Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.mft
File: V04loW5dOqEQrF6DNfiPY-VLQvE.mft (raw, json)
Hash identifier: NH6MCFK/p0oZOuK5WZDxU150OLUPov7Kk6k3cZ8QaJ8=
Subject key identifier: A3:23:55:35:91:2B:74:3A:19:B2:C1:22:2E:57:B4:A8:EB:D0:6F:D5
Authority key identifier: 57:4E:25:A1:6E:5D:3A:A1:10:AC:5E:83:35:F8:8F:63:E5:4B:42:F1
Certificate issuer: /CN=574e25a16e5d3aa110ac5e8335f88f63e54b42f1
Certificate serial: 019769299EA1A6659C7E01FEFBDDFB0EB36A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V04loW5dOqEQrF6DNfiPY-VLQvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.mft
Manifest number: 1593
Signing time: Fri 13 Jun 2025 12:00:24 +0000
Manifest this update: Fri 13 Jun 2025 12:00:24 +0000
Manifest next update: Sat 14 Jun 2025 12:00:24 +0000
Files and hashes: 1: 4gBDlHfraeJIeTYRGBqyZyvtae8.roa (hash: Qqj1EC36vQFgIkoRX33NjG4dXDa3mcsnpDKk5Y8xJEA=)
2: V04loW5dOqEQrF6DNfiPY-VLQvE.crl (hash: nc4ChW4xVrah1ysHGAKGlkfkI23tdL+vIL7U6ZrteX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/V04loW5dOqEQrF6DNfiPY-VLQvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:9e:a1:a6:65:9c:7e:01:fe:fb:dd:fb:0e:b3:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=574e25a16e5d3aa110ac5e8335f88f63e54b42f1
Validity
Not Before: Jun 13 12:00:24 2025 GMT
Not After : Jun 14 12:00:24 2025 GMT
Subject: CN=a3235535912b743a19b2c1222e57b4a8ebd06fd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f3:37:a8:73:16:4e:00:d9:56:64:b9:fc:b9:
4d:1a:20:9e:e3:08:85:49:da:86:f1:a9:95:d1:dc:
42:6b:a7:08:d2:75:d2:1c:03:a3:82:f5:8b:36:50:
71:6b:67:ce:14:30:60:f3:d3:20:2c:12:89:ef:47:
dc:e4:f1:16:38:34:5c:53:33:5f:f6:c1:c1:39:61:
e0:76:24:48:52:96:d8:e9:45:01:8e:ea:41:d0:a1:
06:d4:54:8e:93:b2:65:8c:ba:6e:c3:e9:db:54:0d:
40:ef:e2:e8:2e:77:da:78:e6:1a:38:80:48:da:5c:
76:79:66:70:60:24:85:54:cb:56:4a:3f:77:2f:4c:
56:57:b6:27:32:19:47:b4:5e:f5:8e:a1:b1:de:b1:
ac:7e:60:e6:81:0d:28:a4:ff:55:80:43:d1:6f:aa:
ca:a4:64:5c:6a:54:78:c2:f4:b8:44:34:3f:71:ba:
17:fb:3f:c9:5f:1d:40:a0:5d:4a:d2:9f:a6:2e:a1:
94:78:45:8a:6e:66:e1:70:bd:ac:fe:33:52:f9:a0:
43:16:2a:ad:b8:a0:48:08:47:f1:29:93:b3:c4:60:
27:1e:13:68:08:21:75:18:85:ea:fc:ad:8a:78:e3:
60:92:dc:8c:ce:d5:5d:ed:c6:11:19:0b:cb:f5:64:
0a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:23:55:35:91:2B:74:3A:19:B2:C1:22:2E:57:B4:A8:EB:D0:6F:D5
X509v3 Authority Key Identifier:
keyid:57:4E:25:A1:6E:5D:3A:A1:10:AC:5E:83:35:F8:8F:63:E5:4B:42:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V04loW5dOqEQrF6DNfiPY-VLQvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:24:59:37:9f:70:b4:13:79:61:7f:a7:00:6c:55:7e:f7:be:
dd:54:cc:f8:ba:9e:a6:45:fa:e8:5a:53:3b:95:3c:91:9a:f5:
26:ab:39:ed:cf:ca:b4:d7:8e:cd:98:22:b3:a0:ca:ed:99:7a:
2b:23:32:94:1b:5d:1f:65:c8:45:ab:34:3b:8f:1c:ab:02:d6:
03:e1:32:87:db:8b:42:af:a8:ef:ff:6d:c6:36:b8:18:b9:8f:
21:f1:d8:5e:a7:fa:14:bf:09:48:df:c3:0f:d4:60:4b:00:90:
3f:ba:58:21:53:73:2e:90:bf:de:ae:14:08:3e:ba:4f:10:e9:
5f:8f:c7:d6:68:83:36:ed:8e:43:54:27:cf:fc:aa:5d:3c:fb:
c5:d8:42:88:1c:04:51:2c:48:f2:ee:2b:53:0e:83:b5:d5:a7:
4c:7a:9e:0b:6f:78:f7:19:ca:07:77:33:b0:92:26:d3:e8:f1:
4c:3a:b2:be:7f:80:4c:5c:ff:ad:36:29:10:9b:61:d0:73:6e:
4c:ed:53:90:18:71:2e:8c:38:99:ca:43:ff:fe:87:c3:c5:26:
60:3f:bc:f1:3a:85:89:69:52:86:ab:e1:af:7e:c9:c0:8f:4e:
61:cf:3e:5c:e5:a4:69:32:04:f3:e7:f3:3e:d8:1f:04:b8:50:
5e:f1:be:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:31:26 2025 by rpki-client