Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft
File: v-NULdY_7SUN5ctl9uykh-f0eEc.mft (raw, json)
Hash identifier: qDUDKEGCcfcAYoYDglElYNk0hX80lLtBhhmgWeP1vQk=
Subject key identifier: B2:2A:1B:BC:B8:0E:D9:EA:77:BF:DE:F2:9C:C8:BF:86:81:A3:0A:CB
Authority key identifier: BF:E3:54:2D:D6:3F:ED:25:0D:E5:CB:65:F6:EC:A4:87:E7:F4:78:47
Certificate issuer: /CN=bfe3542dd63fed250de5cb65f6eca487e7f47847
Certificate serial: 019773ADECEAAC96567A36E42DC28515C2B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-NULdY_7SUN5ctl9uykh-f0eEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft
Manifest number: 1592
Signing time: Sun 15 Jun 2025 13:01:07 +0000
Manifest this update: Sun 15 Jun 2025 13:01:07 +0000
Manifest next update: Mon 16 Jun 2025 13:01:07 +0000
Files and hashes: 1: 7_ycmg0-2tzp7CIdo8gplL9a278.roa (hash: XEoDI5Kr97fRLNGyRswSpfdzIPuYNKJgNWwTLw/sOpg=)
2: u42E-rWAmQgBLYpngQke_W6nUiE.roa (hash: skcKb420yoQzvUX8+CNyJl60MwIyb91kXhUGkdXKV9A=)
3: v-NULdY_7SUN5ctl9uykh-f0eEc.crl (hash: c0tym+YeiqP6QWTUP1amqmoLUtG76QahREaRZZlBMg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/v-NULdY_7SUN5ctl9uykh-f0eEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:ad:ec:ea:ac:96:56:7a:36:e4:2d:c2:85:15:c2:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfe3542dd63fed250de5cb65f6eca487e7f47847
Validity
Not Before: Jun 15 13:01:07 2025 GMT
Not After : Jun 16 13:01:07 2025 GMT
Subject: CN=b22a1bbcb80ed9ea77bfdef29cc8bf8681a30acb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b2:cf:51:14:40:5a:14:76:1b:53:a8:85:22:
77:5a:7c:3d:b5:e9:9c:48:ec:cc:14:39:5e:a6:55:
20:fb:dd:9c:07:12:57:ec:8c:d7:e5:6e:0b:f3:18:
00:38:f7:e4:b9:0e:de:fd:72:56:3c:17:89:70:26:
e9:8b:41:75:04:55:ec:55:7a:09:f6:14:78:46:c9:
d3:4a:e5:07:9a:ae:a3:1f:4f:7c:38:21:6b:fa:9d:
90:63:3e:97:77:d2:cb:a5:6c:7c:d7:d6:43:39:53:
62:be:6a:d2:e6:07:5e:a3:34:bc:e9:f0:79:62:c7:
3a:79:3c:53:23:e8:5d:fe:0d:33:59:9a:a0:60:e9:
13:b9:a1:3d:d4:d4:4c:1a:d6:cd:a7:ea:ed:e2:b3:
62:3a:29:4f:c2:b8:c2:86:cb:58:c4:be:d6:62:b0:
3f:4b:3e:f5:6d:d7:61:7d:9b:7a:61:3d:bd:ce:79:
c9:5b:7c:8b:83:ad:02:64:f4:0c:9a:7a:66:d5:52:
d9:17:6b:01:55:5d:3b:09:5c:80:72:e6:87:c3:23:
d2:99:e0:b7:c1:f7:16:fb:d3:53:65:26:d1:37:9a:
4d:a2:6a:23:aa:17:88:c6:01:24:66:b3:11:6e:b4:
1f:17:e0:d8:bc:64:6c:83:e9:7a:bc:22:2b:6e:58:
f9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:2A:1B:BC:B8:0E:D9:EA:77:BF:DE:F2:9C:C8:BF:86:81:A3:0A:CB
X509v3 Authority Key Identifier:
keyid:BF:E3:54:2D:D6:3F:ED:25:0D:E5:CB:65:F6:EC:A4:87:E7:F4:78:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-NULdY_7SUN5ctl9uykh-f0eEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:d9:59:a8:8d:57:c3:8d:0b:b0:3a:c3:1b:4d:d1:70:a5:a7:
7f:e8:b6:58:42:70:8d:50:22:8f:f4:1d:b9:60:e3:55:50:be:
2e:3d:01:1d:e1:26:f2:1e:03:f6:9c:ac:ee:78:92:05:94:af:
12:f3:39:b2:f2:ca:31:37:ee:91:d4:34:1e:90:10:59:99:48:
d1:f2:ba:af:ce:66:45:fb:39:ad:81:82:1f:a3:0a:a5:6c:e8:
e6:ee:b7:8a:46:41:5d:5d:e3:1f:d6:be:4f:21:de:b9:85:16:
b4:55:0f:3e:ae:45:9b:80:eb:93:0c:e1:c8:3a:07:c9:c2:e2:
cb:53:5e:50:da:ad:ab:13:a4:89:c8:42:28:bf:13:36:9d:f5:
74:ab:0f:01:f3:0f:c8:11:03:bc:bc:b8:e3:da:83:1f:63:df:
7e:c5:6e:74:8c:aa:e6:ef:2f:dd:63:a0:5d:78:b8:e3:e8:96:
89:d7:d7:1d:e0:31:89:27:41:14:2e:2c:ef:f5:ac:2a:b7:fd:
9c:90:6d:d1:fa:f6:a7:ef:92:3e:37:f1:57:ff:ad:0d:71:61:
4b:6f:90:07:30:ea:71:ec:98:0f:6a:a7:5d:32:f6:44:a5:95:
c2:65:30:be:e6:2a:6f:79:b8:c5:33:df:28:7e:44:07:b5:85:
ba:8b:4d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:19:07 2025 by rpki-client