Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.mft
File: V5NTy0LgxPulyuJTpXaLwfJGW5k.mft (raw, json)
Hash identifier: zGHdfRP1LxKiwJph1pw2K7Kk3C2yOHfi+XRCB6afmeA=
Subject key identifier: 52:6D:2F:89:55:59:82:2E:80:B9:FC:DE:A8:4C:CF:29:9C:B1:60:9C
Authority key identifier: 57:93:53:CB:42:E0:C4:FB:A5:CA:E2:53:A5:76:8B:C1:F2:46:5B:99
Certificate issuer: /CN=579353cb42e0c4fba5cae253a5768bc1f2465b99
Certificate serial: 01984965BCC14A2F313054317DFD0E233045
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5NTy0LgxPulyuJTpXaLwfJGW5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.mft
Manifest number: 1086
Signing time: Sun 27 Jul 2025 01:01:00 +0000
Manifest this update: Sun 27 Jul 2025 01:01:00 +0000
Manifest next update: Mon 28 Jul 2025 01:01:00 +0000
Files and hashes: 1: D3QeUsU8Q-1bY74EwK2MA0No9Ew.roa (hash: N97kcfMNA4uFpsheDLzM7+Nl7AAF28L1BPIs41yYMZY=)
2: Q07EucI5XyAYo9s-A9qqwpcEGlA.roa (hash: VFWYrVVM3MpoRzNbOjii1yFOv4OAEiNvOV4MAp0ri4Y=)
3: V5NTy0LgxPulyuJTpXaLwfJGW5k.crl (hash: bFvipu/W/Wzq7esU08X0khhxXk1crhOO9oiUGRC1Gvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/V5NTy0LgxPulyuJTpXaLwfJGW5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:bc:c1:4a:2f:31:30:54:31:7d:fd:0e:23:30:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=579353cb42e0c4fba5cae253a5768bc1f2465b99
Validity
Not Before: Jul 27 01:01:00 2025 GMT
Not After : Jul 28 01:01:00 2025 GMT
Subject: CN=526d2f895559822e80b9fcdea84ccf299cb1609c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1d:47:9c:2d:09:3e:05:0d:56:26:ea:4b:6b:
01:83:57:57:b6:b9:76:34:87:2f:42:b5:63:63:1c:
f5:f2:99:03:f1:29:c4:14:72:22:04:d2:df:2d:ca:
1a:ee:e3:e4:ce:dc:5f:1d:d8:1e:2c:fe:33:36:11:
d2:fc:04:ab:36:a2:37:28:89:98:3c:0b:b9:62:39:
1a:77:9c:69:97:76:64:bb:e6:7e:a9:05:50:56:6f:
35:c5:f4:18:4f:88:a5:0a:e9:6d:42:f9:47:a5:a8:
a5:76:8f:a7:68:d8:7b:af:b6:e7:6e:a1:71:ae:e4:
72:b8:f6:14:fd:ab:17:4f:07:b3:57:80:85:15:3a:
99:5a:20:c4:eb:1f:e4:e6:98:54:de:3d:49:82:29:
96:6f:1d:5d:45:10:1a:af:2c:67:65:9a:3e:b0:77:
99:a9:24:31:30:57:1a:07:d5:0e:51:f9:08:a3:d2:
19:ec:2d:cb:9e:c3:c6:a7:dd:2e:7a:1b:02:6c:66:
66:49:26:1c:57:cd:4d:06:6e:e9:d0:ce:d4:e0:40:
16:18:f1:92:94:1c:e6:c2:7e:70:e0:b1:f2:e1:c4:
7b:1a:d1:e3:a0:c5:e0:e3:c5:0a:8c:9c:14:05:5e:
0b:8c:96:8a:81:4a:b0:d2:60:9e:8e:64:c0:5d:12:
ca:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:6D:2F:89:55:59:82:2E:80:B9:FC:DE:A8:4C:CF:29:9C:B1:60:9C
X509v3 Authority Key Identifier:
keyid:57:93:53:CB:42:E0:C4:FB:A5:CA:E2:53:A5:76:8B:C1:F2:46:5B:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5NTy0LgxPulyuJTpXaLwfJGW5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:fd:1c:b4:54:9e:3d:74:54:30:ed:90:15:5d:39:ff:4a:36:
e8:81:73:b0:2d:c2:f3:d4:3e:0b:61:27:f3:72:2a:b3:15:ce:
40:ad:37:1b:57:e9:6a:7c:86:b2:c8:d4:7f:f2:fb:bd:3c:c0:
ac:c1:30:12:9d:99:13:5c:e1:f7:24:02:f4:8c:2a:5d:a2:05:
6f:36:d9:c9:ca:d2:79:3b:78:20:a6:94:e2:d1:4d:6f:75:28:
c8:88:30:be:96:e6:ed:a8:24:db:27:3f:88:e3:60:c5:62:4d:
f4:2d:94:00:c0:48:b1:cb:9f:98:86:4d:6b:ab:2b:65:91:54:
6a:4a:06:fe:61:97:d2:2e:0a:46:ad:31:c7:a3:20:06:7d:8f:
1b:c2:a3:92:97:de:6f:29:ad:38:3e:bd:e0:c5:1f:57:67:19:
ba:b5:b3:80:24:07:71:d6:1a:18:b8:5c:73:54:a5:bb:52:76:
31:76:e3:32:dc:f7:37:48:51:66:7b:b9:5e:ec:d7:9f:9a:f2:
6c:d4:ab:d1:0f:43:9a:ec:a6:90:52:28:b2:87:30:89:60:14:
c5:38:2e:e7:77:dd:3c:e1:5c:ec:13:7c:e4:ac:99:3d:7d:cd:
6a:9e:60:42:ff:fc:c9:89:cc:5e:dc:f9:f8:58:8d:37:71:b8:
93:ff:f2:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:20:47 2025 by rpki-client