
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
File: w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft (raw, json)
Hash identifier: 17xjGTdtL58KPbyoQ2pH1vz5p43hT+lk7rdklEv+w0M=
Subject key identifier: 6E:59:89:02:8A:55:74:69:07:72:C8:6F:7C:2E:07:98:F4:FD:B8:EB
Authority key identifier: C3:5F:03:94:9E:66:1E:24:BE:0F:1E:08:C6:4D:AD:05:E3:1C:4E:AF
Certificate issuer: /CN=c35f03949e661e24be0f1e08c64dad05e31c4eaf
Certificate serial: 019747E78E062981B5FE5BB96B7651B181F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
Manifest number: 1586
Signing time: Sat 07 Jun 2025 01:00:46 +0000
Manifest this update: Sat 07 Jun 2025 01:00:46 +0000
Manifest next update: Sun 08 Jun 2025 01:00:46 +0000
Files and hashes: 1: Gp59J-5Sjta1tmO1BUNSwj87vUI.roa (hash: OgOIKzaveJZdrN8U7gkn47rkfBwhkft0gqHgmzmYmdc=)
2: oX3nNgieJ2JInSOqTkqnW4BSKKU.roa (hash: E/puRqDQplddqvaDsExSE6S/JUmdbOP6wn7iah2FAFE=)
3: w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl (hash: kq9eo0UJNnQwBUHtDme2PnHQ3wIYPyuf+azaljjqg8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:8e:06:29:81:b5:fe:5b:b9:6b:76:51:b1:81:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35f03949e661e24be0f1e08c64dad05e31c4eaf
Validity
Not Before: Jun 7 01:00:46 2025 GMT
Not After : Jun 8 01:00:46 2025 GMT
Subject: CN=6e5989028a5574690772c86f7c2e0798f4fdb8eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c8:31:75:e9:4d:d1:a4:71:db:5c:d1:88:08:
f3:83:c1:7f:1a:94:03:a5:3d:90:a8:31:3f:16:60:
f1:79:1b:c0:bb:5a:cb:ca:a3:48:15:14:80:01:1b:
04:ec:99:61:7f:34:93:92:d7:56:b4:5e:1e:cb:cd:
66:9f:6e:91:f4:18:c6:ff:f9:f8:41:22:fb:07:3a:
74:2a:57:0b:63:a9:5b:21:07:59:41:dd:72:14:9b:
76:b8:c7:ac:e8:ea:f1:1f:28:1a:4a:84:95:ae:77:
fe:32:30:af:d4:bd:01:c6:0e:8e:12:36:fa:67:1e:
07:7c:b7:5b:8e:29:d4:30:21:75:38:f6:38:11:4b:
93:55:2a:75:61:66:a1:fd:bb:d6:36:fa:06:65:32:
11:a5:99:62:93:73:8f:1e:73:30:e4:25:a3:71:b4:
85:49:b2:42:b4:67:e0:a5:5b:29:da:3f:fd:8c:0f:
bc:76:72:cf:03:62:21:68:5a:e3:14:69:9b:3b:a5:
af:3a:c8:f4:55:15:e8:09:80:4f:aa:25:2c:9c:35:
7b:38:1d:7f:c1:34:ef:aa:5a:43:ed:8a:a7:14:0e:
fe:16:9d:8e:27:37:27:c6:9e:ef:4b:b6:bf:91:40:
63:0e:6b:d6:af:3a:7c:6d:e1:a1:5b:95:e5:a7:63:
04:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:59:89:02:8A:55:74:69:07:72:C8:6F:7C:2E:07:98:F4:FD:B8:EB
X509v3 Authority Key Identifier:
keyid:C3:5F:03:94:9E:66:1E:24:BE:0F:1E:08:C6:4D:AD:05:E3:1C:4E:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:b3:4e:0a:b4:8a:87:09:8a:93:9e:24:b0:16:fb:eb:6e:7a:
65:ae:c5:7f:3a:e4:67:81:f6:7f:31:f2:12:95:f7:c5:7d:a3:
83:65:ad:71:49:4f:77:b6:bb:9f:38:a5:7a:15:b3:8a:78:48:
7e:bd:b4:f4:17:fc:7e:aa:0b:dd:9a:f0:46:ec:74:a3:d7:6f:
23:6f:85:d0:f3:ff:22:d7:12:ab:e3:cb:34:4e:62:6c:3c:4f:
10:8b:e6:e2:40:aa:19:36:b2:9d:b6:6e:27:3d:68:7e:8c:50:
1c:bd:e3:a3:ce:c8:75:b2:11:dd:af:7b:59:3e:11:ad:b7:2f:
2a:66:69:74:5b:70:66:e5:35:17:dc:bf:b7:01:d3:bf:be:a8:
ed:2b:78:e2:04:0d:9f:14:81:fe:0d:d3:b6:1f:7d:d9:99:07:
99:9c:cb:db:67:43:88:d3:8e:8b:f6:17:f7:48:94:f1:1e:1c:
09:a1:83:c6:3d:c0:04:1b:6d:df:f8:0f:b7:ba:41:64:b4:af:
87:9f:21:5f:fa:f9:fc:b3:cb:cf:fd:b1:2b:4d:0d:9a:f0:b2:
e1:5f:fc:bb:4c:74:39:7a:cf:7d:94:a7:4a:d8:50:e7:ae:83:
f3:74:b5:24:da:28:90:be:a6:99:31:15:c1:c8:d9:1e:5f:1f:
ab:82:7a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:52:41 2025 by rpki-client