Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/4d8207-e7cb-4232-8290-250bec9dcca1/1/V1j80i-3oR3qizfkw_YiqnpHue4.mft
File: V1j80i-3oR3qizfkw_YiqnpHue4.mft (raw, json)
Hash identifier: fGOe1SnN9/28J+oTtnT0rK1mKEuk8Mwn/3+ND66D5fs=
Subject key identifier: BD:12:83:A4:F0:C3:AE:02:DA:B2:00:B2:66:27:E2:F3:F2:44:7A:9F
Authority key identifier: 57:58:FC:D2:2F:B7:A1:1D:EA:8B:37:E4:C3:F6:22:AA:7A:47:B9:EE
Certificate issuer: /CN=5758fcd22fb7a11dea8b37e4c3f622aa7a47b9ee
Certificate serial: 0197B77C3EFF4BB407F28BD4AD013A2A702D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1j80i-3oR3qizfkw_YiqnpHue4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/4d8207-e7cb-4232-8290-250bec9dcca1/1/V1j80i-3oR3qizfkw_YiqnpHue4.mft
Manifest number: 12C3
Signing time: Sat 28 Jun 2025 17:01:02 +0000
Manifest this update: Sat 28 Jun 2025 17:01:02 +0000
Manifest next update: Sun 29 Jun 2025 17:01:02 +0000
Files and hashes: 1: 1cAFysoNqNIZH8FwmwvYqJt5bM4.roa (hash: ODKSC75jE0xq09vjpL4sB7ddbosHMLlBxEPWj0XoiqQ=)
2: V1j80i-3oR3qizfkw_YiqnpHue4.crl (hash: qZoqndOaCHxoNCB+5umpsxlpoYNp5zlORQ25BitngL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/4d8207-e7cb-4232-8290-250bec9dcca1/1/V1j80i-3oR3qizfkw_YiqnpHue4.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/4d8207-e7cb-4232-8290-250bec9dcca1/1/V1j80i-3oR3qizfkw_YiqnpHue4.mft
rsync://rpki.ripe.net/repository/DEFAULT/V1j80i-3oR3qizfkw_YiqnpHue4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:3e:ff:4b:b4:07:f2:8b:d4:ad:01:3a:2a:70:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5758fcd22fb7a11dea8b37e4c3f622aa7a47b9ee
Validity
Not Before: Jun 28 17:01:02 2025 GMT
Not After : Jun 29 17:01:02 2025 GMT
Subject: CN=bd1283a4f0c3ae02dab200b26627e2f3f2447a9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:79:40:2e:f6:d8:83:7e:b5:4e:70:2b:6c:d9:
2c:d6:3d:2b:1a:d1:2a:21:fc:57:d0:73:dc:ca:04:
4a:04:f9:ae:a5:9d:fe:47:97:cc:91:14:3c:b2:d3:
29:41:1f:78:8a:ef:15:ee:70:f5:ee:64:05:08:89:
f8:db:68:10:71:ca:61:c2:fe:55:c0:a5:3a:d0:ce:
c9:78:39:c4:13:79:05:b5:65:45:b7:34:7f:d5:9f:
dd:78:08:78:8c:64:2c:9a:6e:2f:41:39:c5:61:30:
79:9d:f6:ec:e2:59:db:e6:f4:5c:b4:44:2b:d4:ae:
1d:86:2b:2f:4e:c6:79:c2:97:9b:e3:3b:aa:31:f2:
4b:56:02:80:ec:f0:a6:5a:e1:d4:76:c1:d4:4c:a9:
a2:c3:28:ba:cb:9c:47:5c:c8:48:81:54:8d:27:83:
57:e0:b2:72:ed:4d:11:1d:1e:c7:fb:9a:f6:4f:f2:
d0:fc:41:b8:66:1b:3b:6c:f8:6b:63:32:56:73:2c:
f1:64:99:f8:88:ea:82:0b:3c:21:8d:97:02:fe:5f:
b8:e5:c8:2b:af:9e:ba:0b:05:5b:91:cd:c4:b5:6b:
78:f3:89:b8:1b:7e:c8:73:1f:a7:e5:98:aa:f6:06:
7f:b4:79:7c:46:23:f6:25:b9:2c:e9:52:d4:5e:02:
b6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:12:83:A4:F0:C3:AE:02:DA:B2:00:B2:66:27:E2:F3:F2:44:7A:9F
X509v3 Authority Key Identifier:
keyid:57:58:FC:D2:2F:B7:A1:1D:EA:8B:37:E4:C3:F6:22:AA:7A:47:B9:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1j80i-3oR3qizfkw_YiqnpHue4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4d8207-e7cb-4232-8290-250bec9dcca1/1/V1j80i-3oR3qizfkw_YiqnpHue4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4d8207-e7cb-4232-8290-250bec9dcca1/1/V1j80i-3oR3qizfkw_YiqnpHue4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:56:fe:f5:30:bd:29:be:54:81:c6:60:cd:b2:f7:6e:17:89:
08:b0:6e:02:04:b1:cb:7f:36:a4:8b:ac:c4:30:66:3a:9f:c9:
b2:4a:c4:ef:06:85:f5:09:15:32:54:a7:a5:a7:4c:fd:f7:48:
96:72:71:0f:ae:b6:4c:cc:c5:09:8b:dd:73:0e:47:0f:e5:ea:
cc:5a:40:71:05:13:48:9d:8a:30:7e:d2:bb:8b:64:71:c6:92:
10:85:29:36:95:58:3e:e9:54:fd:95:54:e9:20:96:9c:e1:6c:
92:c2:a6:a8:fd:68:6e:4b:cc:c8:97:86:f3:27:28:20:24:a0:
5c:71:bf:eb:ab:c4:07:66:ea:dd:02:61:d6:f7:60:ae:a0:49:
cc:72:07:13:8c:54:d2:a9:bd:30:bd:e1:6b:b2:73:75:49:af:
85:34:c3:6c:8e:7a:8e:66:1e:61:c7:3e:4e:25:16:34:7c:5f:
0e:ef:ac:a0:6f:d7:d8:0b:b8:a1:72:bd:88:00:82:44:60:61:
30:03:25:67:28:bb:ce:d2:c1:fd:63:63:a3:0c:d2:22:78:61:
c6:ea:4a:7e:ff:34:e4:35:8f:92:b7:aa:74:30:b0:b0:6d:be:
b9:69:4f:7f:8b:de:fc:d0:e7:23:7a:71:0b:08:2b:1f:73:1d:
34:78:f5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:57:35 2025 by rpki-client