Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft
File: V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft (raw, json)
Hash identifier: AzjIIiQUO5Uv+d9XkOAOVNzKAQXAuJmwdanyQw6GEn4=
Subject key identifier: CF:A0:4E:A2:8F:ED:14:05:CF:DB:08:0A:BD:C8:58:C5:8E:82:3E:A4
Authority key identifier: 57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B
Certificate issuer: /CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b
Certificate serial: 019872CF25501A762D28F512CDAC949343A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft
Manifest number: 0F40
Signing time: Mon 04 Aug 2025 02:00:34 +0000
Manifest this update: Mon 04 Aug 2025 02:00:34 +0000
Manifest next update: Tue 05 Aug 2025 02:00:34 +0000
Files and hashes: 1: GyhAtf15yZqMprvOSAG-mSzNZTU.roa (hash: jfVjDUAXNOWRUx2duW7NqVNPhOHvwJFkEOJDlRjLf1c=)
2: Jn9LNrC4wIy3yIlbSkthFN9Albs.roa (hash: 6lIOMorBJKMVKOZBPqKcGfElc6xi+Wc/c9B3Sn6wFrA=)
3: V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl (hash: dnTtVZbe7fJTWf9smICLCYM38xsoCYeNjM5ODnYHCTA=)
4: Y2_bnui3NBLO8jQirmiUuAzGyRw.roa (hash: Sj4Gp5iophRPrZcWhz+iS2BZX0tuH2ZNqq3e2/zFjig=)
5: ntrt1qLEp7JFw_l17Dbev4liPcY.roa (hash: 5lVCUBQu1df/S1FQOKl/MyF/XxoO3ZxscsaY8Q1dPLk=)
6: vfMCWDXHqUhfE9pCWjy3UIK3sYE.roa (hash: cZ4cjZLkxHd/pGP9SjokJ4j+E/I+MNHdDpithj4CeCo=)
7: zaxDDa76odJm9ePdrwAGeOqRpTk.roa (hash: LPUFtmetdpPIYathbUV2AsqucuRhOg7pKFky/Ou4leU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft
rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:25:50:1a:76:2d:28:f5:12:cd:ac:94:93:43:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b
Validity
Not Before: Aug 4 02:00:34 2025 GMT
Not After : Aug 5 02:00:34 2025 GMT
Subject: CN=cfa04ea28fed1405cfdb080abdc858c58e823ea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7e:76:55:24:62:05:d8:f1:30:f3:94:e7:32:
c9:9a:fd:67:51:d7:86:3c:67:48:8c:e2:2c:17:34:
b0:5b:04:f1:a0:58:cc:d4:ee:c0:92:e3:2b:04:07:
ea:70:17:d5:7d:58:21:00:75:21:84:39:ea:bd:92:
af:1c:0c:63:e2:35:f5:a3:d4:00:02:94:d3:80:67:
88:da:74:55:b9:3e:15:76:ec:f4:62:08:05:9e:2b:
31:5e:56:0a:64:af:6f:dc:65:9b:d3:27:34:7d:83:
c4:67:1b:44:7a:7e:d2:42:d6:bc:74:50:d2:19:27:
cc:4e:8b:f9:ad:fa:2b:37:82:47:ad:94:ff:4b:2a:
44:04:d6:64:a6:4e:e9:08:d3:5e:24:d9:fe:f3:e1:
74:c7:6b:c5:06:ca:68:58:58:8b:72:35:3a:6e:7f:
13:74:c9:9d:2d:47:ab:a0:21:ba:a1:6d:6b:fa:e6:
82:10:77:ad:19:49:85:dc:b5:76:ba:7b:6f:a6:41:
ed:a2:f7:90:dc:2e:fa:b7:5e:af:a2:4b:d0:45:29:
2d:3b:0e:4c:63:6b:6d:75:cd:07:c9:c8:72:27:74:
de:47:6a:a6:28:56:d2:f7:8b:ae:e7:5b:b4:97:17:
bf:4c:08:f7:6e:a6:65:b2:de:a7:76:8b:6a:8a:c2:
ba:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A0:4E:A2:8F:ED:14:05:CF:DB:08:0A:BD:C8:58:C5:8E:82:3E:A4
X509v3 Authority Key Identifier:
keyid:57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:b3:1c:33:44:af:01:94:fe:1c:24:e1:f2:f0:56:be:2f:da:
65:9b:7c:3b:b0:d0:02:46:09:14:46:14:34:64:8e:fd:ab:34:
f2:f9:2d:69:be:23:d9:6f:21:ca:e1:0f:eb:4b:03:a0:57:d7:
8c:a7:c5:6c:5c:4f:bd:f8:91:52:0c:ca:04:43:b5:93:8d:65:
9c:56:fc:5f:be:65:6c:a0:28:95:63:69:99:0b:44:06:8c:d2:
7b:fc:fb:be:ac:04:22:9e:0b:46:ac:5c:93:fc:17:3d:47:b2:
3f:e0:52:e4:67:7a:55:bf:1b:f5:7f:1b:d5:ba:90:ee:1a:ac:
56:18:6f:a2:4d:4b:1d:4a:f2:5f:c0:da:8b:68:4a:ac:a9:b2:
a0:ba:31:03:ca:42:6c:d7:4e:85:75:6f:51:fc:8f:a1:50:ea:
37:bd:38:31:23:db:e2:17:67:5e:b0:4b:5a:99:6b:5c:b6:02:
82:51:4a:cd:00:57:aa:cf:e2:4a:d8:5e:55:fa:46:58:c6:b2:
b5:a6:7a:c3:f6:bd:1d:7b:41:da:a8:c0:7b:7a:38:22:af:14:
85:6d:a6:9b:60:37:ba:7e:64:a4:61:7e:00:5f:59:ba:ca:22:
b6:f3:36:1e:07:d4:10:3b:20:c0:22:62:0e:91:11:28:33:0f:
e2:3e:58:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:20:07 2025 by rpki-client