Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/0e01de-cde3-447f-b5dc-036354a2c22f/1/RPVuzT9LHW6NZp6tDgM_2vC-T0A.mft
File: RPVuzT9LHW6NZp6tDgM_2vC-T0A.mft (raw, json)
Hash identifier: NiI0gGVquPCb1lRO7M8uUqhFIfohBWzWEh81F/Mg+nM=
Subject key identifier: CF:88:30:8F:09:89:6A:CF:63:39:57:D9:26:B3:42:40:71:E5:E5:23
Authority key identifier: 44:F5:6E:CD:3F:4B:1D:6E:8D:66:9E:AD:0E:03:3F:DA:F0:BE:4F:40
Certificate issuer: /CN=44f56ecd3f4b1d6e8d669ead0e033fdaf0be4f40
Certificate serial: 0197B5C51FB20282AC1EAE2BAD9055494282
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPVuzT9LHW6NZp6tDgM_2vC-T0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/0e01de-cde3-447f-b5dc-036354a2c22f/1/RPVuzT9LHW6NZp6tDgM_2vC-T0A.mft
Manifest number: 1120
Signing time: Sat 28 Jun 2025 09:01:24 +0000
Manifest this update: Sat 28 Jun 2025 09:01:24 +0000
Manifest next update: Sun 29 Jun 2025 09:01:24 +0000
Files and hashes: 1: Gnl9wgih5bkZTu9f-EBtmWB57aI.roa (hash: zbDguLxZjG7MAjNEZMNb7jOZjg/zzl6iQmvjqk6cIOM=)
2: RPVuzT9LHW6NZp6tDgM_2vC-T0A.crl (hash: H5s8LydZvk2AkDCDRQXev9C8j1oSBVA2he/ZTju3iEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/0e01de-cde3-447f-b5dc-036354a2c22f/1/RPVuzT9LHW6NZp6tDgM_2vC-T0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/0e01de-cde3-447f-b5dc-036354a2c22f/1/RPVuzT9LHW6NZp6tDgM_2vC-T0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/RPVuzT9LHW6NZp6tDgM_2vC-T0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c5:1f:b2:02:82:ac:1e:ae:2b:ad:90:55:49:42:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44f56ecd3f4b1d6e8d669ead0e033fdaf0be4f40
Validity
Not Before: Jun 28 09:01:24 2025 GMT
Not After : Jun 29 09:01:24 2025 GMT
Subject: CN=cf88308f09896acf633957d926b3424071e5e523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:85:bb:db:f6:2d:ef:dc:00:80:81:83:06:f3:
ff:5b:af:1d:5a:c5:8c:11:da:f9:3b:14:ee:c5:8c:
d9:46:e0:66:d9:60:d5:ed:21:f4:6c:7e:32:50:5e:
93:05:da:d6:63:8c:43:8d:b2:55:c3:eb:d1:58:c3:
c9:41:3b:7a:e0:ce:9b:e4:66:5a:8a:9a:42:20:36:
1c:d4:9e:54:93:86:c2:70:55:67:04:72:08:d8:ec:
48:52:e0:a5:e4:95:ae:72:18:97:50:f0:be:df:6c:
bc:9d:e4:c3:45:67:51:10:23:98:2a:5e:bb:ba:9f:
11:00:37:1a:a9:48:32:a4:28:6a:77:40:17:45:e3:
4a:76:dc:ad:1a:1b:82:04:e4:88:d4:c9:fc:87:46:
e3:80:85:9f:a6:a7:ad:72:e6:08:c5:bf:a9:d9:ad:
ff:c3:d4:ca:b3:79:89:44:26:26:f6:75:43:b9:66:
ae:27:fd:dc:7e:70:35:48:70:fe:41:68:bc:5d:11:
67:65:ea:a1:b0:91:05:7a:27:ed:47:74:bb:55:14:
7b:38:5d:70:ef:33:54:6d:ac:65:ed:ba:e2:51:b0:
01:bd:eb:7b:5f:dd:ca:9a:a6:e3:3a:78:05:a9:90:
ba:e5:1c:51:9a:90:db:56:ea:3a:45:7f:f3:2b:5d:
3d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:88:30:8F:09:89:6A:CF:63:39:57:D9:26:B3:42:40:71:E5:E5:23
X509v3 Authority Key Identifier:
keyid:44:F5:6E:CD:3F:4B:1D:6E:8D:66:9E:AD:0E:03:3F:DA:F0:BE:4F:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPVuzT9LHW6NZp6tDgM_2vC-T0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/0e01de-cde3-447f-b5dc-036354a2c22f/1/RPVuzT9LHW6NZp6tDgM_2vC-T0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/0e01de-cde3-447f-b5dc-036354a2c22f/1/RPVuzT9LHW6NZp6tDgM_2vC-T0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:34:3c:fa:4b:a8:40:c8:98:3a:fc:36:0e:5a:26:a1:23:82:
b4:ed:10:d8:44:07:38:a7:ed:92:b6:80:ab:bd:5d:b5:f3:de:
41:8f:63:4d:26:54:05:7a:53:c0:23:2c:50:46:be:00:00:7b:
19:d9:d5:f8:00:47:8c:51:34:8e:f2:be:e0:b9:33:55:21:7d:
8f:a0:ce:58:94:d4:b1:3d:b5:e7:28:d2:9c:ea:df:65:05:5a:
14:07:35:38:77:d5:b5:39:0d:5f:cf:c3:2c:99:40:4a:58:6b:
af:3e:ed:f3:f3:56:61:9a:f4:b7:2f:44:44:b0:6e:b1:17:db:
c1:75:32:a0:1f:1d:d9:0e:c4:3e:71:79:61:9f:7a:59:6a:e7:
a8:ea:22:f3:d7:c5:83:27:c6:b2:26:65:be:aa:85:dd:63:5a:
30:2a:57:46:8c:39:59:7d:0d:96:3f:3a:10:70:7f:c6:b0:3d:
e3:d2:23:cf:7d:db:56:46:7b:b8:45:4b:e5:f5:12:e3:d5:c7:
18:81:63:6b:55:0a:a7:d5:2e:42:6f:6f:ba:b2:82:d0:fd:36:
95:ac:2f:17:58:25:58:55:6f:ac:89:1a:17:c7:d1:b5:60:d3:
c6:56:6d:41:1c:98:68:ed:09:78:2a:ed:46:b9:81:41:3e:cb:
91:62:bf:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:31:34 2025 by rpki-client