Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.mft
File: v5joFwlZteYBj2ArOnSHstgCgQY.mft (raw, json)
Hash identifier: Kn0IsR3716aPZIjfRBNiBjYHoDwUGW2r/mU1ncfjzyk=
Subject key identifier: E3:00:1D:E4:0D:8D:EA:C8:B3:B4:19:6D:6F:E6:B0:99:89:3C:D8:1E
Authority key identifier: BF:98:E8:17:09:59:B5:E6:01:8F:60:2B:3A:74:87:B2:D8:02:81:06
Certificate issuer: /CN=bf98e8170959b5e6018f602b3a7487b2d8028106
Certificate serial: 01976F62B8AB731ED92E9F3A55FF64C17F10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v5joFwlZteYBj2ArOnSHstgCgQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.mft
Manifest number: 1592
Signing time: Sat 14 Jun 2025 17:00:30 +0000
Manifest this update: Sat 14 Jun 2025 17:00:30 +0000
Manifest next update: Sun 15 Jun 2025 17:00:30 +0000
Files and hashes: 1: WxyFMVLPaoedm2KunMSjCPtRmII.roa (hash: Ungr4kPsfNHZcdD5CyaeCkdVZRH3x9Cj4Xb6OMIiqY0=)
2: ekd0T-pWjR2fdJhmt79rFrJVVFk.roa (hash: SlYmHx07GpRwdPchZU3v+4uB8eJO2LbmRdoWgdkR9QQ=)
3: v5joFwlZteYBj2ArOnSHstgCgQY.crl (hash: cnerjvfx1fu+fIaol+wTECeZZaWMLzwtgUXcG8vODvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/v5joFwlZteYBj2ArOnSHstgCgQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:62:b8:ab:73:1e:d9:2e:9f:3a:55:ff:64:c1:7f:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf98e8170959b5e6018f602b3a7487b2d8028106
Validity
Not Before: Jun 14 17:00:30 2025 GMT
Not After : Jun 15 17:00:30 2025 GMT
Subject: CN=e3001de40d8deac8b3b4196d6fe6b099893cd81e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8a:f7:0a:83:3f:4b:2a:a8:b6:dd:3e:e0:ac:
90:32:a8:f5:c7:17:1e:df:10:d0:d1:6c:1a:42:22:
7c:17:d2:7e:2a:95:b3:e9:6c:52:98:8d:97:84:46:
32:fe:3f:a1:e9:6f:cc:5d:1d:b9:8a:83:86:bc:cc:
8f:13:97:2e:94:4f:2d:f4:0a:5e:6b:cb:63:a3:7b:
e4:d2:ed:c5:67:19:b9:97:f0:fa:ef:28:ef:76:b6:
a3:19:08:4f:e9:b3:60:b1:96:eb:f9:7c:05:83:4b:
50:44:41:b6:fc:37:7b:7b:81:73:30:e6:17:0b:d2:
5a:bb:5f:f2:12:9e:f3:0b:f9:cc:e2:43:d3:92:bf:
e4:e6:d2:d9:e6:ba:29:b7:a7:3a:dc:1c:32:f3:d7:
46:e2:cc:15:04:44:93:ad:48:e6:13:3b:7b:47:ef:
0c:25:10:5d:61:ea:21:a4:8e:bf:f7:dc:73:d4:d4:
d6:71:b3:2e:8c:88:34:ec:85:2b:4a:ce:9a:43:07:
ff:95:0d:a7:b5:3b:fa:ce:a1:cb:d5:6f:6a:78:94:
b5:68:87:7d:b6:27:68:64:43:ff:65:24:83:d9:ef:
16:a9:b3:37:ad:f7:2b:c6:42:49:ff:d0:e0:39:b1:
b4:01:76:36:fa:5f:40:d7:0e:4c:34:8d:ba:b3:2e:
a2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:00:1D:E4:0D:8D:EA:C8:B3:B4:19:6D:6F:E6:B0:99:89:3C:D8:1E
X509v3 Authority Key Identifier:
keyid:BF:98:E8:17:09:59:B5:E6:01:8F:60:2B:3A:74:87:B2:D8:02:81:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5joFwlZteYBj2ArOnSHstgCgQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:cb:a8:8a:2e:e2:4f:6d:f3:10:03:8d:21:56:5c:56:2f:4b:
4b:a5:76:d5:64:61:a8:bf:2d:0d:57:ac:c6:8d:11:c9:dd:b0:
99:0b:a9:07:29:9f:1d:5b:cd:3e:80:26:b7:d6:91:16:a0:9d:
85:b5:be:1a:dc:d9:fe:d6:b6:1e:6f:59:9e:28:3d:b2:1d:0a:
5f:c8:f5:df:5c:21:a0:33:b8:9e:ba:8f:48:02:19:d5:4d:03:
ed:16:48:dc:78:b0:63:a7:90:44:25:2b:d0:f5:55:1b:0c:31:
74:d2:7f:c0:44:78:36:09:94:fd:0d:e3:dd:f7:a9:26:56:8c:
4e:54:08:87:8c:c9:18:f1:db:26:8f:70:d6:6a:16:59:19:dc:
38:6a:ea:1d:8a:6f:0d:9e:b6:cb:0a:a3:43:bb:41:43:a8:05:
2d:52:eb:7a:c6:01:88:8a:9c:1f:c7:67:63:80:35:e3:45:c4:
c4:26:e0:84:3a:43:eb:87:8c:81:e2:e0:50:e8:c5:9e:26:9e:
2a:ca:62:79:ee:d1:66:e6:bb:ea:a2:ce:79:1c:c0:4e:9c:af:
58:fb:47:36:77:db:1e:c0:d9:cd:9f:a9:5a:ff:86:4e:38:ca:
8e:2b:c8:f0:83:b0:c0:0f:62:2b:82:84:a2:79:34:e8:27:c9:
04:d1:8f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:12:44 2025 by rpki-client