6b:a7:3c:09:c4:91:9f:e2:67:67:77:
f8:31:83:18:8e:d8:09:5f:cc:cb:b3:7d:b3:83:8d:
bd:41:81:3a:27:e8:ad:85:cb:5a:35:bf:ae:f8:62:
2f:4b:ee:51:99:de:a5:30:4c:20:a5:b2:a7:81:9c:
11:0a:07:e7:12:33:2a:d4:af:26:92:c1:ae:e3:f7:
d3:56:ce:c8:d9:e7:52:31:3a:38:36:74:d4:14:75:
0d:15:bc:1b:58:8b:16:66:85:15:aa:f0:a9:12:56:
d6:26:7c:fe:0b:ae:82:05:6d:69:68:09:eb:cd:2e:
20:cd:d7:dc:9b:c1:a2:c7:b9:6b:2c:a4:a9:31:e2:
d3:76:ef:46:1f:0c:89:6d:7d:e3:09:be:12:3e:f4:
00:73:32:28:5a:ef:48:ee:0e:2d:83:cd:04:c4:d2:
97:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:C0:FF:5B:7D:A3:DA:68:AB:2F:01:70:5C:2A:C8:E7:D7:C9:14:77
X509v3 Authority Key Identifier:
keyid:AF:05:D4:29:1C:AE:81:85:C6:C3:42:E2:5D:EE:9B:7E:92:0F:76:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwXUKRyugYXGw0LiXe6bfpIPdt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:6b:85:e4:65:82:03:e4:fe:f2:d6:70:82:d4:3f:ae:25:21:
e0:53:a7:ca:e4:ad:cf:04:52:cd:20:96:e9:28:70:9e:d0:54:
be:02:3c:90:5e:4d:59:ae:d4:2a:61:42:45:30:7d:03:ed:aa:
38:67:1d:af:0c:e8:26:4b:9a:89:45:14:eb:27:4e:9d:34:9c:
d3:8a:6d:4d:68:52:ae:f8:8b:6c:41:f9:50:62:64:96:27:d9:
5b:ae:a3:e7:04:2c:b2:fa:ce:21:d4:5e:3a:f7:44:05:f6:84:
67:fd:f7:25:5b:3d:c3:93:4f:d5:20:4b:17:6f:43:08:f3:c3:
88:44:77:24:57:9a:24:51:a1:7d:af:1a:55:5a:be:c9:b0:01:
14:89:65:d6:7e:22:9c:55:f0:3b:b8:d2:07:38:c0:20:e6:d4:
ab:e8:81:e1:bb:98:ad:70:e2:d5:3f:a0:15:71:09:e0:76:8f:
c7:b6:75:55:70:69:f0:14:aa:59:a6:84:23:3c:e1:29:e7:1e:
42:72:ea:18:35:ed:38:06:dd:79:25:35:05:ed:80:86:3d:d3:
e8:e3:eb:0b:e6:f0:06:61:42:9f:89:f1:7f:2c:68:f0:a1:27:
93:d3:fe:53:2d:70:dd:79:ed:50:22:94:13:91:c8:57:ad:3d:
4b:9c:35:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:22:01 2025 by rpki-client