Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft
File: V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft (raw, json)
Hash identifier: lsSGymCVHkzTgbnvcX37k47Vcp2L8Xlnv4m1gHPpPM0=
Subject key identifier: F4:3F:38:B3:B4:1D:CF:5C:17:58:9A:78:36:4D:72:E1:D5:F3:0D:24
Authority key identifier: 57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B
Certificate issuer: /CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b
Certificate serial: 019836F102C53AA8465A77B5AED6EF1F25EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft
Manifest number: 0F21
Signing time: Wed 23 Jul 2025 11:00:21 +0000
Manifest this update: Wed 23 Jul 2025 11:00:21 +0000
Manifest next update: Thu 24 Jul 2025 11:00:21 +0000
Files and hashes: 1: GyhAtf15yZqMprvOSAG-mSzNZTU.roa (hash: jfVjDUAXNOWRUx2duW7NqVNPhOHvwJFkEOJDlRjLf1c=)
2: Jn9LNrC4wIy3yIlbSkthFN9Albs.roa (hash: 6lIOMorBJKMVKOZBPqKcGfElc6xi+Wc/c9B3Sn6wFrA=)
3: V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl (hash: G14jJ3k1SK+CZdwGUY/RzTOhoFrXxYzzhmFnoqu2tLA=)
4: Y2_bnui3NBLO8jQirmiUuAzGyRw.roa (hash: Sj4Gp5iophRPrZcWhz+iS2BZX0tuH2ZNqq3e2/zFjig=)
5: ntrt1qLEp7JFw_l17Dbev4liPcY.roa (hash: 5lVCUBQu1df/S1FQOKl/MyF/XxoO3ZxscsaY8Q1dPLk=)
6: vfMCWDXHqUhfE9pCWjy3UIK3sYE.roa (hash: cZ4cjZLkxHd/pGP9SjokJ4j+E/I+MNHdDpithj4CeCo=)
7: zaxDDa76odJm9ePdrwAGeOqRpTk.roa (hash: LPUFtmetdpPIYathbUV2AsqucuRhOg7pKFky/Ou4leU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft
rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 11:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:36:f1:02:c5:3a:a8:46:5a:77:b5:ae:d6:ef:1f:25:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b
Validity
Not Before: Jul 23 11:00:21 2025 GMT
Not After : Jul 24 11:00:21 2025 GMT
Subject: CN=f43f38b3b41dcf5c17589a78364d72e1d5f30d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:11:4f:7b:aa:86:53:34:d4:84:5f:05:32:e7:
dc:1c:16:b3:1a:e0:9b:23:c2:1c:f3:15:03:07:28:
49:27:f4:bd:4e:77:73:be:63:e7:ed:14:c2:d7:c4:
3a:7e:16:0c:7d:7f:92:fa:6d:0a:12:78:3e:cc:01:
15:16:57:0d:32:8b:58:2e:d2:7a:6b:f4:d4:89:7d:
a0:4d:fc:06:d4:a9:45:78:50:cb:04:88:81:42:f6:
81:85:c3:42:6d:07:59:3d:07:b2:8f:2f:8f:a1:bb:
38:ff:ed:89:9b:16:02:18:02:52:04:a8:43:6b:b1:
b0:90:59:77:7c:9e:43:a4:8d:08:27:ce:c8:d5:12:
f8:03:36:94:0d:b6:93:9f:d3:65:24:54:ba:f0:4b:
9c:be:ba:49:a0:f2:57:6f:9d:c4:3c:44:96:a0:7a:
f5:4e:64:d4:5f:44:68:b5:0c:09:c7:da:32:8f:69:
79:f4:52:6f:bc:e3:8e:b8:ec:21:97:ca:bb:29:10:
34:45:a6:87:af:36:ae:be:4d:e9:c2:88:5e:b8:03:
35:22:91:81:f4:1d:c4:5a:f7:ab:cc:56:43:5b:74:
7a:33:b7:fd:d3:29:66:dc:c6:7d:de:5c:e8:9d:05:
e8:fd:f5:a8:22:34:1b:96:de:67:ec:af:f2:83:4f:
fb:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:3F:38:B3:B4:1D:CF:5C:17:58:9A:78:36:4D:72:E1:D5:F3:0D:24
X509v3 Authority Key Identifier:
keyid:57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:26:61:09:ba:44:10:56:da:96:9c:06:5f:71:a0:21:ea:05:
67:c3:b0:b7:e5:f6:fa:f9:fa:b6:72:94:43:29:4a:74:1a:e7:
e1:43:d9:a5:31:55:29:05:e5:d2:46:a0:ae:11:f8:fb:0e:47:
d9:7e:5a:ff:43:c9:ff:a6:1a:c5:6c:07:19:8a:c7:8e:6a:c1:
6f:a6:a4:53:41:ad:e8:7f:95:20:f6:05:42:20:e5:bd:ec:f0:
96:3b:3f:5c:0e:7c:4e:cf:34:7b:ba:a8:55:10:11:99:1a:5a:
7f:7a:5b:6b:18:ba:91:ec:32:57:dc:88:3f:77:93:88:2b:63:
b6:ac:c2:fb:c3:64:c6:da:42:21:1f:a6:77:62:75:d6:23:47:
d7:90:61:87:c1:08:c7:bc:71:58:3d:2b:c7:07:f1:ad:ba:2a:
f5:94:39:1e:17:89:23:a7:60:57:48:f8:80:53:db:a6:e4:f7:
c0:ef:6e:4f:f5:31:22:14:d3:c2:9b:2d:dd:06:a3:e6:ae:75:
97:d4:eb:04:3e:a0:78:ed:ae:8e:d8:ce:3a:35:31:eb:b3:b0:
6f:23:e8:df:a9:75:2d:78:88:3f:2c:bc:08:61:67:1f:b8:2b:
cd:6e:84:19:f6:e3:25:96:af:97:83:28:ba:4a:a3:4a:bb:bd:
b5:e7:52:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 18:39:45 2025 by rpki-client