Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft
File: w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft (raw, json)
Hash identifier: 81jwTlBYYOnzPmujadkwA25ii76yIQoMh3v+NYNH0O4=
Subject key identifier: 43:BF:56:1F:02:6C:1E:85:9B:6C:BE:3E:12:7E:8C:14:FE:28:D7:9F
Authority key identifier: C3:C0:59:1E:2E:B4:9D:05:59:E6:FC:E7:EE:2A:A8:1F:0F:59:BA:6F
Certificate issuer: /CN=c3c0591e2eb49d0559e6fce7ee2aa81f0f59ba6f
Certificate serial: 01976282FCCAB6ECA82423DD196FA0A85017
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft
Manifest number: 1595
Signing time: Thu 12 Jun 2025 05:00:40 +0000
Manifest this update: Thu 12 Jun 2025 05:00:40 +0000
Manifest next update: Fri 13 Jun 2025 05:00:40 +0000
Files and hashes: 1: 2BUGtHga-91WOayxMZ7EN3sAoUE.roa (hash: 40eNzoOdvf9iy0CU470Iq6VAmpCnU36Mg3hoCFP9r9Q=)
2: Ka5Exl1GeddcELNpCklBpS5TlPs.roa (hash: kRYcEd/x8/mlJ+CtYhq56IHy4jqYQVlovD2KG8xYqY4=)
3: w8BZHi60nQVZ5vzn7iqoHw9Zum8.crl (hash: PbQzSKRIVctJxJ6N277dCgm4YKKnmZCuqtbAWIS6hPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:62:82:fc:ca:b6:ec:a8:24:23:dd:19:6f:a0:a8:50:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c0591e2eb49d0559e6fce7ee2aa81f0f59ba6f
Validity
Not Before: Jun 12 05:00:40 2025 GMT
Not After : Jun 13 05:00:40 2025 GMT
Subject: CN=43bf561f026c1e859b6cbe3e127e8c14fe28d79f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e8:bb:57:b9:0a:dc:de:82:c8:7b:94:37:18:
82:4d:b7:cf:f8:7a:c7:6b:3b:db:b3:41:bf:42:49:
1a:46:ba:02:bb:d3:2e:35:f9:e8:e1:80:40:1c:15:
a9:0a:9e:fd:99:3d:ab:ad:d1:82:b9:5f:7b:9d:f8:
75:08:ec:7c:21:78:43:21:e7:c2:02:b8:b1:fb:66:
79:cf:ee:5b:96:78:a6:f9:f5:aa:96:6a:2b:26:e5:
f7:81:1a:66:5a:64:86:35:77:70:41:79:c3:01:10:
0d:fc:4b:c8:e7:13:28:82:48:9c:c6:1f:e6:78:fd:
fe:95:a8:bb:d1:db:30:c0:55:1d:6e:59:6d:25:98:
72:3e:b9:64:93:76:7c:0c:dd:14:eb:d0:e1:91:47:
fd:71:10:19:b6:c8:3c:da:9c:4d:62:80:b5:51:53:
b7:66:78:83:26:3d:d1:12:0f:57:7c:d7:fa:ae:c4:
59:ad:89:21:71:bb:47:e9:65:67:b1:27:de:4b:a9:
5d:a0:cd:15:ed:91:48:03:cb:07:af:e5:dc:ac:9c:
f2:63:cb:06:24:19:ed:89:1a:a2:58:75:f4:44:80:
52:9d:af:1e:e5:30:96:8b:f2:34:09:2c:21:8a:bc:
f5:6d:9c:3a:62:84:02:f4:ed:6c:0d:0e:61:59:47:
a4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:BF:56:1F:02:6C:1E:85:9B:6C:BE:3E:12:7E:8C:14:FE:28:D7:9F
X509v3 Authority Key Identifier:
keyid:C3:C0:59:1E:2E:B4:9D:05:59:E6:FC:E7:EE:2A:A8:1F:0F:59:BA:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:6f:ae:80:de:31:6b:6d:6b:93:d6:5c:73:94:19:36:4f:e5:
59:c9:78:5b:c8:3d:0a:73:a5:9b:2d:82:bf:e7:2b:c7:7f:7a:
23:e0:02:7c:b2:e8:61:62:df:01:51:05:e8:15:6c:7c:9f:a4:
b7:9c:37:18:e3:ba:bb:9d:dd:2e:40:b5:34:09:3d:79:00:ea:
70:27:74:12:09:14:16:a7:89:1e:fe:80:57:d8:6d:1c:76:35:
a5:16:aa:14:22:59:47:2c:f4:e0:95:1f:34:c6:89:5a:bb:30:
cd:75:6a:14:ca:72:66:91:fe:24:03:65:1c:99:30:14:29:fd:
66:ba:5b:58:74:7b:83:1d:35:61:b4:22:55:b3:b3:40:ea:ce:
ec:97:cc:7d:ce:31:9d:57:43:9f:f2:6d:73:02:d2:8a:f6:08:
fa:8b:5d:31:34:6b:8d:bf:c3:5f:d5:ea:d6:61:7d:3f:fc:b2:
42:18:51:be:89:d9:90:08:15:33:34:9b:24:dc:d2:7a:e2:58:
c7:b7:78:57:3c:71:55:73:41:9e:a5:39:42:b4:a1:c2:27:77:
25:34:ea:89:8d:7b:df:18:20:fd:7b:a0:16:3f:65:04:5c:06:
7e:60:fa:75:a3:13:eb:8a:d0:26:4d:a6:ea:1b:80:d4:38:29:
45:aa:fe:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 09:02:14 2025 by rpki-client