Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.mft
File: V5NTy0LgxPulyuJTpXaLwfJGW5k.mft (raw, json)
Hash identifier: UwlsuXqoX/tKV/+0nrXcghU+Xb2UwtULcHEeOFSdXhU=
Subject key identifier: B6:D0:DD:B8:67:6E:3A:4E:B3:6E:00:C6:0B:C5:CD:EB:6C:4E:AC:C7
Authority key identifier: 57:93:53:CB:42:E0:C4:FB:A5:CA:E2:53:A5:76:8B:C1:F2:46:5B:99
Certificate issuer: /CN=579353cb42e0c4fba5cae253a5768bc1f2465b99
Certificate serial: 01976929DD8F203A1F46B0ECE5C34573B640
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5NTy0LgxPulyuJTpXaLwfJGW5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.mft
Manifest number: 1012
Signing time: Fri 13 Jun 2025 12:00:40 +0000
Manifest this update: Fri 13 Jun 2025 12:00:40 +0000
Manifest next update: Sat 14 Jun 2025 12:00:40 +0000
Files and hashes: 1: D3QeUsU8Q-1bY74EwK2MA0No9Ew.roa (hash: N97kcfMNA4uFpsheDLzM7+Nl7AAF28L1BPIs41yYMZY=)
2: Q07EucI5XyAYo9s-A9qqwpcEGlA.roa (hash: VFWYrVVM3MpoRzNbOjii1yFOv4OAEiNvOV4MAp0ri4Y=)
3: V5NTy0LgxPulyuJTpXaLwfJGW5k.crl (hash: H+Lf8dk3EXrBRkRpgdCAQHdeV1pYPZxlfjm0+HXsA+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/V5NTy0LgxPulyuJTpXaLwfJGW5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:dd:8f:20:3a:1f:46:b0:ec:e5:c3:45:73:b6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=579353cb42e0c4fba5cae253a5768bc1f2465b99
Validity
Not Before: Jun 13 12:00:40 2025 GMT
Not After : Jun 14 12:00:40 2025 GMT
Subject: CN=b6d0ddb8676e3a4eb36e00c60bc5cdeb6c4eacc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:dd:d9:d6:9c:78:f7:b6:20:41:ce:b0:35:40:
58:b2:38:42:f2:90:98:e4:e4:ab:a0:16:fe:31:96:
11:61:50:a9:33:d2:84:b8:9a:34:9f:5d:51:3f:10:
fa:7d:fd:47:ef:57:12:d6:e2:f3:ad:ee:9a:ff:c5:
d7:c1:3f:85:1d:d2:64:77:bf:32:d0:1d:a7:3c:91:
65:f1:00:e0:0f:a7:46:32:fa:31:e4:d3:31:50:de:
3f:21:0e:fe:82:c9:7d:5c:6f:9b:d3:66:8b:aa:06:
de:ac:75:36:8f:01:b6:14:01:f6:e5:ea:08:a3:74:
48:ee:e3:ec:14:9d:aa:d3:e2:5a:e6:b9:b4:67:82:
19:0a:99:eb:71:27:3d:b4:36:03:10:1f:a8:68:45:
b1:f0:8e:49:91:32:1c:36:38:01:d0:f8:8a:11:dd:
6b:d8:23:fa:10:fd:f4:f4:b5:56:d0:f7:b7:51:a0:
28:0e:52:7a:32:84:19:b7:81:57:23:36:31:03:0c:
0e:5d:2c:22:af:31:59:ed:4c:45:67:8a:a3:9d:3e:
4d:05:db:f7:11:e7:5d:88:1d:8b:2b:72:0c:78:95:
8b:28:f4:39:40:e9:8e:29:d6:58:65:69:8c:96:f8:
cb:87:7d:fb:99:91:79:53:9b:4a:44:a3:98:60:99:
67:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:D0:DD:B8:67:6E:3A:4E:B3:6E:00:C6:0B:C5:CD:EB:6C:4E:AC:C7
X509v3 Authority Key Identifier:
keyid:57:93:53:CB:42:E0:C4:FB:A5:CA:E2:53:A5:76:8B:C1:F2:46:5B:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5NTy0LgxPulyuJTpXaLwfJGW5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:e5:85:87:b0:eb:34:32:f3:a2:b4:59:02:5b:4f:29:a2:f6:
35:69:d4:c3:36:d6:8f:af:7c:be:4f:1b:ab:99:0c:7a:56:ec:
f2:7e:52:d2:df:b4:42:2f:70:63:43:96:14:e7:b3:f4:37:30:
f1:4f:ca:4a:1b:23:fe:16:71:ff:8d:76:4b:b1:0b:ac:2f:a9:
6f:ed:3e:d5:82:26:58:2e:b1:91:c9:c2:fd:9f:c6:9e:c2:86:
52:95:62:8d:18:ca:90:55:f2:f3:6f:7c:9e:d1:79:6f:bb:61:
12:a6:c3:75:23:1a:65:53:6d:51:3a:54:d7:9e:a3:d1:d3:63:
a5:19:69:ad:91:86:f2:e3:67:7f:48:56:96:bc:7b:8d:98:cf:
bf:5c:5f:21:93:4b:5d:23:38:89:8c:ec:8f:95:70:55:ea:52:
bf:40:e8:ab:95:c4:9a:d0:df:f3:53:e9:b4:5f:0d:e6:62:1e:
8d:dc:ab:22:76:47:65:e3:0b:08:80:97:3b:3a:8f:a1:2a:ef:
30:9d:88:96:e6:cd:32:d2:6c:90:42:39:ee:8a:77:24:7f:da:
6e:a2:70:9a:23:56:76:ae:80:bd:93:d4:55:99:01:d2:ad:78:
45:22:a5:05:04:7c:33:83:4b:08:1a:8c:72:6c:eb:6e:10:50:
0f:b7:1d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:20:08 2025 by rpki-client