Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
File: waTRQtQQqrCQURLErleQdsDm3IE.mft (raw, json)
Hash identifier: +N/GWysT7dT2EgC7ROGXzkfVE/Q0NjQc3TZZ8d5UPkU=
Subject key identifier: 86:64:23:7C:7B:CB:A5:B9:41:7D:47:41:96:7F:76:D5:67:03:11:9D
Authority key identifier: C1:A4:D1:42:D4:10:AA:B0:90:51:12:C4:AE:57:90:76:C0:E6:DC:81
Certificate issuer: /CN=c1a4d142d410aab0905112c4ae579076c0e6dc81
Certificate serial: 019749D595BB7356BADDC3148A2FE14FC658
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
Manifest number: 7F
Signing time: Sat 07 Jun 2025 10:00:23 +0000
Manifest this update: Sat 07 Jun 2025 10:00:23 +0000
Manifest next update: Sun 08 Jun 2025 10:00:23 +0000
Files and hashes: 1: 1Fb4jd1urOHJo5_owKu58GeUbfQ.roa (hash: HWTH5r2vvToQGYptxfGymBxA0UDvVBAeiYA9Tehs7MM=)
2: bkgPAomj5Hty0jREj4Wi4CYSl34.roa (hash: xTOY7fOryKrBCrnTTY9ZhQG8l94maF649pWjsuI216E=)
3: waTRQtQQqrCQURLErleQdsDm3IE.crl (hash: lVIlfbFI7fZKR5bzD1oZMXUbY6c+N2rgEkuej+wm1lA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:95:bb:73:56:ba:dd:c3:14:8a:2f:e1:4f:c6:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1a4d142d410aab0905112c4ae579076c0e6dc81
Validity
Not Before: Jun 7 10:00:23 2025 GMT
Not After : Jun 8 10:00:23 2025 GMT
Subject: CN=8664237c7bcba5b9417d4741967f76d56703119d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:71:fb:bf:5b:29:90:f2:72:ee:22:a2:9c:39:
ca:bb:cf:0c:6d:78:2b:fd:8a:33:d0:fc:d1:d9:79:
47:34:b9:0b:f1:39:6c:e7:ce:52:bc:a2:12:8f:d5:
af:70:e0:a4:5a:aa:b3:9c:ab:4a:03:33:70:55:af:
85:80:de:9a:22:dd:2b:76:b3:55:b3:73:91:fd:bd:
1b:d3:d4:44:37:01:b0:6c:db:e0:98:a7:4e:cf:a3:
84:63:a1:43:4a:78:14:31:b2:3f:90:1f:83:18:cf:
db:38:59:a6:71:41:8c:fe:40:95:78:fe:e2:a8:ed:
7b:2c:42:37:bf:b4:71:52:04:40:9f:6b:1f:e2:f3:
74:64:db:26:05:5a:f0:92:66:d8:a2:47:9e:eb:dc:
97:28:ee:3b:5f:c3:d3:ce:6f:09:34:9e:a6:04:19:
b0:12:d2:3a:bd:2a:6f:22:c7:e4:8f:53:df:cc:b6:
ba:e1:a4:c6:c6:db:44:0f:33:d2:86:62:61:3c:cb:
1c:4b:c0:27:a0:f0:1a:f1:15:c3:e1:57:61:b6:ec:
6f:55:6e:85:19:36:f7:ee:04:d0:9c:22:93:c3:31:
21:f3:48:22:0f:0c:55:fc:69:31:79:fd:7b:67:d3:
86:8d:a0:95:af:66:85:2c:56:77:62:a4:ee:c8:ca:
2e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:64:23:7C:7B:CB:A5:B9:41:7D:47:41:96:7F:76:D5:67:03:11:9D
X509v3 Authority Key Identifier:
keyid:C1:A4:D1:42:D4:10:AA:B0:90:51:12:C4:AE:57:90:76:C0:E6:DC:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:9b:db:ea:52:10:b5:b5:54:aa:1d:de:b9:57:e4:97:d9:8d:
22:6c:59:9a:75:f0:e3:30:b1:02:fe:6f:9c:49:e4:d2:b8:2c:
eb:9d:f8:8b:9f:c2:bd:dd:35:8c:99:de:22:43:27:10:48:f2:
6d:1a:41:94:41:87:c3:5e:07:cd:84:dd:c3:56:f4:ea:74:7f:
68:51:97:0f:2b:b1:c6:7e:f1:67:3f:e0:1d:8b:be:2c:df:bf:
62:b5:ac:c5:3f:97:a4:c9:d6:ff:92:15:4a:95:e6:8e:ac:ca:
7f:d0:ed:d8:37:4f:04:32:aa:d1:71:d0:2c:91:56:92:74:d1:
a6:52:bc:fd:8e:49:9c:a4:bc:70:b4:a6:f0:37:5b:d5:31:dc:
cf:77:cc:01:cb:83:39:50:dc:4e:15:bf:c0:b9:a7:09:01:80:
57:a4:07:17:1d:c8:9c:b5:17:ed:2c:fd:cf:9d:3e:b8:32:08:
7c:79:32:26:36:23:f2:ac:57:27:02:6a:98:7b:c6:31:29:c3:
3a:d9:71:1f:58:41:d1:02:cc:35:b3:2e:d0:18:36:bc:b0:67:
4d:7e:f6:f4:8e:37:c7:5d:83:28:1f:51:60:be:1a:2c:87:b1:
71:de:bf:52:19:ca:d3:99:b9:df:11:49:38:13:76:4b:a2:0b:
2b:74:67:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:51:42 2025 by rpki-client