Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/851657-044d-47d3-afc9-c3a8375f90f9/1/V7DWfEnsEvT1QXA49twTwvk-p2U.mft
File: V7DWfEnsEvT1QXA49twTwvk-p2U.mft (raw, json)
Hash identifier: VNVA1sXFUtJWCYG9WP3tY472QZrn/eDqg3QSAgFbF/U=
Subject key identifier: 5C:9F:9C:07:9E:46:D4:75:1F:F3:AE:10:86:BE:8B:57:7A:CC:26:03
Authority key identifier: 57:B0:D6:7C:49:EC:12:F4:F5:41:70:38:F6:DC:13:C2:F9:3E:A7:65
Certificate issuer: /CN=57b0d67c49ec12f4f5417038f6dc13c2f93ea765
Certificate serial: 01976FD0B04A635C7020134566AB4CC01E2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V7DWfEnsEvT1QXA49twTwvk-p2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/851657-044d-47d3-afc9-c3a8375f90f9/1/V7DWfEnsEvT1QXA49twTwvk-p2U.mft
Manifest number: 0DEB
Signing time: Sat 14 Jun 2025 19:00:36 +0000
Manifest this update: Sat 14 Jun 2025 19:00:36 +0000
Manifest next update: Sun 15 Jun 2025 19:00:36 +0000
Files and hashes: 1: V7DWfEnsEvT1QXA49twTwvk-p2U.crl (hash: UhbRn6//cAcIny5I5V6yss2dGmpYUidWT9Z4A+ETPFE=)
2: aTC_FMtzHsZtI14wbnunZmi33Jw.roa (hash: wvwgvmerl+Gv6gcyDvl/OWVT3i3Y0FpbzMV8nbDfYyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/851657-044d-47d3-afc9-c3a8375f90f9/1/V7DWfEnsEvT1QXA49twTwvk-p2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/851657-044d-47d3-afc9-c3a8375f90f9/1/V7DWfEnsEvT1QXA49twTwvk-p2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/V7DWfEnsEvT1QXA49twTwvk-p2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d0:b0:4a:63:5c:70:20:13:45:66:ab:4c:c0:1e:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57b0d67c49ec12f4f5417038f6dc13c2f93ea765
Validity
Not Before: Jun 14 19:00:36 2025 GMT
Not After : Jun 15 19:00:36 2025 GMT
Subject: CN=5c9f9c079e46d4751ff3ae1086be8b577acc2603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:eb:a0:51:2a:e2:42:b1:e9:37:85:26:03:89:
31:c9:98:8f:02:da:ef:4d:97:ed:f0:dd:43:f2:47:
37:90:e5:df:2f:f7:88:be:81:ce:7b:db:c1:2c:a0:
05:de:d0:a6:9d:cc:1d:46:b6:e8:1f:17:c8:fb:0a:
b8:ce:50:f5:cd:5d:36:de:bf:e0:13:9d:8c:4a:8f:
ac:c5:23:aa:cd:2e:48:67:74:09:7f:94:d2:48:ba:
b8:50:72:0e:28:3c:0b:7c:91:ac:5a:ff:27:09:6c:
1c:13:df:50:b8:13:33:97:9a:d7:40:c1:80:f8:80:
86:b6:72:08:0c:78:3a:48:05:a0:37:63:80:c1:bb:
6d:40:f6:15:0c:45:9c:74:70:b6:94:23:b4:35:6a:
85:fb:00:10:62:8c:01:ac:96:c2:bd:cc:9a:98:82:
32:56:e9:56:bd:2e:6e:c4:ef:b6:1a:af:e4:9c:0e:
54:e8:7c:5b:c9:66:ca:79:29:aa:a5:07:7a:40:6c:
6d:ea:3e:34:b2:fe:e7:37:5f:f6:a9:2b:db:5e:6a:
f8:4b:fb:d8:78:49:c5:65:50:c8:66:65:ea:27:60:
70:79:4d:30:9f:ad:bc:c0:4d:94:46:94:6a:30:41:
6e:92:30:09:79:1f:8c:18:fd:99:3b:9f:4e:d9:d0:
04:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:9F:9C:07:9E:46:D4:75:1F:F3:AE:10:86:BE:8B:57:7A:CC:26:03
X509v3 Authority Key Identifier:
keyid:57:B0:D6:7C:49:EC:12:F4:F5:41:70:38:F6:DC:13:C2:F9:3E:A7:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7DWfEnsEvT1QXA49twTwvk-p2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/851657-044d-47d3-afc9-c3a8375f90f9/1/V7DWfEnsEvT1QXA49twTwvk-p2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/851657-044d-47d3-afc9-c3a8375f90f9/1/V7DWfEnsEvT1QXA49twTwvk-p2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:b0:8b:73:34:0c:d2:6a:45:d3:91:59:5c:57:c3:be:46:9e:
bf:ec:ee:42:b6:88:ec:6f:f5:99:20:26:47:f0:10:01:25:fe:
b3:72:a8:73:e6:1c:07:c9:5e:db:58:e1:d4:ad:ec:bf:a5:55:
2f:9e:36:ad:08:4e:08:9d:0d:9b:76:c0:41:79:84:be:5c:de:
45:5a:5c:0b:9e:e4:67:a7:d8:bc:10:84:03:a6:11:49:d7:21:
90:1a:53:ce:b6:f3:07:de:72:c0:af:d9:b3:88:69:dc:34:79:
bb:f5:1d:3c:7b:de:c6:84:71:c4:90:e0:3a:d4:fc:66:10:0a:
f2:f0:fe:d8:8f:bd:6c:de:24:ea:4d:b3:d5:76:06:38:3d:60:
fa:63:7a:57:21:15:49:8f:ac:48:bc:d1:de:95:20:bb:53:b5:
a5:fa:8a:3b:05:17:1c:26:91:0e:23:83:f9:61:d2:1a:c8:b1:
71:5f:0b:52:e1:2a:8a:9a:11:ed:ef:1a:be:74:1e:95:eb:c9:
7f:5d:49:d6:14:a0:85:7a:00:67:1a:b5:42:ce:c4:bb:94:7b:
4b:24:5f:07:06:44:72:e0:b1:08:ec:05:06:60:59:65:e6:19:
db:d4:3a:8b:62:cf:a8:aa:ca:70:2e:6d:1f:6b:c4:66:c9:4a:
79:52:fa:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:53:41 2025 by rpki-client