Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/a554d3-4232-48fc-b883-b3b5caaf5ea6/1/V3GDYWiNFi_4AjwSJ81kTa45ocA.mft
File: V3GDYWiNFi_4AjwSJ81kTa45ocA.mft (raw, json)
Hash identifier: JZ906E+JSaNX4myoTJQOIpqHsowvLDX4yw/jWp7aSmE=
Subject key identifier: CF:3C:70:07:71:AE:3D:1D:92:17:34:CF:96:F7:52:92:90:38:97:67
Authority key identifier: 57:71:83:61:68:8D:16:2F:F8:02:3C:12:27:CD:64:4D:AE:39:A1:C0
Certificate issuer: /CN=57718361688d162ff8023c1227cd644dae39a1c0
Certificate serial: 019872CFFA6B60BB91DE11F96889AC873F12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3GDYWiNFi_4AjwSJ81kTa45ocA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/a554d3-4232-48fc-b883-b3b5caaf5ea6/1/V3GDYWiNFi_4AjwSJ81kTa45ocA.mft
Manifest number: 15A5
Signing time: Mon 04 Aug 2025 02:01:29 +0000
Manifest this update: Mon 04 Aug 2025 02:01:29 +0000
Manifest next update: Tue 05 Aug 2025 02:01:29 +0000
Files and hashes: 1: V3GDYWiNFi_4AjwSJ81kTa45ocA.crl (hash: ofP3FCuQfGVX7+65V3Oww9GpCGKs6Pv51H2SGZLuMXU=)
2: lgeLoySacO5n6-jqTWkewt--0AI.roa (hash: cHeeK4JCsJJNj8Pz7DQjcNm/axVPSQ0h4TJyF4NqSFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/a554d3-4232-48fc-b883-b3b5caaf5ea6/1/V3GDYWiNFi_4AjwSJ81kTa45ocA.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/a554d3-4232-48fc-b883-b3b5caaf5ea6/1/V3GDYWiNFi_4AjwSJ81kTa45ocA.mft
rsync://rpki.ripe.net/repository/DEFAULT/V3GDYWiNFi_4AjwSJ81kTa45ocA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:fa:6b:60:bb:91:de:11:f9:68:89:ac:87:3f:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57718361688d162ff8023c1227cd644dae39a1c0
Validity
Not Before: Aug 4 02:01:29 2025 GMT
Not After : Aug 5 02:01:29 2025 GMT
Subject: CN=cf3c700771ae3d1d921734cf96f7529290389767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c5:78:e6:c6:a2:ea:cf:8c:09:5e:12:15:d9:
c6:c8:b0:25:5c:82:67:a0:65:af:01:e2:43:11:02:
f7:96:fd:5a:6d:77:cb:4b:1b:14:f5:17:26:88:58:
ba:c2:bd:e6:86:0f:17:4b:04:7f:1a:c5:32:06:8d:
65:d6:36:55:b2:ee:a6:ee:53:33:3f:cb:5e:26:a4:
79:8d:98:da:a1:ab:c6:77:03:dc:fb:e2:10:d6:8e:
74:21:fa:3d:74:21:dc:37:33:d8:49:77:a5:c3:3e:
a0:5c:f1:d5:7a:87:46:6d:67:7d:11:6a:b4:5f:ef:
72:69:90:f4:f4:9d:87:a3:d0:9f:c6:91:d1:0e:6c:
d9:62:49:40:48:fc:37:6e:a9:86:3c:b1:70:c3:68:
27:2d:fd:6a:b8:3c:bd:41:7b:d5:aa:9e:49:29:9b:
3f:c7:7e:5d:70:16:86:5a:93:b1:51:d2:03:19:f0:
2f:ae:68:f8:11:69:09:1e:47:c0:d2:d3:0e:89:65:
31:e7:ac:41:6d:d2:9b:43:4a:69:1e:44:dc:2f:60:
e2:e2:48:1f:ff:9a:b9:44:dd:d4:57:a5:5a:51:14:
27:06:5c:c3:4e:ab:c3:75:a5:db:5f:50:36:27:11:
c7:c0:89:50:7a:eb:8b:4c:55:bd:59:ab:12:1c:c2:
ce:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:3C:70:07:71:AE:3D:1D:92:17:34:CF:96:F7:52:92:90:38:97:67
X509v3 Authority Key Identifier:
keyid:57:71:83:61:68:8D:16:2F:F8:02:3C:12:27:CD:64:4D:AE:39:A1:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3GDYWiNFi_4AjwSJ81kTa45ocA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/a554d3-4232-48fc-b883-b3b5caaf5ea6/1/V3GDYWiNFi_4AjwSJ81kTa45ocA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/a554d3-4232-48fc-b883-b3b5caaf5ea6/1/V3GDYWiNFi_4AjwSJ81kTa45ocA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:c7:9b:75:23:46:6b:f7:a6:62:8a:55:25:19:7c:51:fb:ad:
08:b3:f9:c5:b9:d2:d4:f1:2c:8e:d6:0d:f0:49:41:33:31:2a:
40:77:ef:39:57:75:d6:9c:3d:dc:b8:24:4a:37:bc:e3:bd:5b:
6d:e7:fa:2a:d0:e4:1c:f6:20:5f:fe:75:1c:bb:cb:fd:4d:74:
43:c7:7f:d9:af:23:1a:84:2e:f4:fa:51:22:b5:16:cb:11:b9:
5d:76:c3:d3:80:4e:81:aa:be:ec:8a:0c:d4:ab:b4:5b:c6:da:
b4:72:81:bf:71:c9:27:cf:58:76:00:cf:34:0c:c5:36:6c:95:
27:62:58:00:f9:51:87:97:e0:f9:68:de:0b:31:da:49:34:e5:
50:00:ec:d5:5a:25:8b:53:90:9a:8e:c8:65:b6:61:31:a6:4b:
69:2d:49:7a:eb:60:8a:7c:84:44:b0:74:fa:a1:46:63:9b:38:
3f:68:de:f3:3c:34:77:f1:e0:ad:e1:56:dd:05:eb:c9:c5:fc:
4c:f8:b1:d4:c8:39:ef:e7:7f:a7:98:f5:f6:5f:8a:d4:e9:ef:
95:82:75:d3:e5:75:e9:cc:df:3b:e3:0f:ce:80:ed:89:14:70:
f8:02:da:55:e8:fc:c9:60:c0:02:91:c7:2d:4b:fb:80:9e:f4:
bd:2a:f7:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhyz/prYLuR3hH5aImshz8SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3NzE4MzYxNjg4ZDE2MmZmODAyM2MxMjI3Y2Q2NDRkYWUz
OWExYzAwHhcNMjUwODA0MDIwMTI5WhcNMjUwODA1MDIwMTI5WjAzMTEwLwYDVQQD
EyhjZjNjNzAwNzcxYWUzZDFkOTIxNzM0Y2Y5NmY3NTI5MjkwMzg5NzY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsV45sai6s+MCV4SFdnGyLAlXIJn
oGWvAeJDEQL3lv1abXfLSxsU9RcmiFi6wr3mhg8XSwR/GsUyBo1l1jZVsu6m7lMz
P8teJqR5jZjaoavGdwPc++IQ1o50Ifo9dCHcNzPYSXelwz6gXPHVeodGbWd9EWq0
X+9yaZD09J2Ho9CfxpHRDmzZYklASPw3bqmGPLFww2gnLf1quDy9QXvVqp5JKZs/
x35dcBaGWpOxUdIDGfAvrmj4EWkJHkfA0tMOiWUx56xBbdKbQ0ppHkTcL2Di4kgf
/5q5RN3UV6VaURQnBlzDTqvDdaXbX1A2JxHHwIlQeuuLTFW9WasSHMLOVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM88cAdxrj0dkhc0z5b3UpKQOJdnMB8GA1UdIwQY
MBaAFFdxg2FojRYv+AI8EifNZE2uOaHAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjNHRFlXaU5GaV80QWp3U0o4MWtUYTQ1b2NBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9hNTU0ZDMtNDIzMi00OGZjLWI4ODMt
YjNiNWNhYWY1ZWE2LzEvVjNHRFlXaU5GaV80QWp3U0o4MWtUYTQ1b2NBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9hNTU0ZDMtNDIzMi00OGZjLWI4ODMtYjNiNWNhYWY1ZWE2
LzEvVjNHRFlXaU5GaV80QWp3U0o4MWtUYTQ1b2NBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQMebdSNG
a/emYopVJRl8UfutCLP5xbnS1PEsjtYN8ElBMzEqQHfvOVd11pw93LgkSje8471b
bef6KtDkHPYgX/51HLvL/U10Q8d/2a8jGoQu9PpRIrUWyxG5XXbD04BOgaq+7IoM
1Ku0W8batHKBv3HJJ89YdgDPNAzFNmyVJ2JYAPlRh5fg+WjeCzHaSTTlUADs1Vol
i1OQmo7IZbZhMaZLaS1JeutginyERLB0+qFGY5s4P2je8zw0d/HgreFW3QXrycX8
TPix1Mg57+d/p5j19l+K1OnvlYJ10+V16czfO+MPzoDtiRRw+ALaVej8yWDAApHH
LUv7gJ70vSr3+w==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:13:57 2025 by rpki-client