Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
File: V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft (raw, json)
Hash identifier: +tS5vjMj8+F6fI4ovKPHbUSw8tKjIkMDpbsMNgGrQTQ=
Subject key identifier: E5:FD:CF:C5:87:C5:C3:70:AB:FD:27:74:B7:F5:D6:47:A7:6A:19:1B
Authority key identifier: 57:8D:85:4B:D2:BE:E2:42:A8:2F:B8:39:22:D1:49:BC:CF:19:ED:02
Certificate issuer: /CN=578d854bd2bee242a82fb83922d149bccf19ed02
Certificate serial: 0197B7B3028CD38087AF044B495FFB7C058F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V42FS9K-4kKoL7g5ItFJvM8Z7QI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
Manifest number: 15BA
Signing time: Sat 28 Jun 2025 18:00:51 +0000
Manifest this update: Sat 28 Jun 2025 18:00:51 +0000
Manifest next update: Sun 29 Jun 2025 18:00:51 +0000
Files and hashes: 1: NhjTM3dOPnMsLQ7ebQq_0aK61EU.roa (hash: pDZlPFnX9elEIPNsw2D7ajm33IBeKqhaDpBvumlLRQw=)
2: O9m05o_UDIKemPeCfI7Sc16B69Y.roa (hash: yXqGk5sjcirZhyM4OHBNZEpEXcAXLb0N0cHRwAFg1zo=)
3: V42FS9K-4kKoL7g5ItFJvM8Z7QI.crl (hash: FPQXJxFM1MD2qJDL8ENmt84XVGu4+VPtg8D7Z7/ThZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
rsync://rpki.ripe.net/repository/DEFAULT/V42FS9K-4kKoL7g5ItFJvM8Z7QI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:02:8c:d3:80:87:af:04:4b:49:5f:fb:7c:05:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=578d854bd2bee242a82fb83922d149bccf19ed02
Validity
Not Before: Jun 28 18:00:51 2025 GMT
Not After : Jun 29 18:00:51 2025 GMT
Subject: CN=e5fdcfc587c5c370abfd2774b7f5d647a76a191b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1c:ad:4a:73:b7:97:b4:41:b2:ed:0a:bf:73:
83:ec:d9:b1:d5:d0:41:d3:5e:3a:d7:a7:dd:d5:32:
e6:ba:c2:13:1f:be:f5:cf:8c:2f:5b:8f:2f:10:e6:
24:66:d1:a8:9f:45:a1:df:fb:5d:86:96:72:15:1c:
f7:87:7f:72:43:80:c4:3d:e2:ce:42:c5:75:31:40:
24:55:38:90:be:6f:d2:f7:b4:f0:9a:e9:b5:d0:d5:
cb:55:01:d8:1e:09:49:16:df:06:3d:73:86:43:d8:
9e:f5:49:65:7d:fc:61:a8:c8:bc:1a:5f:14:ce:40:
d3:d6:50:20:29:71:50:97:f0:84:77:77:cf:35:e6:
74:5c:97:89:d3:aa:da:43:68:aa:2f:2a:0e:d4:e9:
f9:46:36:e7:24:7f:b5:eb:cd:ae:90:f9:22:41:7c:
ea:55:bc:37:03:a2:d4:12:7c:79:23:5d:65:95:4d:
1c:f7:69:97:da:a5:6e:df:eb:ab:a7:61:15:c3:ee:
84:e3:6d:e3:aa:d3:95:bd:ff:71:94:a2:70:b8:9d:
95:db:4b:40:76:ad:85:f1:e1:ac:8e:6a:3d:f3:d1:
54:17:79:b0:1f:c0:f5:1a:ce:79:94:ea:c9:91:ea:
06:9e:77:d1:5a:31:18:cf:c9:02:4a:15:d0:d4:a5:
03:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:FD:CF:C5:87:C5:C3:70:AB:FD:27:74:B7:F5:D6:47:A7:6A:19:1B
X509v3 Authority Key Identifier:
keyid:57:8D:85:4B:D2:BE:E2:42:A8:2F:B8:39:22:D1:49:BC:CF:19:ED:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V42FS9K-4kKoL7g5ItFJvM8Z7QI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:22:b5:b0:0e:f4:5b:69:55:b9:73:8f:63:84:f2:12:c2:41:
a5:84:cb:9f:d7:8e:32:c2:59:29:37:7e:bb:1c:13:c6:e1:b0:
18:2d:f0:0e:29:eb:4d:4e:57:6b:a3:f4:2c:58:10:8e:33:d5:
ee:6d:55:93:ab:19:86:d4:54:63:69:54:30:3f:5f:ae:cc:30:
05:2c:9d:6a:39:22:64:99:9a:c4:5b:19:d2:1f:4d:f8:da:3f:
5a:af:a3:fe:42:bf:fc:b9:c3:0a:9e:c6:6f:c7:59:19:b5:52:
b9:50:52:d8:30:be:b9:40:d3:44:18:ec:e6:05:c5:d5:da:6d:
a2:53:01:ad:66:28:5a:50:b7:cf:5d:d2:95:5c:47:73:d7:d5:
7d:2d:fa:3c:0b:54:4b:0d:f2:93:6d:48:75:b1:60:c6:c7:af:
56:a2:49:1b:76:fd:00:f8:c2:e1:65:ca:a6:bb:99:13:43:e4:
2a:44:fb:92:6f:7c:99:a1:99:ab:03:67:2d:23:2f:69:93:61:
b8:cd:dc:c2:2f:46:2e:98:80:83:f4:95:08:25:a8:3f:7a:e8:
38:84:dd:72:a9:e2:b6:a6:64:64:bd:af:9c:61:e8:e5:cd:3a:
af:0d:82:df:36:87:c2:d0:1e:b9:77:72:06:ed:a7:1b:e3:47:
38:45:e8:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:33:51 2025 by rpki-client