Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5c8941-5a28-44e1-9395-bd31c5aceb59/1/V5G7EVC-rF6gxyTznSzn_M_BVGo.mft
File: V5G7EVC-rF6gxyTznSzn_M_BVGo.mft (raw, json)
Hash identifier: G5Tqd5nv3Ts5ZA4HYoUEucwJTyC7uLgWWsFd4mkfBk8=
Subject key identifier: 19:D9:E1:00:14:95:2E:8E:97:EA:1C:BE:34:A4:1D:A1:36:42:AF:E8
Authority key identifier: 57:91:BB:11:50:BE:AC:5E:A0:C7:24:F3:9D:2C:E7:FC:CF:C1:54:6A
Certificate issuer: /CN=5791bb1150beac5ea0c724f39d2ce7fccfc1546a
Certificate serial: 0197B6A0BDDC438D8789564AE32C518C0FE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5G7EVC-rF6gxyTznSzn_M_BVGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5c8941-5a28-44e1-9395-bd31c5aceb59/1/V5G7EVC-rF6gxyTznSzn_M_BVGo.mft
Manifest number: 14CF
Signing time: Sat 28 Jun 2025 13:01:17 +0000
Manifest this update: Sat 28 Jun 2025 13:01:17 +0000
Manifest next update: Sun 29 Jun 2025 13:01:17 +0000
Files and hashes: 1: 20JIcxX-YRfmUdZsM-A9KFCVQ9A.roa (hash: Jy9A0VoisBWre1TOkMryXEsS8YexNx87KiBRG3mU7GI=)
2: 64bniClUPfUDALDLv0vwIlVjfMA.roa (hash: lL8XeUncI5mQZtyJg5Qencz5SVSK52g5YBySwrx2+kI=)
3: V5G7EVC-rF6gxyTznSzn_M_BVGo.crl (hash: fh/uyn4M80nI1hfG2X1Z8HzYc82yiFNJI8/sva47n6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5c8941-5a28-44e1-9395-bd31c5aceb59/1/V5G7EVC-rF6gxyTznSzn_M_BVGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/5c8941-5a28-44e1-9395-bd31c5aceb59/1/V5G7EVC-rF6gxyTznSzn_M_BVGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/V5G7EVC-rF6gxyTznSzn_M_BVGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:bd:dc:43:8d:87:89:56:4a:e3:2c:51:8c:0f:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5791bb1150beac5ea0c724f39d2ce7fccfc1546a
Validity
Not Before: Jun 28 13:01:17 2025 GMT
Not After : Jun 29 13:01:17 2025 GMT
Subject: CN=19d9e10014952e8e97ea1cbe34a41da13642afe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1b:5c:95:c6:98:dc:56:e8:4f:de:eb:41:7a:
c0:db:a8:a6:5c:ea:1c:b6:1d:b9:c0:96:f2:66:8b:
4c:ab:4f:c7:d5:29:d2:54:f0:00:4e:98:13:19:5a:
7d:d8:ed:a7:f0:ed:16:10:8b:bf:b7:e3:6f:c3:c1:
55:29:67:7f:9e:52:2d:8d:fb:74:91:16:17:44:ad:
49:a7:e1:e6:35:84:87:1a:9d:07:ee:77:14:49:eb:
1d:19:54:b4:56:56:14:8c:81:a1:c2:d6:6d:d7:aa:
16:c9:22:9c:1a:52:fb:d8:95:1b:50:c9:2e:53:dd:
f1:0e:ae:29:ac:a0:1f:8a:ad:58:1d:30:00:ea:37:
08:4c:16:e6:4c:9b:8a:57:b5:32:79:51:6a:da:ff:
1f:60:e2:71:18:ad:fd:97:fc:f5:49:f1:96:56:6f:
ed:35:89:46:e4:f1:3e:e8:a5:fd:64:c3:42:a4:2d:
55:00:95:79:94:79:c0:88:4d:3d:1d:42:f8:7e:d4:
8a:d5:17:d4:42:a0:a8:90:06:89:28:8a:55:03:0c:
22:9c:41:59:3e:a8:16:09:de:dd:55:2e:52:cc:cb:
58:cd:a0:b3:e0:17:b1:63:28:49:29:3c:85:5e:ed:
36:c1:1e:93:d8:b3:57:45:ca:27:5d:b3:64:fa:30:
4c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D9:E1:00:14:95:2E:8E:97:EA:1C:BE:34:A4:1D:A1:36:42:AF:E8
X509v3 Authority Key Identifier:
keyid:57:91:BB:11:50:BE:AC:5E:A0:C7:24:F3:9D:2C:E7:FC:CF:C1:54:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5G7EVC-rF6gxyTznSzn_M_BVGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5c8941-5a28-44e1-9395-bd31c5aceb59/1/V5G7EVC-rF6gxyTznSzn_M_BVGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5c8941-5a28-44e1-9395-bd31c5aceb59/1/V5G7EVC-rF6gxyTznSzn_M_BVGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:ef:6f:64:68:32:4e:fa:d0:3c:7e:6f:86:68:ce:20:82:84:
70:03:5c:ab:70:a1:af:2e:e3:78:c4:73:2e:f5:10:05:c4:fa:
97:fb:e3:fb:f7:1b:27:f0:4d:53:f0:e2:21:69:be:4c:49:d9:
6a:8c:04:8d:9e:a9:86:8a:a4:bb:75:76:26:55:6c:46:c0:1f:
68:7f:f0:a7:64:90:7b:ee:68:b1:09:2b:fc:2b:c3:13:02:f3:
ea:87:07:35:42:14:0d:3f:ac:17:da:54:e5:e6:b5:66:ce:ff:
de:ff:dd:a6:ff:f2:a2:a2:ef:26:12:6b:74:fe:86:fb:f9:9d:
ad:48:ce:ea:b8:53:44:1e:88:e2:88:9e:6b:9f:10:cf:09:ad:
c5:d1:09:fa:fc:f7:b8:0d:b9:41:01:c1:f5:16:b2:11:23:f6:
83:21:df:bb:99:f7:cc:b9:a0:74:d8:d9:0e:9b:4b:e2:54:ce:
fb:3f:34:32:d4:56:c8:f7:d8:eb:8a:36:0e:e5:69:65:ba:82:
8d:3d:34:37:6a:c8:e5:d0:33:87:50:8b:99:5c:fd:69:df:af:
9f:c1:98:6e:15:df:50:36:e7:20:aa:b5:74:67:06:5e:5d:8f:
db:20:e0:61:00:e2:a2:a9:3f:0d:b9:92:0e:f1:41:e1:04:3b:
29:f9:11:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:33:13 2025 by rpki-client