Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.mft
File: V0zKiZ71v0I38Pa90XeSIbIAUvM.mft (raw, json)
Hash identifier: nYq69EIwXxJfSRxC3sAdD0OHouBBy/UHpyLeHzrv11Y=
Subject key identifier: 42:17:11:3B:22:19:51:D6:3B:8D:54:2D:22:28:36:41:23:40:C6:3A
Authority key identifier: 57:4C:CA:89:9E:F5:BF:42:37:F0:F6:BD:D1:77:92:21:B2:00:52:F3
Certificate issuer: /CN=574cca899ef5bf4237f0f6bdd1779221b20052f3
Certificate serial: 0197B74524405AC295A7311B99B7EEA812B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V0zKiZ71v0I38Pa90XeSIbIAUvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.mft
Manifest number: 15BB
Signing time: Sat 28 Jun 2025 16:00:51 +0000
Manifest this update: Sat 28 Jun 2025 16:00:51 +0000
Manifest next update: Sun 29 Jun 2025 16:00:51 +0000
Files and hashes: 1: V0zKiZ71v0I38Pa90XeSIbIAUvM.crl (hash: b8r6mBrI6yqAaP0i4WMTQmK+M2NgokdFpTkRv/kE/+Q=)
2: hJUOwaTvP74lE8UHTrGlvy92Ql0.roa (hash: AMxeUVD26hTz30vzgYyULbbdEqiL9GrkX+UdMqFq2KY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/V0zKiZ71v0I38Pa90XeSIbIAUvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:24:40:5a:c2:95:a7:31:1b:99:b7:ee:a8:12:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=574cca899ef5bf4237f0f6bdd1779221b20052f3
Validity
Not Before: Jun 28 16:00:51 2025 GMT
Not After : Jun 29 16:00:51 2025 GMT
Subject: CN=4217113b221951d63b8d542d222836412340c63a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1c:d3:c3:b9:eb:56:32:ae:94:f0:fa:f8:6f:
b1:68:3d:2c:5f:5f:30:82:a7:3d:9c:df:16:0e:ea:
c3:61:9d:43:74:e2:ce:7d:b7:dc:bb:57:19:c2:f1:
9f:0d:a6:7e:d6:74:23:35:39:c0:00:c1:6e:cb:ee:
6b:ea:59:90:7c:5d:82:b2:ab:cd:ed:53:41:01:6e:
bb:9e:81:2e:cb:ca:30:91:a1:36:e6:72:a7:ff:ac:
ab:0b:5f:a1:9e:24:cb:bf:23:e7:86:40:50:27:0a:
e5:b0:85:8b:0d:b2:4b:ef:63:f9:52:15:49:3f:0b:
f1:cd:7a:c0:c0:56:e8:d8:e2:25:58:76:6b:81:c5:
74:de:22:3f:7d:42:e0:37:9d:b9:9c:f1:2f:b6:21:
e8:b0:50:a6:87:90:40:bb:db:b8:ac:a9:2d:d0:65:
92:7d:04:0b:02:f2:eb:7f:2c:ca:15:8c:d8:6f:68:
76:48:06:eb:98:e4:4e:4a:55:53:06:ee:5c:d0:89:
f5:6e:0f:3f:a7:07:d6:a0:ae:94:c4:fe:78:97:c0:
49:0e:b8:20:49:9a:bf:13:7c:be:76:da:25:f7:e8:
d5:c7:cc:99:b6:0c:e5:0d:ab:a7:6f:44:a6:93:ee:
75:24:ae:52:8c:8e:dc:72:15:6c:9e:a7:d5:5f:bb:
80:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:17:11:3B:22:19:51:D6:3B:8D:54:2D:22:28:36:41:23:40:C6:3A
X509v3 Authority Key Identifier:
keyid:57:4C:CA:89:9E:F5:BF:42:37:F0:F6:BD:D1:77:92:21:B2:00:52:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0zKiZ71v0I38Pa90XeSIbIAUvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:a5:25:25:42:34:93:22:62:76:ee:e9:2f:ba:bd:c7:0a:8d:
15:94:79:00:41:05:cc:d2:2c:1a:02:01:a3:8a:db:69:87:ad:
73:6c:92:c9:5b:1a:d6:31:91:e3:10:89:b7:e3:61:1d:6c:12:
d7:b0:5a:da:c7:c4:f1:83:6e:91:d0:a2:f8:65:62:c8:dd:43:
d5:4c:e0:ca:bd:56:42:8e:86:23:af:db:3c:59:5b:44:28:e0:
2a:92:30:6b:95:ea:1f:02:9c:dd:8c:8d:d0:2c:63:10:90:1d:
9d:25:fa:2d:cc:d4:1d:40:24:75:92:f0:d3:be:ed:0b:1b:38:
bc:da:66:2a:c3:ad:80:7e:71:cc:e6:23:1e:52:95:82:93:b4:
c2:7b:49:a5:ad:cf:e4:02:b5:5a:64:8a:3f:61:ac:0e:66:7c:
a6:a4:88:e8:c1:94:06:11:7e:05:05:e0:95:e7:b7:58:78:12:
df:47:3d:72:03:88:36:bf:c4:5f:4a:d8:0a:81:c9:2f:5f:83:
ee:80:ac:37:61:b2:29:94:d6:83:63:d2:05:28:08:c3:f7:ae:
81:30:14:94:56:62:8d:68:52:a8:5c:86:3a:04:f2:90:dd:8c:
ad:4d:c1:7d:db:dd:93:62:9c:74:56:1c:89:bc:82:b7:56:13:
ce:86:6e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:05:14 2025 by rpki-client