Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2645a7-532c-4fa1-bcdd-ea5dad8b4765/1/w7OWKu5OiuTGzNiXnlOYAuoOTOc.mft
File: w7OWKu5OiuTGzNiXnlOYAuoOTOc.mft (raw, json)
Hash identifier: TDvhyCd8wgwkYYjKS7JzzqS5Ka6hNHrAlt0uo3uvVOM=
Subject key identifier: 2C:EC:15:04:17:01:8D:A2:D2:17:AF:EA:EA:F0:8A:AE:80:63:6B:AD
Authority key identifier: C3:B3:96:2A:EE:4E:8A:E4:C6:CC:D8:97:9E:53:98:02:EA:0E:4C:E7
Certificate issuer: /CN=c3b3962aee4e8ae4c6ccd8979e539802ea0e4ce7
Certificate serial: 01974B1F9FECF898769948B8AC572F61302C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w7OWKu5OiuTGzNiXnlOYAuoOTOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2645a7-532c-4fa1-bcdd-ea5dad8b4765/1/w7OWKu5OiuTGzNiXnlOYAuoOTOc.mft
Manifest number: 0B5A
Signing time: Sat 07 Jun 2025 16:00:52 +0000
Manifest this update: Sat 07 Jun 2025 16:00:52 +0000
Manifest next update: Sun 08 Jun 2025 16:00:52 +0000
Files and hashes: 1: fZsTaHsMiRTOQx_qTx-PLjSdXVE.roa (hash: 7tvMPnX4kI566+vmNqApn9A48bhDZNJ8LvI46Pf6Yd0=)
2: w7OWKu5OiuTGzNiXnlOYAuoOTOc.crl (hash: ZKQg6lp5jNqJxukw3SGoJ/6p563NZQGQXp6JQFDUzhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/2645a7-532c-4fa1-bcdd-ea5dad8b4765/1/w7OWKu5OiuTGzNiXnlOYAuoOTOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/2645a7-532c-4fa1-bcdd-ea5dad8b4765/1/w7OWKu5OiuTGzNiXnlOYAuoOTOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/w7OWKu5OiuTGzNiXnlOYAuoOTOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:9f:ec:f8:98:76:99:48:b8:ac:57:2f:61:30:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3b3962aee4e8ae4c6ccd8979e539802ea0e4ce7
Validity
Not Before: Jun 7 16:00:52 2025 GMT
Not After : Jun 8 16:00:52 2025 GMT
Subject: CN=2cec150417018da2d217afeaeaf08aae80636bad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:7d:3f:bf:d1:3e:d7:80:f0:93:c0:93:3e:f3:
b3:57:4f:42:3c:e4:db:e9:de:44:d0:c7:42:18:89:
bf:ee:45:01:3d:e5:f3:19:9a:e3:d1:4f:21:b9:c1:
61:4f:49:81:17:74:85:aa:b3:e9:94:ad:65:e3:6d:
cf:96:7b:79:22:f3:03:56:a7:e4:54:07:27:53:aa:
0d:7b:6c:a0:ae:48:34:39:cf:db:22:1d:9f:ed:d8:
23:9e:b8:4d:12:47:d4:fe:87:14:89:5f:d7:e4:c5:
eb:59:7e:55:76:f2:90:5f:3c:b5:b4:f8:cd:56:df:
6c:0e:77:69:c3:23:a5:40:3e:af:f0:e0:69:45:78:
fa:7c:0a:0f:6b:b6:ba:e2:3f:86:5d:39:31:85:af:
85:93:67:96:c2:9c:fe:35:82:01:93:ec:0d:90:47:
df:74:c8:f1:7b:6f:15:cc:70:30:af:ac:24:2d:9c:
36:0d:d2:21:86:31:ea:4d:fe:65:5d:0e:ef:42:28:
a6:93:ad:e6:3e:14:0f:7e:ac:ab:18:c6:b6:49:fb:
46:3b:2d:5e:b4:0f:1d:7d:7b:0e:61:9a:3f:b3:ab:
8b:1b:0c:2e:0e:ac:3b:43:ca:32:ad:e5:c5:81:84:
23:d3:ae:7f:03:da:d9:e5:13:08:b1:08:18:94:60:
80:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:EC:15:04:17:01:8D:A2:D2:17:AF:EA:EA:F0:8A:AE:80:63:6B:AD
X509v3 Authority Key Identifier:
keyid:C3:B3:96:2A:EE:4E:8A:E4:C6:CC:D8:97:9E:53:98:02:EA:0E:4C:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7OWKu5OiuTGzNiXnlOYAuoOTOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2645a7-532c-4fa1-bcdd-ea5dad8b4765/1/w7OWKu5OiuTGzNiXnlOYAuoOTOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2645a7-532c-4fa1-bcdd-ea5dad8b4765/1/w7OWKu5OiuTGzNiXnlOYAuoOTOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:12:f7:24:a0:2d:3e:35:8d:47:8c:6b:90:91:0e:0f:d2:74:
13:0d:63:93:20:47:69:29:56:4b:22:ec:73:6b:83:5c:14:22:
fa:3b:2b:a5:46:02:57:35:a7:3a:ad:f9:1f:7f:08:b0:f5:e9:
16:b8:5a:4d:82:fc:ca:24:82:1c:6b:84:f8:7f:5b:61:f7:0c:
95:37:67:fc:da:96:17:40:0e:dd:c6:a8:47:69:d0:0d:3f:82:
f7:d6:ab:7c:2f:5b:34:3d:9d:61:50:ab:bd:aa:10:75:f9:82:
6a:f7:ed:e0:1e:2e:06:a3:12:d5:fd:2a:63:9c:23:4a:2a:e2:
24:da:3e:69:5a:c8:d1:02:a1:e4:17:11:05:14:40:c7:9e:c5:
92:a4:f0:30:40:4d:ab:cd:d6:99:d1:af:86:c1:08:9c:b3:16:
1c:5c:20:39:a7:61:58:59:fa:65:16:12:68:fd:14:79:94:74:
2f:bf:49:79:97:a5:df:c2:36:cc:11:da:fa:8a:58:6e:7c:7a:
51:91:02:56:61:e5:66:6b:57:47:ac:16:dc:0c:db:4e:b9:2e:
66:2d:73:54:70:9f:56:1a:52:35:66:fd:f6:f6:cf:32:b9:c6:
e3:35:52:d5:f5:ac:fd:2a:b9:4d:e3:7b:76:89:3c:05:85:c1:
dd:cd:5e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:09:14 2025 by rpki-client