Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/1c0205-5c65-47cd-b1b3-27c26b23b845/1/V0AEDht6Uy3SrsIuk6YisuGzve8.mft
File: V0AEDht6Uy3SrsIuk6YisuGzve8.mft (raw, json)
Hash identifier: Xkxd23m2MRYPOo73gRFdXuHXpZjAiQP4jKOZy0qz9ZQ=
Subject key identifier: C0:1C:5E:11:96:D9:FA:2D:ED:1A:84:26:74:89:37:62:0D:27:6F:9C
Authority key identifier: 57:40:04:0E:1B:7A:53:2D:D2:AE:C2:2E:93:A6:22:B2:E1:B3:BD:EF
Certificate issuer: /CN=5740040e1b7a532dd2aec22e93a622b2e1b3bdef
Certificate serial: 0197B7EAA8C0E974360826A4072411083267
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V0AEDht6Uy3SrsIuk6YisuGzve8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/1c0205-5c65-47cd-b1b3-27c26b23b845/1/V0AEDht6Uy3SrsIuk6YisuGzve8.mft
Manifest number: 1547
Signing time: Sat 28 Jun 2025 19:01:38 +0000
Manifest this update: Sat 28 Jun 2025 19:01:38 +0000
Manifest next update: Sun 29 Jun 2025 19:01:38 +0000
Files and hashes: 1: V0AEDht6Uy3SrsIuk6YisuGzve8.crl (hash: 1SxyFwXs7bhAo3PDul1pL8PjRTbE1nygb8U4TeYxm+w=)
2: wjijn454ptb7YjSwbgYustwNzJI.roa (hash: q85TNLC9Fv889V7DCE+ssvZg83i29aUc5JCe0NjjzpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/1c0205-5c65-47cd-b1b3-27c26b23b845/1/V0AEDht6Uy3SrsIuk6YisuGzve8.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/1c0205-5c65-47cd-b1b3-27c26b23b845/1/V0AEDht6Uy3SrsIuk6YisuGzve8.mft
rsync://rpki.ripe.net/repository/DEFAULT/V0AEDht6Uy3SrsIuk6YisuGzve8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:a8:c0:e9:74:36:08:26:a4:07:24:11:08:32:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5740040e1b7a532dd2aec22e93a622b2e1b3bdef
Validity
Not Before: Jun 28 19:01:38 2025 GMT
Not After : Jun 29 19:01:38 2025 GMT
Subject: CN=c01c5e1196d9fa2ded1a8426748937620d276f9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:9a:4c:e9:72:d8:16:52:32:ac:e2:8d:d2:7f:
80:08:67:b6:36:0f:4d:e4:58:e4:7b:32:d7:d0:d7:
98:fc:8e:d3:d6:19:fb:e1:6d:bc:49:f6:16:d6:35:
86:fa:c2:61:83:67:1c:1f:b8:32:e8:86:e1:5f:55:
97:5b:a5:8f:c5:a8:b9:91:56:1e:5e:71:f9:e7:35:
89:60:12:55:81:2d:9e:ea:dd:68:ca:62:3f:c8:7b:
83:6c:fc:4a:5e:c2:c3:dd:6f:bd:a4:4f:30:3e:8f:
0a:77:47:9d:28:02:63:17:d8:a4:2b:63:54:a7:36:
36:0b:55:53:f5:5e:6a:10:bb:e9:37:ee:85:0b:e7:
4b:96:4b:61:9e:35:b1:03:b7:50:4f:03:d1:cb:25:
48:78:a3:7c:30:38:c5:55:84:b6:26:91:c9:aa:91:
24:43:06:58:c5:81:ce:b4:ed:58:cd:be:74:0a:29:
d4:1f:bc:66:9a:01:16:32:fb:08:bd:f1:7e:a3:3d:
8d:c8:cb:b1:82:9b:dc:7d:37:35:47:d9:37:ce:2c:
cd:3b:60:57:6e:dc:07:ec:f3:eb:1f:19:c5:ab:4c:
49:d5:ca:f9:4e:b0:39:14:f5:60:1f:73:9f:76:09:
b5:4e:5f:61:98:99:32:5e:d0:1c:be:00:23:bf:dc:
ff:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:1C:5E:11:96:D9:FA:2D:ED:1A:84:26:74:89:37:62:0D:27:6F:9C
X509v3 Authority Key Identifier:
keyid:57:40:04:0E:1B:7A:53:2D:D2:AE:C2:2E:93:A6:22:B2:E1:B3:BD:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0AEDht6Uy3SrsIuk6YisuGzve8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1c0205-5c65-47cd-b1b3-27c26b23b845/1/V0AEDht6Uy3SrsIuk6YisuGzve8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1c0205-5c65-47cd-b1b3-27c26b23b845/1/V0AEDht6Uy3SrsIuk6YisuGzve8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:20:dd:2a:2b:e3:d4:8d:6f:14:24:df:78:49:83:56:06:39:
bb:17:e4:65:e9:8a:b1:81:fe:c6:07:63:31:fd:dd:58:93:01:
de:d7:6a:f5:60:24:60:c8:56:e0:e7:49:6c:98:e7:c7:d7:57:
55:67:7d:fe:4e:f2:f0:df:40:47:ce:7d:ff:68:f3:c3:a5:bc:
10:de:3d:3b:24:ba:e8:0b:e8:0b:30:06:de:41:c6:f8:d7:ae:
d2:0d:9e:2b:53:d7:94:6c:f7:85:20:dc:f4:c8:f0:06:21:a3:
63:25:ca:5f:cf:ca:27:c7:4e:25:20:99:ef:12:2d:f8:0c:78:
fc:a1:4c:29:43:fb:67:03:ba:30:d7:c0:d5:31:09:f7:49:65:
5c:dd:fc:47:a6:18:f7:3a:f1:f4:b0:92:63:51:1f:23:be:fd:
6a:17:95:61:a3:60:3c:97:cc:91:21:9e:cd:a2:53:b7:6c:20:
4c:d2:28:91:35:be:81:63:59:ca:dd:19:c8:80:d3:23:32:c8:
0a:f1:f7:26:38:dc:fc:07:61:0c:97:23:af:d5:d3:40:af:e6:
45:c5:5e:11:fa:e0:c2:e8:23:29:31:33:b5:3b:9e:36:88:6f:
b2:3b:59:8a:1a:11:6a:36:09:08:ee:4a:76:22:42:5d:f1:6e:
1c:1f:51:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:33:46 2025 by rpki-client