Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.mft
File: V5NTy0LgxPulyuJTpXaLwfJGW5k.mft (raw, json)
Hash identifier: 6rTtB+H+Uwi0tfEEa1ODirzpViuQwtGn1dxYgbC7YUM=
Subject key identifier: D5:7C:43:1F:79:2D:6E:BA:30:31:E9:F3:26:AC:6D:BE:1B:4B:0E:46
Authority key identifier: 57:93:53:CB:42:E0:C4:FB:A5:CA:E2:53:A5:76:8B:C1:F2:46:5B:99
Certificate issuer: /CN=579353cb42e0c4fba5cae253a5768bc1f2465b99
Certificate serial: 019873E2B7F3FD62494F22E87D81A1F47466
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5NTy0LgxPulyuJTpXaLwfJGW5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.mft
Manifest number: 109C
Signing time: Mon 04 Aug 2025 07:01:34 +0000
Manifest this update: Mon 04 Aug 2025 07:01:34 +0000
Manifest next update: Tue 05 Aug 2025 07:01:34 +0000
Files and hashes: 1: D3QeUsU8Q-1bY74EwK2MA0No9Ew.roa (hash: N97kcfMNA4uFpsheDLzM7+Nl7AAF28L1BPIs41yYMZY=)
2: Q07EucI5XyAYo9s-A9qqwpcEGlA.roa (hash: VFWYrVVM3MpoRzNbOjii1yFOv4OAEiNvOV4MAp0ri4Y=)
3: V5NTy0LgxPulyuJTpXaLwfJGW5k.crl (hash: ihesVA5lAKS3hNHsYg5d4RugOg3UuINzx8Welxb7XpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/V5NTy0LgxPulyuJTpXaLwfJGW5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:b7:f3:fd:62:49:4f:22:e8:7d:81:a1:f4:74:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=579353cb42e0c4fba5cae253a5768bc1f2465b99
Validity
Not Before: Aug 4 07:01:34 2025 GMT
Not After : Aug 5 07:01:34 2025 GMT
Subject: CN=d57c431f792d6eba3031e9f326ac6dbe1b4b0e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:42:e4:52:28:eb:96:c1:a0:55:cd:4f:d3:a2:
9d:e2:8c:07:2d:9c:07:ca:a9:2a:27:20:53:04:d1:
d1:97:f2:95:46:5f:b2:7d:94:e9:fb:00:59:d7:fb:
6c:32:4a:62:2d:54:c6:09:de:34:f5:10:25:f4:5d:
bd:fb:3c:ff:db:bd:9b:0b:58:16:6c:3e:e8:4c:dc:
ea:5f:7c:b2:22:0c:ad:4d:90:d3:41:e3:cc:3b:dd:
8c:35:18:00:0c:0f:d1:cb:b0:d0:ad:16:0a:c6:9e:
91:ea:9f:5d:39:70:61:ba:17:e5:25:3c:d6:73:8f:
05:5f:e0:f9:2d:44:c8:1e:66:94:2f:70:02:b5:ca:
e6:b2:ad:bd:60:41:50:3a:ee:a7:34:c9:2f:a9:43:
c2:1b:f5:ea:85:f5:31:01:f8:d0:8f:57:8a:70:67:
39:e8:16:25:8a:12:fa:e2:37:7c:4a:4d:a6:63:96:
96:3f:6f:be:de:8e:ca:f6:fb:e3:1b:5c:2c:53:5a:
42:1f:f3:5b:6f:99:aa:51:fd:66:8c:38:fc:73:80:
87:15:fc:c8:4e:6b:16:9e:61:2d:6d:4e:05:82:a8:
50:8a:a9:49:e0:7b:db:b3:c1:4b:bf:cf:fe:89:89:
cf:43:c6:53:d9:e6:3c:f7:62:f7:e1:cc:8d:b2:22:
22:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:7C:43:1F:79:2D:6E:BA:30:31:E9:F3:26:AC:6D:BE:1B:4B:0E:46
X509v3 Authority Key Identifier:
keyid:57:93:53:CB:42:E0:C4:FB:A5:CA:E2:53:A5:76:8B:C1:F2:46:5B:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5NTy0LgxPulyuJTpXaLwfJGW5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:39:27:9f:b9:35:50:c6:5b:df:cb:a4:f1:87:6e:ff:fb:fe:
da:4e:af:ad:aa:a5:04:b4:a8:af:15:c8:97:f1:a8:ac:24:7e:
6f:ab:ff:b4:ab:d3:23:9b:63:28:00:92:95:84:2a:fd:ee:a2:
81:18:cb:fe:50:21:77:6b:95:9b:96:6d:9e:a4:5a:8b:c2:b2:
a3:b0:b4:dc:c8:10:6f:8d:da:76:cb:2e:5e:a6:7f:ab:d3:fb:
ea:78:f4:3d:a9:9c:96:2a:15:71:75:82:50:79:40:70:91:ec:
4a:ad:68:d8:2b:db:c7:db:a9:6c:bd:62:44:cd:bf:cf:8e:ed:
bf:c5:20:70:97:f0:25:12:fc:58:22:16:1d:e0:6f:04:bb:e5:
05:92:f7:51:9c:d1:92:2e:39:b0:de:bb:9a:f8:77:6a:db:8f:
45:06:3e:9e:08:b3:12:98:3a:b9:8d:be:03:73:1c:60:e3:4a:
34:be:ec:58:4c:93:b0:d0:ee:fd:3a:de:60:ba:bb:63:63:0a:
a9:56:4a:fd:3b:f0:e2:c8:f3:a5:46:32:2c:78:2a:e6:17:63:
6a:31:a7:b6:93:7f:c5:71:50:f9:d0:aa:91:72:cf:7a:e1:6c:
b1:26:11:a4:36:e1:11:f3:dc:80:29:2a:ec:78:30:9d:22:db:
39:ad:84:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:24:57 2025 by rpki-client