Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
File: V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft (raw, json)
Hash identifier: 6z7wIJvq6D0ZmMNa0gOTbKYwOwSLFBV8XhaD5NrrCfk=
Subject key identifier: 72:BB:22:95:B3:F5:EB:D8:2D:5D:34:D1:89:37:B8:14:8F:60:78:AB
Authority key identifier: 57:8D:85:4B:D2:BE:E2:42:A8:2F:B8:39:22:D1:49:BC:CF:19:ED:02
Certificate issuer: /CN=578d854bd2bee242a82fb83922d149bccf19ed02
Certificate serial: 01987CAE09B3C942FE770B5BBE9AECF271B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V42FS9K-4kKoL7g5ItFJvM8Z7QI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
Manifest number: 1620
Signing time: Wed 06 Aug 2025 00:00:37 +0000
Manifest this update: Wed 06 Aug 2025 00:00:37 +0000
Manifest next update: Thu 07 Aug 2025 00:00:37 +0000
Files and hashes: 1: NhjTM3dOPnMsLQ7ebQq_0aK61EU.roa (hash: pDZlPFnX9elEIPNsw2D7ajm33IBeKqhaDpBvumlLRQw=)
2: O9m05o_UDIKemPeCfI7Sc16B69Y.roa (hash: yXqGk5sjcirZhyM4OHBNZEpEXcAXLb0N0cHRwAFg1zo=)
3: V42FS9K-4kKoL7g5ItFJvM8Z7QI.crl (hash: +kIPqBKpPSjaMuqlbeALevyPbLMWSXOOSq3iE67095A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
rsync://rpki.ripe.net/repository/DEFAULT/V42FS9K-4kKoL7g5ItFJvM8Z7QI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:ae:09:b3:c9:42:fe:77:0b:5b:be:9a:ec:f2:71:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=578d854bd2bee242a82fb83922d149bccf19ed02
Validity
Not Before: Aug 6 00:00:37 2025 GMT
Not After : Aug 7 00:00:37 2025 GMT
Subject: CN=72bb2295b3f5ebd82d5d34d18937b8148f6078ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:df:a9:e9:bd:d7:06:6b:2a:c0:aa:c4:41:58:
82:77:f1:ae:03:14:4b:e1:0f:80:26:1b:f2:c7:4d:
59:74:4c:f5:ea:85:39:59:6a:37:ff:fd:46:ca:7a:
ee:4b:c1:07:a5:3e:f1:15:cc:3d:ff:be:4f:07:f1:
2d:fd:77:4c:7b:e5:dd:0d:5f:fe:7e:7c:32:e5:c4:
a3:82:68:c5:53:e3:1c:35:66:84:03:0e:6f:b1:e3:
c9:f8:46:4f:1e:ce:b0:fe:72:37:e0:ce:a5:63:d7:
08:37:26:f6:b2:e7:53:57:fd:8b:0f:c3:42:c7:d2:
9e:56:47:e0:46:16:84:a6:00:80:af:69:ff:61:34:
33:f4:dc:85:bc:2b:8a:14:5f:0e:bb:66:0e:c1:96:
a7:4b:2b:56:ae:40:11:92:8a:d4:27:c3:3d:a1:e2:
f2:4d:87:f7:da:77:cb:a4:c4:77:16:8b:05:b0:49:
75:11:1a:60:d4:35:75:84:cc:7c:e8:75:0d:5b:66:
30:b4:ec:0f:31:19:d2:9f:2b:6b:4d:63:15:26:fb:
16:2b:6d:e3:6b:30:e2:ff:d2:2a:c4:88:11:40:1d:
33:3f:79:13:2d:df:84:42:7b:40:cb:86:6f:0d:5b:
51:21:2c:46:a6:8c:d3:49:46:77:d7:60:5a:c4:22:
74:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:BB:22:95:B3:F5:EB:D8:2D:5D:34:D1:89:37:B8:14:8F:60:78:AB
X509v3 Authority Key Identifier:
keyid:57:8D:85:4B:D2:BE:E2:42:A8:2F:B8:39:22:D1:49:BC:CF:19:ED:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V42FS9K-4kKoL7g5ItFJvM8Z7QI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:74:24:cd:0b:ec:c2:67:79:f5:60:73:64:3e:3e:27:75:2f:
15:a8:73:15:4a:6f:d7:5a:12:fc:26:3c:7c:f7:5b:0f:7e:1d:
44:07:29:80:12:b1:47:32:96:61:c9:9d:0b:71:7b:38:51:5b:
e0:44:63:07:82:3b:ca:60:11:cb:c2:cb:3f:67:4e:5e:ae:de:
a3:72:79:7e:ed:17:bd:9f:42:f3:ff:55:85:ed:19:24:cb:15:
59:bd:38:0d:9f:ec:2d:b2:2c:48:01:93:ff:8c:e1:e6:84:ab:
f8:08:d1:21:00:13:3d:c0:71:c8:54:fa:27:d2:eb:8f:50:86:
87:c3:08:10:0b:b4:02:d2:97:df:70:48:fe:6a:21:61:e6:b4:
dc:f7:47:55:36:45:c6:e1:66:09:f6:7e:d6:ab:05:81:ba:6d:
91:49:ea:79:67:38:49:24:a1:48:6f:b6:90:97:0b:c4:51:f9:
81:59:1c:1f:c2:16:97:5b:b1:1f:4f:55:38:3e:63:3a:1e:40:
db:66:50:df:b6:5a:2c:25:55:02:78:6c:f5:7f:0c:40:bf:89:
28:bb:ea:e8:9c:73:a3:89:92:db:b9:80:34:b5:4c:a9:5a:f0:
82:d1:d0:99:02:9e:09:3f:21:59:bd:b3:58:e9:7d:ab:3c:a4:
36:7d:60:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:58:53 2025 by rpki-client