Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.mft
File: V04loW5dOqEQrF6DNfiPY-VLQvE.mft (raw, json)
Hash identifier: AzoKt5p71zsvzll0PEXH9iW0hsmvo1u6/q3drjN4TUs=
Subject key identifier: B8:75:36:2B:D3:D6:FA:04:3C:13:24:35:62:4B:4F:81:98:B6:7C:02
Authority key identifier: 57:4E:25:A1:6E:5D:3A:A1:10:AC:5E:83:35:F8:8F:63:E5:4B:42:F1
Certificate issuer: /CN=574e25a16e5d3aa110ac5e8335f88f63e54b42f1
Certificate serial: 0197B6A23E2983070194F758E9341045CF87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V04loW5dOqEQrF6DNfiPY-VLQvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.mft
Manifest number: 15BB
Signing time: Sat 28 Jun 2025 13:02:55 +0000
Manifest this update: Sat 28 Jun 2025 13:02:55 +0000
Manifest next update: Sun 29 Jun 2025 13:02:55 +0000
Files and hashes: 1: 4gBDlHfraeJIeTYRGBqyZyvtae8.roa (hash: Qqj1EC36vQFgIkoRX33NjG4dXDa3mcsnpDKk5Y8xJEA=)
2: V04loW5dOqEQrF6DNfiPY-VLQvE.crl (hash: KOakHi6KDavV0Ym8vbgnHaBAGpDmFaAnj+LTYzJ8BOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/V04loW5dOqEQrF6DNfiPY-VLQvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:3e:29:83:07:01:94:f7:58:e9:34:10:45:cf:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=574e25a16e5d3aa110ac5e8335f88f63e54b42f1
Validity
Not Before: Jun 28 13:02:55 2025 GMT
Not After : Jun 29 13:02:55 2025 GMT
Subject: CN=b875362bd3d6fa043c132435624b4f8198b67c02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:21:c6:b4:96:65:a7:10:14:86:90:db:75:4a:
39:9c:49:c0:97:59:a7:e2:7d:53:95:04:26:5a:3b:
f6:bc:38:b1:8e:64:a7:92:20:33:06:bc:3a:75:88:
b0:81:8e:41:9b:07:fd:b0:ae:f8:ef:dc:51:85:f0:
09:4e:2c:0d:f2:70:e7:5a:58:78:27:e5:ec:ad:1b:
e2:39:5f:5d:ed:b1:1b:ca:7b:40:43:53:63:6c:17:
82:4d:1b:f5:67:66:cd:3e:da:e1:de:5f:c0:3b:36:
0f:e1:71:63:cb:dd:75:9c:14:80:b3:73:be:d3:82:
5a:f5:c1:52:2c:e4:1c:7c:a8:b0:6c:6c:c9:8b:b8:
9b:da:9f:34:68:d7:8c:e7:58:59:1b:e2:93:f0:3e:
1f:65:58:65:c4:3b:59:4a:00:44:c4:96:72:76:17:
c8:d4:11:1e:1b:aa:61:51:f1:8d:d8:71:11:80:d3:
fa:bc:31:5a:68:97:3b:74:5d:ac:d3:ff:c0:a5:24:
c4:eb:10:db:d5:b8:c4:ec:d7:30:cc:db:2c:3d:71:
42:4e:68:84:70:ae:5b:69:70:1b:90:8c:e2:d3:f8:
4a:77:d2:ce:58:de:96:c0:93:84:db:7a:04:bc:bb:
b9:d5:49:eb:7a:85:c6:a1:69:37:c9:31:f4:e3:be:
f7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:75:36:2B:D3:D6:FA:04:3C:13:24:35:62:4B:4F:81:98:B6:7C:02
X509v3 Authority Key Identifier:
keyid:57:4E:25:A1:6E:5D:3A:A1:10:AC:5E:83:35:F8:8F:63:E5:4B:42:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V04loW5dOqEQrF6DNfiPY-VLQvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:dc:98:3d:22:05:f7:80:3d:89:d1:1b:58:2a:f4:d6:27:59:
ce:1d:75:27:5d:af:ff:e6:02:34:a6:a7:07:92:3f:8d:84:ed:
30:de:96:3d:93:7b:52:59:a5:95:af:2e:a0:d7:90:90:34:ab:
75:a6:ae:5c:b8:bc:35:62:7a:05:bd:b5:1f:95:28:d1:95:d1:
d8:43:47:53:1d:a1:a6:1c:3e:22:af:02:10:fe:1a:ea:b6:11:
ac:02:b5:14:a4:f4:3a:4a:81:12:c6:2d:ce:b3:0a:88:93:1d:
cb:a0:d2:90:56:ad:60:f4:47:57:ee:27:3b:a4:bc:fc:89:83:
fe:f3:41:8f:3c:bf:29:6a:4a:eb:ae:49:02:20:9d:69:3e:87:
2a:54:3a:69:b5:74:d3:f7:8f:cc:be:87:de:12:a9:7c:77:7c:
5f:fb:87:4b:0b:6e:e3:37:6f:c8:54:2a:90:a0:95:f3:0e:6f:
ff:a5:f7:a0:a9:c8:0f:5f:75:b3:47:01:26:08:bb:5a:aa:8b:
6e:b2:a6:37:c1:33:e6:44:66:d0:0e:aa:80:2e:d7:e1:3c:e9:
b2:ac:6e:96:d9:3b:7e:39:b9:43:d4:d1:27:e0:2b:1b:fa:d0:
c6:77:c3:e6:96:4b:07:66:50:0e:00:ac:00:8d:3b:75:33:bf:
b9:10:c8:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:28:45 2025 by rpki-client