Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7f6f96-664c-4c61-bd25-0974f09879a9/1/v40IHJb6fQ_CqdMq7dUMI6YcbxE.mft
File: v40IHJb6fQ_CqdMq7dUMI6YcbxE.mft (raw, json)
Hash identifier: VMKHYLBoybRmGFjEGMzBSef7Fj5HtHGTIoSKu7M9czU=
Subject key identifier: 9A:3E:25:E3:0D:B1:00:44:58:25:A9:E5:12:A4:52:04:C3:A8:06:A5
Authority key identifier: BF:8D:08:1C:96:FA:7D:0F:C2:A9:D3:2A:ED:D5:0C:23:A6:1C:6F:11
Certificate issuer: /CN=bf8d081c96fa7d0fc2a9d32aedd50c23a61c6f11
Certificate serial: 0197C56EDE5F55568051016E304022426223
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v40IHJb6fQ_CqdMq7dUMI6YcbxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7f6f96-664c-4c61-bd25-0974f09879a9/1/v40IHJb6fQ_CqdMq7dUMI6YcbxE.mft
Manifest number: 02AF
Signing time: Tue 01 Jul 2025 10:01:06 +0000
Manifest this update: Tue 01 Jul 2025 10:01:06 +0000
Manifest next update: Wed 02 Jul 2025 10:01:06 +0000
Files and hashes: 1: cyjfAn3tv8ZWD2QqdZEtx3LldGg.roa (hash: dQNTgxKb8PiIdXk5ccOTcLzQhMEZp5vC8gyDHDhC7Ow=)
2: v40IHJb6fQ_CqdMq7dUMI6YcbxE.crl (hash: 5Vylv2z80l9eYHS7p02YURt09Nb3tPl8BF0rbBY3teM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7f6f96-664c-4c61-bd25-0974f09879a9/1/v40IHJb6fQ_CqdMq7dUMI6YcbxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/7f6f96-664c-4c61-bd25-0974f09879a9/1/v40IHJb6fQ_CqdMq7dUMI6YcbxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/v40IHJb6fQ_CqdMq7dUMI6YcbxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 10:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:6e:de:5f:55:56:80:51:01:6e:30:40:22:42:62:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf8d081c96fa7d0fc2a9d32aedd50c23a61c6f11
Validity
Not Before: Jul 1 10:01:06 2025 GMT
Not After : Jul 2 10:01:06 2025 GMT
Subject: CN=9a3e25e30db100445825a9e512a45204c3a806a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f1:40:fa:7c:b0:86:1e:b5:a6:ef:42:b0:31:
4b:80:8c:f8:d8:ad:c7:4c:16:81:13:1b:7b:17:28:
ba:8f:83:37:19:8f:e1:40:bf:39:83:14:45:f1:dd:
10:53:b6:e3:e9:5c:1b:84:09:e8:e1:a2:f8:53:8d:
f6:01:e7:0f:24:ef:21:ec:2e:4f:3a:60:41:94:e0:
df:da:6b:cf:a8:55:42:af:1b:0b:91:14:97:6a:7b:
b4:b7:50:98:0b:ca:4c:01:2d:5e:8f:98:87:83:eb:
29:90:e1:37:c9:1c:8e:fe:8e:6f:77:ce:08:e5:fc:
93:28:49:63:c0:c6:c3:fe:94:e7:9b:b7:8f:40:de:
23:32:d0:0a:17:13:35:89:2e:10:58:f8:89:89:28:
1b:61:68:eb:a8:4b:d7:ac:d8:ef:2a:8b:cc:90:51:
80:dd:02:25:54:cb:77:47:11:da:7e:77:a6:66:f0:
80:f0:7b:32:33:09:20:6d:45:ad:a9:22:db:bf:38:
2a:49:54:cd:78:ae:b1:f7:6a:79:05:32:62:65:5b:
25:e4:52:11:2f:b0:6b:9e:01:f7:1f:5b:b4:80:b6:
1a:b1:a3:83:73:1f:95:2c:fb:8e:64:8f:bc:b2:ae:
67:5d:0b:78:4f:4e:ac:2c:c2:6a:7a:ec:43:a2:0a:
d1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:3E:25:E3:0D:B1:00:44:58:25:A9:E5:12:A4:52:04:C3:A8:06:A5
X509v3 Authority Key Identifier:
keyid:BF:8D:08:1C:96:FA:7D:0F:C2:A9:D3:2A:ED:D5:0C:23:A6:1C:6F:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v40IHJb6fQ_CqdMq7dUMI6YcbxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7f6f96-664c-4c61-bd25-0974f09879a9/1/v40IHJb6fQ_CqdMq7dUMI6YcbxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7f6f96-664c-4c61-bd25-0974f09879a9/1/v40IHJb6fQ_CqdMq7dUMI6YcbxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:1c:6a:1c:36:e1:6c:89:50:af:c3:8f:25:b5:99:a8:16:24:
7c:d5:87:70:5e:b1:29:1c:85:16:57:cf:46:8e:d7:56:6e:c8:
41:8b:28:c5:e5:ed:ff:ed:69:05:10:7c:76:e3:53:13:b7:6e:
55:5c:13:99:86:5f:69:c0:6a:ca:27:0c:61:b8:0c:2e:f8:ef:
aa:b1:48:30:d6:30:d0:cb:af:f5:3c:c8:0c:6d:03:93:5d:c5:
5d:52:df:b8:fb:a7:11:ab:bb:28:07:9a:15:0d:0c:bb:5a:88:
4c:5f:2d:f9:6c:96:c8:6d:c9:7b:ef:e6:0c:a6:09:26:97:1b:
68:b7:d2:55:20:fd:6e:cb:ce:53:4c:2c:f0:ab:9d:17:d0:a7:
65:49:d1:39:1d:8b:68:70:18:09:15:89:36:d5:b1:9a:6d:8c:
16:76:32:f3:32:ca:d9:28:33:12:d4:ee:00:e2:5a:ba:e7:a0:
8c:d9:2c:03:d6:5d:96:17:2e:53:4f:ba:3e:79:5f:c0:74:0c:
a7:c4:fd:03:52:1a:63:3a:b1:ae:c2:d8:bb:3e:74:f5:b7:61:
a2:6f:dd:ed:fd:d5:70:78:dc:61:dc:ab:38:7e:4e:7a:fc:0c:
30:33:30:e4:01:e6:62:83:4c:d0:7b:51:6a:0f:37:55:24:fa:
53:36:81:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:05:10 2025 by rpki-client