Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft
File: v124EbXV0FvsN-6dCaTsUu7tGtU.mft (raw, json)
Hash identifier: Mw2dMZZGqncD/elmNlJ31kkoIMC7WA7s3IkN1fH0Fuo=
Subject key identifier: 3D:F3:3A:F2:01:BD:89:20:56:91:5C:7D:26:12:D4:B7:0A:50:E2:22
Authority key identifier: BF:5D:B8:11:B5:D5:D0:5B:EC:37:EE:9D:09:A4:EC:52:EE:ED:1A:D5
Certificate issuer: /CN=bf5db811b5d5d05bec37ee9d09a4ec52eeed1ad5
Certificate serial: 01978C919D381A9956DA0B288362D8C3F160
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft
Manifest number: 15A0
Signing time: Fri 20 Jun 2025 09:00:42 +0000
Manifest this update: Fri 20 Jun 2025 09:00:42 +0000
Manifest next update: Sat 21 Jun 2025 09:00:42 +0000
Files and hashes: 1: A_KgM3k4qAAXzoVtcLMaFcFNNK4.roa (hash: VJ7GutYO65TbDd04dxHRMtfL/mkpQAyG9g/RbTdBVFk=)
2: Bykp6D8a0g7RWzF0-TM8Q9QUeZg.roa (hash: XX0zq9iYFmQVsbLlV9Gh1YQJWKy0izeVfRSjEDzptNY=)
3: aEL4xFOQmRYrZwG3M_bcJt5uI7g.roa (hash: zEPp0rusbaxj35njsL+K6xMWps6ctYOjx+pWxAGHdKg=)
4: leblj7LAsmNQvo4mPAk6nZp18TI.roa (hash: BN8Nv/xxMQaspAlU30+6jiR1kkLgITKVXHRbqi9/XpE=)
5: v124EbXV0FvsN-6dCaTsUu7tGtU.crl (hash: m6/KXQN/BwxBh+Q9+aEOcQY7j3ek9kjVFkenieu0roU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 09:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8c:91:9d:38:1a:99:56:da:0b:28:83:62:d8:c3:f1:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf5db811b5d5d05bec37ee9d09a4ec52eeed1ad5
Validity
Not Before: Jun 20 09:00:42 2025 GMT
Not After : Jun 21 09:00:42 2025 GMT
Subject: CN=3df33af201bd892056915c7d2612d4b70a50e222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c1:1f:4b:c8:ce:52:2a:47:9b:4f:79:44:83:
92:35:1c:41:22:8d:33:42:4d:7c:9d:47:2f:5b:4c:
1d:99:bb:ec:ba:be:67:24:29:fe:e9:7c:a0:30:e8:
88:92:a5:59:0d:af:42:3a:76:07:a1:08:b3:7c:8a:
83:7a:f9:e3:a5:f4:43:b6:91:c7:c3:aa:d6:62:17:
99:8d:e8:0b:55:70:73:23:12:17:72:a0:ea:04:21:
ec:f5:7b:31:e3:f8:46:ae:fd:ad:cc:d8:55:28:39:
78:ec:e9:21:c6:79:25:ab:c0:b5:c9:8d:ef:35:80:
9f:fa:6a:55:2b:96:60:a6:4b:bf:20:64:89:d1:71:
f7:0e:86:ef:4d:f2:6e:2a:75:66:07:2d:42:54:4d:
8e:92:d8:93:70:54:93:09:ce:3e:d6:ca:68:22:8a:
2d:ae:75:2c:5a:48:b4:ce:43:58:95:94:86:1f:d7:
c3:47:56:30:30:ad:3b:f2:19:7d:5f:ce:30:89:a6:
4e:ec:26:15:c4:59:01:88:c5:e8:4e:d9:15:4a:ca:
77:7b:7e:01:4a:4b:40:e9:54:84:12:cd:63:73:b7:
18:c7:89:b4:2a:b4:2c:fe:34:b5:1e:50:e0:62:59:
b9:89:1d:a3:18:0c:a3:6b:dc:9b:73:29:97:c7:b2:
d6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F3:3A:F2:01:BD:89:20:56:91:5C:7D:26:12:D4:B7:0A:50:E2:22
X509v3 Authority Key Identifier:
keyid:BF:5D:B8:11:B5:D5:D0:5B:EC:37:EE:9D:09:A4:EC:52:EE:ED:1A:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:99:7c:51:b6:3a:62:61:28:68:e9:27:e1:f5:26:78:7f:43:
ce:44:ba:a1:4a:03:e1:f4:22:ad:3c:50:39:ae:bb:cd:cb:52:
83:b0:4c:a5:12:52:4e:9e:ba:da:91:f8:c1:3f:5a:d4:97:80:
7f:06:98:b2:97:6e:35:09:98:1e:1e:83:06:18:26:a4:ed:2b:
aa:9b:74:b1:50:6c:fe:67:06:21:91:17:2c:5c:75:5c:76:70:
99:c8:d1:b6:03:b3:15:82:34:57:ed:83:c9:90:d3:6c:5f:d5:
74:86:7b:35:df:1d:8e:bd:3b:4f:44:de:00:cb:4b:05:72:11:
7b:81:ef:7f:3e:75:dd:43:8a:12:15:14:78:54:f5:78:89:3e:
e9:4f:c0:ae:cc:6a:26:92:83:15:c1:d5:83:bc:54:8c:8e:69:
d2:dd:e9:ff:bd:60:2a:c9:e6:52:8a:e6:db:8b:92:b5:e5:15:
4d:75:39:32:32:67:cb:de:37:ca:b2:23:68:b2:f4:bd:5a:b5:
f1:f0:72:5f:d0:69:e4:c5:87:56:53:65:fa:97:ed:a5:20:66:
bb:38:62:5c:7e:29:3b:54:2f:aa:54:ec:82:bf:d3:c2:80:c4:
6c:70:c2:d7:ce:ba:b1:ea:8b:d9:ab:16:f0:c7:d1:ef:a1:ec:
e9:ae:e1:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 20:19:15 2025 by rpki-client