Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/w4Me3AugfH40q6cBw1c9jnKvGP4.mft
File: w4Me3AugfH40q6cBw1c9jnKvGP4.mft (raw, json)
Hash identifier: QYuh4WwfzvWF/shH1r5RWnNBslQPEYRf6tvOKHAE5NU=
Subject key identifier: 85:50:0C:7B:04:1E:1E:4A:0D:05:B6:A5:59:B1:47:36:D5:56:91:78
Authority key identifier: C3:83:1E:DC:0B:A0:7C:7E:34:AB:A7:01:C3:57:3D:8E:72:AF:18:FE
Certificate issuer: /CN=c3831edc0ba07c7e34aba701c3573d8e72af18fe
Certificate serial: 019748C2F77ED17E6AEB798AA64EB905FCED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4Me3AugfH40q6cBw1c9jnKvGP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/w4Me3AugfH40q6cBw1c9jnKvGP4.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 05:00:26 +0000
Manifest this update: Sat 07 Jun 2025 05:00:26 +0000
Manifest next update: Sun 08 Jun 2025 05:00:26 +0000
Files and hashes: 1: UkowmR7j8dX0saZm2LcqRKWc1As.roa (hash: GBF5K+d4pg2yE1Y/OoUy9KgNyBcuaLjAQkgdpqJHVgo=)
2: w4Me3AugfH40q6cBw1c9jnKvGP4.crl (hash: pwKa2WfXe5HqzUw4EyVyVe0Xv1TRmF1+e97ub0dphyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/w4Me3AugfH40q6cBw1c9jnKvGP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/w4Me3AugfH40q6cBw1c9jnKvGP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/w4Me3AugfH40q6cBw1c9jnKvGP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c2:f7:7e:d1:7e:6a:eb:79:8a:a6:4e:b9:05:fc:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3831edc0ba07c7e34aba701c3573d8e72af18fe
Validity
Not Before: Jun 7 05:00:26 2025 GMT
Not After : Jun 8 05:00:26 2025 GMT
Subject: CN=85500c7b041e1e4a0d05b6a559b14736d5569178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c9:29:df:58:02:6b:8b:4e:71:61:7f:a5:c9:
e5:32:51:67:0d:e4:69:b2:91:6e:9d:73:75:0f:c1:
f3:4b:aa:09:bf:ba:66:a5:2f:4e:23:4a:b2:01:f9:
d6:0a:53:dc:ab:ae:39:27:fb:ad:bc:d1:43:bc:5c:
26:30:34:0e:77:d7:11:af:88:ae:34:88:02:2a:49:
2b:91:70:21:66:71:d6:8c:cd:f7:5f:75:77:25:2e:
d6:2c:ad:b4:aa:b4:88:02:7a:9f:4c:10:d5:ce:9e:
53:71:27:ba:14:a2:a4:ca:78:71:b1:9b:2f:01:e1:
d4:87:68:12:e2:1e:f6:c4:7f:de:ad:eb:56:ce:f7:
14:8a:57:44:01:e0:66:50:56:0d:13:8d:70:3c:16:
34:50:07:59:6b:62:30:f9:c1:56:6a:99:32:c3:54:
f0:ba:5e:dc:32:47:2c:8b:0e:fc:86:a1:37:c1:e9:
b9:80:b9:b2:42:e4:6c:f0:65:78:c1:f4:b4:ae:bb:
3b:ed:c3:b6:96:76:63:95:b2:0e:6e:c9:6d:4c:c1:
66:15:a8:46:90:81:37:d4:8e:94:86:bb:c8:22:45:
0d:be:0f:55:5c:b5:63:88:c0:05:0a:f0:49:03:17:
48:56:5a:32:bb:e7:e3:ac:3d:1e:f5:b4:50:e6:19:
01:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:50:0C:7B:04:1E:1E:4A:0D:05:B6:A5:59:B1:47:36:D5:56:91:78
X509v3 Authority Key Identifier:
keyid:C3:83:1E:DC:0B:A0:7C:7E:34:AB:A7:01:C3:57:3D:8E:72:AF:18:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4Me3AugfH40q6cBw1c9jnKvGP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/w4Me3AugfH40q6cBw1c9jnKvGP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/w4Me3AugfH40q6cBw1c9jnKvGP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:c0:72:d8:9f:79:5b:8c:55:1e:01:7a:e9:83:12:d1:7a:5d:
5f:21:99:1f:2b:eb:13:a3:99:3a:59:6b:5b:38:f5:c7:ee:85:
ff:b0:43:42:a8:a8:04:e6:5d:c0:d3:07:a2:11:2b:0c:c6:15:
16:a1:42:94:7a:df:e3:b0:1a:81:8f:3c:58:0c:7b:e2:f7:46:
e6:8d:cf:4e:aa:09:e2:80:1f:39:9a:8d:1d:36:40:29:4b:93:
f7:f7:04:b0:54:58:1b:16:be:e5:ff:e4:b6:55:ba:47:72:15:
fa:8a:a0:bc:67:0c:f0:98:0d:52:01:b7:9c:eb:be:0e:5e:3e:
df:6d:76:2a:01:2b:03:a1:c0:41:e8:99:8d:87:a6:73:fe:07:
b0:f2:1a:b4:9c:12:d4:e9:8c:3e:70:2b:1c:29:36:a2:20:47:
29:09:68:0d:35:12:60:a1:41:b7:e6:80:a0:03:4c:df:4a:0d:
c5:cd:25:b2:05:13:4a:3f:13:a9:84:ad:22:9e:0e:57:df:3c:
da:4d:13:f9:00:e6:9f:a5:60:cd:10:8c:be:d8:99:f7:5b:da:
51:e8:15:fe:7c:9e:6d:93:6c:5e:fa:04:ab:c9:c8:3d:71:43:
cc:96:f5:05:c3:07:07:e9:95:ea:9a:82:21:a4:db:10:05:d8:
f6:cc:e8:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:50:10 2025 by rpki-client