Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.mft
File: V2si8nkFl0hL-WkVqDVDwZSz_R4.mft (raw, json)
Hash identifier: 27lzzagMy9UDmDWwEwvAgSSB58m/bpNsxmT5rC0Yi4w=
Subject key identifier: 2C:B8:BD:66:74:45:B7:33:6A:ED:6E:6A:AE:25:C2:C5:87:3E:B0:4A
Authority key identifier: 57:6B:22:F2:79:05:97:48:4B:F9:69:15:A8:35:43:C1:94:B3:FD:1E
Certificate issuer: /CN=576b22f2790597484bf96915a83543c194b3fd1e
Certificate serial: 0198D4E07B3453A3D9621C24F974F5D4F1A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V2si8nkFl0hL-WkVqDVDwZSz_R4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.mft
Manifest number: 058C
Signing time: Sat 23 Aug 2025 03:02:17 +0000
Manifest this update: Sat 23 Aug 2025 03:02:17 +0000
Manifest next update: Sun 24 Aug 2025 03:02:17 +0000
Files and hashes: 1: V2si8nkFl0hL-WkVqDVDwZSz_R4.crl (hash: eqbnF7KMfpjHaLoTZOlJ8srH7r62a2Bf+XS5NnxybmM=)
2: WnvN9eO0xROw8P2u2NunmIAmhFM.roa (hash: ICDMCpB80BuzlOdYTKVVB47BHhMFIG3MGwkKpb0Kjms=)
3: ga2NxvzjVumF5thvPvomOtqub-A.roa (hash: Fnu74FvZlaTUv1bGjbnayDCXm216CFcy4KRgAcWl9Rk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.mft
rsync://rpki.ripe.net/repository/DEFAULT/V2si8nkFl0hL-WkVqDVDwZSz_R4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:7b:34:53:a3:d9:62:1c:24:f9:74:f5:d4:f1:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=576b22f2790597484bf96915a83543c194b3fd1e
Validity
Not Before: Aug 23 03:02:17 2025 GMT
Not After : Aug 24 03:02:17 2025 GMT
Subject: CN=2cb8bd667445b7336aed6e6aae25c2c5873eb04a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a4:bb:81:e6:ca:e6:5b:f9:f8:e8:19:2b:d5:
86:f1:36:c7:44:92:21:a0:14:ba:e3:cf:76:a5:c0:
48:5a:e3:74:93:78:9b:e3:94:d9:db:d1:e6:5d:11:
96:20:e9:bd:38:96:e8:16:a0:ca:9a:36:b7:77:32:
33:25:48:f7:f0:fd:8f:91:6d:1c:6d:d0:23:ac:b7:
3f:4f:2f:d8:9e:87:91:26:b3:53:38:ca:78:04:b0:
2b:ea:72:1e:1c:01:9f:a2:46:5b:00:1b:03:37:b3:
79:48:69:41:71:58:34:39:2c:7c:3e:2b:bf:8c:a4:
93:14:22:eb:8f:38:df:10:14:a0:0d:67:fe:51:12:
65:3f:0e:5d:db:8a:17:e0:0e:27:11:d4:72:f4:f4:
28:fb:8c:41:6c:11:82:45:d2:71:7c:48:f0:9b:a1:
09:dd:23:af:c7:4f:29:fd:c1:02:2d:e7:1b:1f:88:
af:d2:f0:7c:c2:49:0c:b6:d7:71:de:ca:a9:ba:1e:
37:23:b0:57:ba:ee:bd:53:17:70:22:b8:ec:ea:3f:
11:a9:3c:e9:65:f2:8e:20:e0:17:39:6e:17:f4:5e:
d9:82:04:05:ee:65:d1:d8:38:c3:a7:93:bc:be:82:
f6:ff:58:23:91:58:bb:9b:a4:72:40:a2:ea:1e:87:
5b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B8:BD:66:74:45:B7:33:6A:ED:6E:6A:AE:25:C2:C5:87:3E:B0:4A
X509v3 Authority Key Identifier:
keyid:57:6B:22:F2:79:05:97:48:4B:F9:69:15:A8:35:43:C1:94:B3:FD:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V2si8nkFl0hL-WkVqDVDwZSz_R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:89:4b:0c:60:a5:3d:d7:34:fa:8d:15:af:e6:b7:54:9d:c8:
7a:26:e9:06:e9:2d:12:f7:fc:0d:ae:62:ed:1a:ee:93:2e:ff:
5a:d7:33:cc:0e:4a:f5:45:d4:61:9e:e1:86:33:92:d6:ad:da:
ed:86:d8:84:7b:08:aa:1f:c7:34:ba:20:e3:03:bc:35:fb:f5:
22:71:10:1d:eb:f5:55:dc:b2:a0:a7:ee:41:f6:6c:65:eb:99:
77:4e:73:92:e2:21:aa:73:4a:db:97:b0:a9:3c:6a:7b:9f:7f:
a5:8b:fc:ea:46:5b:7f:bb:28:6a:e0:fc:21:77:ad:d6:3d:de:
0a:f3:8c:b1:70:f1:1c:fa:77:74:7a:91:aa:dc:ce:54:9f:2d:
58:05:7d:e3:b6:c1:a2:36:23:2a:30:af:e6:93:6a:24:64:cf:
ce:9d:bb:36:34:85:3b:e2:61:b6:0a:dc:85:d5:cd:0e:2f:90:
c7:e4:0f:33:a0:3d:81:8a:7f:63:30:d3:76:b2:21:d3:0c:64:
a2:a6:06:28:1b:a8:c7:9c:ba:0c:78:74:e9:cd:71:97:9c:4e:
1b:43:82:f8:97:22:b9:e9:65:f1:68:19:9c:b7:98:09:e0:be:
99:ea:c2:af:99:6a:32:7f:da:53:02:48:c0:0a:db:e0:82:43:
da:03:65:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:10:08 2025 by rpki-client