Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
File: clwMcRHi9X_K-BE6QuVW6ILdXEs.mft (raw, json)
Hash identifier: zSbov7yx9mLBhb18OD9/UlwKvIRyuhmfc+3b63Mijac=
Subject key identifier: FD:2E:32:A2:16:0D:90:EC:C6:DC:49:DD:29:01:61:75:7E:2C:C8:4B
Authority key identifier: 72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B
Certificate issuer: /CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
Certificate serial: 01975CEEAD50896EABEB81C002DCC9180688
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
Manifest number: 158F
Signing time: Wed 11 Jun 2025 03:00:35 +0000
Manifest this update: Wed 11 Jun 2025 03:00:35 +0000
Manifest next update: Thu 12 Jun 2025 03:00:35 +0000
Files and hashes: 1: 1RGgWDKxb5y298L2tt-0tOvqbNw.roa (hash: 2bZZWO6omsg2Mwm30E/Z1rRX+nPqPKuGxYg/2ZzCe0k=)
2: 3sxlJEA8BaERqC36Ubw3FlVF9Ek.roa (hash: YdpNn1ufX9tbeWscBU0U/F4gP263cfdud5JqGKKNPWQ=)
3: 68QeHj6JI2_T8Kr8hKctEhMPtbw.roa (hash: XnmM0ObtZKLV7g04CkYP3n/e5tgHKBrd4Q5O9o5IvnE=)
4: KoGcuhEWGpdaiyvAQhahi6JGn3c.roa (hash: 1hE6GXWKyFKYOi6wNNjRCkxxkmT7Rr3/DXP+/VqRcqY=)
5: ZLxVHxzZvKjjn2s6lQPPZdNzPyw.roa (hash: 9UddYVQskYka8RNl5TAXIUT0fsGnIVLCOhL+P2BIpeA=)
6: cLFXpbvXQ7ewA43ckj0WniT4JUE.roa (hash: MA0V95ed/gECxNSaptpMKxS+abLgaLPgcexWWf8XVhY=)
7: clwMcRHi9X_K-BE6QuVW6ILdXEs.crl (hash: Onn/ArMolota/cGLkjoIbM3c+qIAmUGP6qdBD01imk4=)
8: ejg2o5Q2dvoWaESAzfB0HEPf7xI.roa (hash: s8Vh1yl+9P0cPDEhtTkn7ElHKgWmn1YwQsHChgTqjlY=)
9: fN3bfVZFsYAwSt6ljIKuFdIrYTw.roa (hash: 2nn1lj90yzh4RI2kdOg6btEhvs2/WJxkszduCB8J4u4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 03:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:ee:ad:50:89:6e:ab:eb:81:c0:02:dc:c9:18:06:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
Validity
Not Before: Jun 11 03:00:35 2025 GMT
Not After : Jun 12 03:00:35 2025 GMT
Subject: CN=fd2e32a2160d90ecc6dc49dd290161757e2cc84b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c9:f4:25:9e:8f:1e:11:ee:88:b2:80:98:ec:
a2:50:62:12:8e:d2:10:b7:3d:82:a3:ac:7c:49:c4:
54:33:56:d0:12:c0:ce:e7:e3:16:2c:5e:47:40:c0:
ac:29:51:b6:96:bf:48:bd:6c:fa:b1:4e:19:cb:77:
37:32:56:8e:ff:63:b4:bf:e2:0e:97:70:d8:6b:f5:
fd:2d:c7:49:ee:5c:e7:ec:92:e1:6d:42:79:76:df:
07:64:99:c3:b7:b8:d7:cd:c7:41:4b:9f:33:e3:be:
0f:44:53:99:92:62:ca:9b:2c:29:b8:e3:08:b4:09:
cb:a6:08:97:57:fa:0a:7d:4d:85:09:45:95:70:ca:
5e:f9:87:86:f6:30:7b:89:e9:85:df:25:9a:72:37:
bf:df:5d:9b:42:3a:e8:39:c2:80:62:50:a1:8d:17:
a1:cb:09:5c:53:80:bb:89:b2:ec:3d:17:c4:45:07:
5e:76:66:40:51:e0:1f:73:87:76:36:99:bd:5c:69:
b7:9f:f4:4f:ed:8d:d5:37:59:2d:5a:c1:13:d6:fe:
86:f5:d4:a9:ef:4b:85:cd:f1:6d:31:1c:32:32:22:
0a:d9:e1:c8:5e:4f:d3:47:4e:91:3a:6a:c9:e0:44:
b7:06:d0:af:66:d7:1c:2a:6b:4c:e5:cd:ee:68:c5:
34:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:2E:32:A2:16:0D:90:EC:C6:DC:49:DD:29:01:61:75:7E:2C:C8:4B
X509v3 Authority Key Identifier:
keyid:72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:51:59:1f:dc:2f:db:68:c2:16:46:7c:30:47:77:65:fc:5c:
03:42:c8:3d:0a:ca:f0:92:19:13:45:73:7d:59:7f:f5:65:4c:
84:2f:af:db:b1:62:77:1e:44:93:e7:7d:bf:ca:58:23:f3:5e:
1e:fa:79:06:05:67:13:88:04:d6:ad:d6:b9:44:9f:3b:5b:42:
15:4a:fd:9f:55:04:26:69:9d:38:78:c4:c1:a5:34:6d:86:c5:
2b:0a:af:39:53:bf:d8:7c:eb:35:9d:b1:ea:46:f2:b1:cd:67:
c9:53:d2:04:ce:4d:db:d6:4f:8c:77:12:3a:8c:12:c6:0e:2c:
26:af:d1:fb:48:cd:b3:8a:b1:ed:43:4b:e5:ac:8a:46:1b:51:
fb:f7:2a:39:f2:fa:54:f7:69:71:a0:c5:97:25:75:b7:37:ff:
98:e5:5b:ea:38:7b:76:16:9f:06:ef:d7:c2:27:f9:b8:90:21:
52:53:4e:ae:70:25:2a:95:82:62:d1:c6:bb:fb:5c:89:dc:f3:
48:98:b4:d1:39:cd:98:16:46:0e:4f:3d:5c:f4:d5:6c:ca:aa:
74:03:36:8b:aa:58:ba:61:fc:5a:2d:d4:07:64:a9:40:39:27:
69:79:56:e8:9b:ad:07:03:f0:9a:dc:bd:89:a9:bc:21:22:af:
21:cc:2d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:09:20 2025 by rpki-client