Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/afa1ee-8d80-4d5a-a739-c612a70abb42/1/V4BBFS34D25TE0JmPdADEJkFCE8.mft
File: V4BBFS34D25TE0JmPdADEJkFCE8.mft (raw, json)
Hash identifier: a/f4/AoIUZKwEJWWYWeAr8hA8RASiPPrZpWJIqF5FXw=
Subject key identifier: A0:D9:A3:92:2C:2F:19:F3:3D:86:C7:44:F9:B1:DD:F1:AD:70:61:5F
Authority key identifier: 57:80:41:15:2D:F8:0F:6E:53:13:42:66:3D:D0:03:10:99:05:08:4F
Certificate issuer: /CN=578041152df80f6e531342663dd003109905084f
Certificate serial: 0197B6D7B210FF235B358307033F3667D11E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V4BBFS34D25TE0JmPdADEJkFCE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/afa1ee-8d80-4d5a-a739-c612a70abb42/1/V4BBFS34D25TE0JmPdADEJkFCE8.mft
Manifest number: 07D7
Signing time: Sat 28 Jun 2025 14:01:18 +0000
Manifest this update: Sat 28 Jun 2025 14:01:18 +0000
Manifest next update: Sun 29 Jun 2025 14:01:18 +0000
Files and hashes: 1: RQstJ5Hzf4lSSJD1OevGZxAEWkw.roa (hash: DKmpWhYiScUgITQkVLFk78lbIWZwU/oZxtOXJ3y76t0=)
2: V4BBFS34D25TE0JmPdADEJkFCE8.crl (hash: eG7GgxWZYIMjQ/T9RYQEE9Lp6zuldmnEIL6zwWNsZlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/afa1ee-8d80-4d5a-a739-c612a70abb42/1/V4BBFS34D25TE0JmPdADEJkFCE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/afa1ee-8d80-4d5a-a739-c612a70abb42/1/V4BBFS34D25TE0JmPdADEJkFCE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/V4BBFS34D25TE0JmPdADEJkFCE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:b2:10:ff:23:5b:35:83:07:03:3f:36:67:d1:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=578041152df80f6e531342663dd003109905084f
Validity
Not Before: Jun 28 14:01:18 2025 GMT
Not After : Jun 29 14:01:18 2025 GMT
Subject: CN=a0d9a3922c2f19f33d86c744f9b1ddf1ad70615f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:56:25:a9:ee:a1:59:64:a5:18:70:2c:1e:aa:
38:f4:8d:52:47:79:a7:7f:eb:63:81:41:c2:2c:8d:
6b:8f:00:2c:81:d2:f4:ff:71:fa:f6:e5:dd:70:67:
3e:e3:c8:04:31:4a:37:64:4d:36:b3:93:a4:35:4c:
a5:c1:ea:28:70:39:6e:0d:11:d5:84:88:d2:d4:be:
a7:05:4b:d5:e4:99:49:8f:e4:93:bf:c0:24:14:38:
13:b1:40:e9:93:ae:d6:3e:65:69:be:b1:ba:06:08:
9c:d6:cf:cc:f9:e0:3b:ff:ac:c7:2e:8c:43:82:2a:
3b:48:d5:ab:ce:51:b9:4f:cb:ff:de:b5:30:ce:23:
88:4d:06:f9:94:7c:8c:b1:a0:6b:52:90:a1:d4:b9:
99:93:d3:9d:7f:95:7b:a7:2e:71:18:1b:0a:23:34:
e4:35:08:7c:11:3e:78:c6:2c:cf:68:9e:54:d0:24:
42:91:31:c0:8f:f3:2a:de:a8:92:28:9f:94:e4:ad:
d2:3b:d8:a1:86:11:79:4c:c1:17:6b:f3:9b:95:ca:
4c:2d:38:a3:30:6e:63:0f:70:b4:7f:25:4c:45:1f:
15:7a:3d:d1:bd:69:66:66:cf:2d:cd:f6:6b:5e:4a:
29:b5:34:fb:f6:c9:6b:a8:08:dc:1a:a6:93:e9:23:
fd:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:D9:A3:92:2C:2F:19:F3:3D:86:C7:44:F9:B1:DD:F1:AD:70:61:5F
X509v3 Authority Key Identifier:
keyid:57:80:41:15:2D:F8:0F:6E:53:13:42:66:3D:D0:03:10:99:05:08:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V4BBFS34D25TE0JmPdADEJkFCE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/afa1ee-8d80-4d5a-a739-c612a70abb42/1/V4BBFS34D25TE0JmPdADEJkFCE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/afa1ee-8d80-4d5a-a739-c612a70abb42/1/V4BBFS34D25TE0JmPdADEJkFCE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:6a:0a:cb:4b:47:6e:49:44:ce:15:f2:cb:a7:4f:d7:78:6d:
da:35:fe:6b:5f:d2:a3:14:8f:f6:36:04:bf:af:a4:40:3e:bf:
39:90:38:c2:8f:04:eb:5e:f9:62:5f:5e:a3:67:1b:79:04:2b:
e9:d5:9c:03:3c:36:cb:45:b3:75:85:7a:a7:f7:52:7a:65:d0:
7e:e9:f8:13:da:55:2b:d7:68:f1:1a:b7:e3:53:d3:23:49:56:
c3:de:33:cd:43:39:99:1f:44:1a:bf:92:7b:ad:0a:5f:7f:91:
ac:04:46:73:d8:7f:43:cb:c6:74:a4:02:1b:97:c5:f5:35:7a:
bb:6a:8a:6d:a0:53:2e:4d:36:4b:cb:3e:8f:cd:78:a7:23:f0:
69:ba:5f:7c:fd:15:fc:a5:b1:b3:36:df:4c:46:79:1a:92:af:
08:2b:94:af:e4:f5:19:92:dc:67:ca:d6:1f:ed:de:f2:fc:30:
71:25:a4:a5:9b:14:06:39:0b:92:9e:ab:a6:cb:b3:f7:1a:37:
08:40:2b:77:50:89:39:9d:7d:1e:7c:ad:82:b5:1a:91:ed:a4:
b0:d3:b7:e4:98:c9:37:3d:32:14:a2:1e:c8:53:ab:ef:e3:68:
76:9a:80:83:54:68:29:8b:1a:e2:8b:cb:f4:e4:88:1e:c0:f3:
a4:d1:32:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:42:22 2025 by rpki-client