Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft
File: v-NULdY_7SUN5ctl9uykh-f0eEc.mft (raw, json)
Hash identifier: ed8/hbwL18X/c31fhxxYHWaIVcieqeFkvebfjN+Vv98=
Subject key identifier: 07:5A:1C:CF:06:07:F9:51:4C:CD:DE:DB:6E:EA:5B:E9:2A:C7:93:1F
Authority key identifier: BF:E3:54:2D:D6:3F:ED:25:0D:E5:CB:65:F6:EC:A4:87:E7:F4:78:47
Certificate issuer: /CN=bfe3542dd63fed250de5cb65f6eca487e7f47847
Certificate serial: 0197B7458851A71214952176AAD081095ED0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-NULdY_7SUN5ctl9uykh-f0eEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 16:01:16 +0000
Manifest this update: Sat 28 Jun 2025 16:01:16 +0000
Manifest next update: Sun 29 Jun 2025 16:01:16 +0000
Files and hashes: 1: 7_ycmg0-2tzp7CIdo8gplL9a278.roa (hash: XEoDI5Kr97fRLNGyRswSpfdzIPuYNKJgNWwTLw/sOpg=)
2: u42E-rWAmQgBLYpngQke_W6nUiE.roa (hash: skcKb420yoQzvUX8+CNyJl60MwIyb91kXhUGkdXKV9A=)
3: v-NULdY_7SUN5ctl9uykh-f0eEc.crl (hash: fxkkyyfJb+rf9rNt41+hM20K7GIGbent7oCqo9C+acQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/v-NULdY_7SUN5ctl9uykh-f0eEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:88:51:a7:12:14:95:21:76:aa:d0:81:09:5e:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfe3542dd63fed250de5cb65f6eca487e7f47847
Validity
Not Before: Jun 28 16:01:16 2025 GMT
Not After : Jun 29 16:01:16 2025 GMT
Subject: CN=075a1ccf0607f9514ccddedb6eea5be92ac7931f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:89:6f:c0:52:f0:14:f6:1a:bd:18:dd:5d:64:
11:47:a7:88:7a:a7:72:2d:1c:66:d3:0a:53:79:3d:
6f:46:d0:d3:69:1f:2b:50:de:3e:57:28:bf:14:a2:
9c:ed:08:7c:99:e8:61:4c:9f:c8:c8:24:5b:29:8d:
8e:7e:71:c4:9e:db:c8:21:96:44:4f:3c:de:36:04:
f4:30:9a:c2:e2:6b:ad:75:bd:e6:9a:b4:e1:a3:17:
3d:f0:d1:10:f6:82:3b:53:97:7c:ee:a5:23:24:24:
bb:a7:0c:53:29:4b:e2:1b:1a:cc:bc:ce:d0:43:c7:
1d:d1:75:33:6f:5e:88:0c:bc:03:eb:c4:90:a3:5c:
a7:bd:83:6b:2d:cf:90:75:ac:ac:42:cb:4e:4f:17:
b7:b5:40:23:74:3e:b3:7a:db:57:1f:25:19:40:71:
94:6d:7f:2d:59:48:48:c7:fc:22:6d:b2:71:2e:ae:
37:33:5c:82:4e:8a:c7:9d:1b:0b:30:fe:f0:9f:a3:
9b:3c:5a:8f:49:db:dd:91:0b:cb:7a:b4:d9:29:ab:
45:52:23:fa:70:3f:e2:e5:dd:42:de:b6:bd:9e:f5:
39:3e:c2:36:ab:76:b6:7a:43:c6:2e:64:27:9d:13:
ce:a3:bf:f8:4d:17:70:4c:11:ce:64:cf:2b:32:17:
bc:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:5A:1C:CF:06:07:F9:51:4C:CD:DE:DB:6E:EA:5B:E9:2A:C7:93:1F
X509v3 Authority Key Identifier:
keyid:BF:E3:54:2D:D6:3F:ED:25:0D:E5:CB:65:F6:EC:A4:87:E7:F4:78:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-NULdY_7SUN5ctl9uykh-f0eEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:3d:af:65:f8:0e:fe:ab:0c:d2:1a:d2:9b:ce:98:55:cc:e4:
6f:08:ac:c4:b8:65:c4:1f:49:69:61:a5:ba:17:2e:b5:1e:5d:
ae:1b:92:66:7d:9a:aa:dc:ae:79:1a:39:7b:96:12:e5:a3:5e:
89:8b:c0:cc:e3:ad:00:9b:5a:98:df:a5:59:fb:67:b1:99:22:
ef:17:52:42:29:64:9c:4b:72:cc:0b:b0:a3:d9:e5:bb:d3:9e:
e1:b2:ce:65:0d:80:65:a0:54:01:57:c4:b3:bb:a2:4c:f3:2c:
aa:75:e4:47:7a:91:88:ed:19:54:c0:c3:8a:dc:e0:8c:9f:47:
73:1f:ef:b1:bc:81:13:d9:55:55:ce:63:b8:9c:4b:1b:ba:9f:
9e:8b:0c:0f:9a:2c:6b:ca:df:27:cf:3e:6a:01:54:1d:32:93:
41:ec:3d:90:78:f9:40:09:61:00:83:2d:31:0b:49:19:ea:24:
38:c3:d9:99:aa:61:b1:38:29:40:5d:8c:b0:ee:42:56:55:06:
27:31:3e:64:e9:95:a2:8b:08:81:e4:59:0b:09:a6:9c:e6:b9:
b6:4e:8b:41:10:b0:86:9e:1c:26:18:1a:3b:5b:0a:09:b4:a5:
bd:d5:ce:99:e8:8a:24:ce:72:e1:f5:3f:bf:d0:14:f7:2c:05:
04:05:ec:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:00:28 2025 by rpki-client