
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/083198-49a7-4864-a46d-6375e1645604/1/V7ifXMeCGeoSc_n1PFueM7xdvrU.mft
File: V7ifXMeCGeoSc_n1PFueM7xdvrU.mft (raw, json)
Hash identifier: edgjshwuqHCvemmPlb53kZ7uYoqC+7KM7UR83mNDHUM=
Subject key identifier: B0:34:B0:A3:E2:EA:9F:8B:51:F6:58:35:80:25:2A:AD:7F:98:05:ED
Authority key identifier: 57:B8:9F:5C:C7:82:19:EA:12:73:F9:F5:3C:5B:9E:33:BC:5D:BE:B5
Certificate issuer: /CN=57b89f5cc78219ea1273f9f53c5b9e33bc5dbeb5
Certificate serial: 0197B6A1A95C8E6569EA3F2862ECD81E96B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V7ifXMeCGeoSc_n1PFueM7xdvrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/083198-49a7-4864-a46d-6375e1645604/1/V7ifXMeCGeoSc_n1PFueM7xdvrU.mft
Manifest number: 057D
Signing time: Sat 28 Jun 2025 13:02:17 +0000
Manifest this update: Sat 28 Jun 2025 13:02:17 +0000
Manifest next update: Sun 29 Jun 2025 13:02:17 +0000
Files and hashes: 1: 2XZNJdR9Iep0Ywseo8-8iJMB8Tg.roa (hash: 7pIfh2Q654qMx1AmZFUCn+BOOHgc4UU06A+k+bghDdg=)
2: RRZa9Q054kEMSroT3AuPzC585XQ.roa (hash: 7iVMMtB+9zg3QA2J8+DzasUBkyEpZ63pEDBVLFDl2DE=)
3: V7ifXMeCGeoSc_n1PFueM7xdvrU.crl (hash: TLuMFGEEUIjMszCCFDCVQ2xKVWjmMzE6kOpH/5TyIG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/083198-49a7-4864-a46d-6375e1645604/1/V7ifXMeCGeoSc_n1PFueM7xdvrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/083198-49a7-4864-a46d-6375e1645604/1/V7ifXMeCGeoSc_n1PFueM7xdvrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/V7ifXMeCGeoSc_n1PFueM7xdvrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:a9:5c:8e:65:69:ea:3f:28:62:ec:d8:1e:96:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57b89f5cc78219ea1273f9f53c5b9e33bc5dbeb5
Validity
Not Before: Jun 28 13:02:17 2025 GMT
Not After : Jun 29 13:02:17 2025 GMT
Subject: CN=b034b0a3e2ea9f8b51f6583580252aad7f9805ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:97:23:8a:84:68:ae:c0:97:4c:46:e6:92:a6:
e1:9b:eb:c1:1c:60:21:5e:7e:7c:37:56:8b:7d:c0:
4b:32:dd:51:1c:4f:55:e8:12:c6:97:7b:7c:6e:f4:
43:a6:3b:22:40:2c:9d:86:c2:1b:8b:fa:54:1e:bc:
23:46:f5:ba:c3:0f:7a:f5:ae:65:9c:49:0c:f8:49:
4b:6f:ce:48:76:39:07:43:aa:78:e1:27:ca:f0:8d:
2b:ac:6a:3c:12:e3:ca:d8:76:87:3c:81:ab:36:01:
1b:3a:53:16:96:9a:2f:1b:88:7f:06:75:75:22:7c:
0e:fd:14:8d:57:d5:19:02:99:7a:bc:c2:2c:33:25:
1b:56:78:77:d8:fc:6e:47:1f:49:28:35:14:cf:d1:
f0:62:ad:60:4a:b9:1c:4d:31:97:af:a4:19:45:8d:
05:87:4d:1d:2a:2d:8c:b7:fb:32:f6:fa:fd:e4:ff:
ed:ee:ad:23:62:bd:42:64:8d:e2:1d:67:95:2e:48:
e1:d4:c5:ed:ff:ea:cc:17:45:64:4d:91:d9:26:5f:
3e:8f:d3:c9:ad:5d:37:77:d1:9a:fd:b5:44:77:9f:
69:63:e6:13:bf:60:71:d5:3a:3a:f7:8b:58:c7:f4:
47:2c:f4:cc:78:37:bb:ed:1d:51:33:d8:0c:03:4f:
9c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:34:B0:A3:E2:EA:9F:8B:51:F6:58:35:80:25:2A:AD:7F:98:05:ED
X509v3 Authority Key Identifier:
keyid:57:B8:9F:5C:C7:82:19:EA:12:73:F9:F5:3C:5B:9E:33:BC:5D:BE:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7ifXMeCGeoSc_n1PFueM7xdvrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/083198-49a7-4864-a46d-6375e1645604/1/V7ifXMeCGeoSc_n1PFueM7xdvrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/083198-49a7-4864-a46d-6375e1645604/1/V7ifXMeCGeoSc_n1PFueM7xdvrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:ae:22:ca:26:b0:9d:f8:83:67:ed:a6:8a:57:a9:ca:d9:44:
0a:f4:55:71:6b:20:93:dd:4d:4f:ef:76:83:8c:db:d7:1e:a3:
30:d4:b5:02:f4:cb:70:a7:fe:35:6d:52:89:c3:c2:68:35:31:
bd:d9:55:5d:fc:75:45:f6:ee:b5:e3:74:d0:25:d3:cf:36:ba:
6f:88:0a:35:ea:63:5b:1f:a0:53:50:0c:46:d5:14:0c:9c:e5:
c9:f7:1f:4e:a2:82:72:4e:42:15:61:54:55:3a:dc:9a:ae:9a:
4c:71:e4:c5:b7:e7:fc:fd:94:e4:3e:a4:d0:18:5e:80:d8:50:
ba:78:33:b8:c2:8a:71:45:bc:a4:b3:5b:54:5d:ac:67:46:45:
9b:6d:df:89:23:67:84:a4:02:96:a3:e1:15:81:c9:5d:b4:86:
60:27:21:91:1d:d8:d8:07:10:25:fe:31:e5:0e:b5:18:a8:d4:
46:2b:3b:ac:b9:bb:54:f1:dc:a2:a8:47:a4:b1:3f:0a:82:91:
94:29:c2:f9:f0:5a:22:9e:37:56:79:c0:49:38:d5:05:5c:f2:
1e:86:ad:9c:35:85:5b:11:bb:3a:9e:14:8c:ec:a0:f8:16:7b:
58:49:d3:5f:f5:e7:b4:d1:16:71:0f:a0:68:3d:f9:f9:3a:92:
e4:10:f4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:43:14 2025 by rpki-client