Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
File: V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft (raw, json)
Hash identifier: 9nSuMcK9tCQ3hRkKgofyt1nKI9ulvFfNcxO6Q+NYOJc=
Subject key identifier: 4F:46:3A:EB:19:AA:AA:98:6F:A9:C9:5F:77:81:C6:6A:D9:A8:05:50
Authority key identifier: 57:8D:85:4B:D2:BE:E2:42:A8:2F:B8:39:22:D1:49:BC:CF:19:ED:02
Certificate issuer: /CN=578d854bd2bee242a82fb83922d149bccf19ed02
Certificate serial: 01984A77CC70E4115BD5D490C92EC1E62C7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V42FS9K-4kKoL7g5ItFJvM8Z7QI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
Manifest number: 1606
Signing time: Sun 27 Jul 2025 06:00:21 +0000
Manifest this update: Sun 27 Jul 2025 06:00:21 +0000
Manifest next update: Mon 28 Jul 2025 06:00:21 +0000
Files and hashes: 1: NhjTM3dOPnMsLQ7ebQq_0aK61EU.roa (hash: pDZlPFnX9elEIPNsw2D7ajm33IBeKqhaDpBvumlLRQw=)
2: O9m05o_UDIKemPeCfI7Sc16B69Y.roa (hash: yXqGk5sjcirZhyM4OHBNZEpEXcAXLb0N0cHRwAFg1zo=)
3: V42FS9K-4kKoL7g5ItFJvM8Z7QI.crl (hash: DhdqFcoWARta9wqzKzREftAm6CDgekMO1M1wdlYAVAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
rsync://rpki.ripe.net/repository/DEFAULT/V42FS9K-4kKoL7g5ItFJvM8Z7QI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:cc:70:e4:11:5b:d5:d4:90:c9:2e:c1:e6:2c:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=578d854bd2bee242a82fb83922d149bccf19ed02
Validity
Not Before: Jul 27 06:00:21 2025 GMT
Not After : Jul 28 06:00:21 2025 GMT
Subject: CN=4f463aeb19aaaa986fa9c95f7781c66ad9a80550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2d:c1:18:2a:14:7d:1f:74:64:5d:13:86:51:
22:48:ae:af:96:57:19:89:b9:50:50:5c:21:c4:a0:
4f:9a:35:ed:c3:c0:8b:66:28:56:20:17:97:de:2b:
1b:37:19:7e:8a:e8:46:6a:52:3f:32:47:34:bc:77:
36:26:f3:25:6f:93:3c:30:7d:4f:1b:fb:92:4e:2b:
d6:b7:bd:c1:cf:ab:79:f2:78:0e:bb:db:7c:0a:78:
9f:c1:24:df:0b:17:2d:54:0a:82:16:b1:76:a6:27:
2e:e2:75:23:d4:a2:ad:5a:08:7d:94:f0:15:b8:61:
1e:fa:53:6f:a6:db:4c:97:ed:32:b5:41:03:89:ef:
e5:31:6e:52:74:42:5a:e3:fd:76:6e:03:14:56:39:
06:e6:ac:12:7e:6f:c3:12:c0:3a:c9:dd:84:3e:71:
55:14:a2:a2:24:15:cd:c4:c0:78:b6:94:cd:fc:39:
df:cc:f2:e6:b1:38:e1:f1:8b:0f:55:06:16:63:90:
83:d1:6d:c3:17:af:41:0d:7e:42:a9:75:b3:93:a5:
f9:c9:fe:2c:f2:35:5e:ba:bc:9d:af:c3:d2:12:2b:
95:5b:57:cd:eb:aa:3f:61:70:27:e1:cd:76:3e:ce:
7c:82:0f:94:71:72:a2:8b:a3:20:7f:f0:dc:c1:b0:
a5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:46:3A:EB:19:AA:AA:98:6F:A9:C9:5F:77:81:C6:6A:D9:A8:05:50
X509v3 Authority Key Identifier:
keyid:57:8D:85:4B:D2:BE:E2:42:A8:2F:B8:39:22:D1:49:BC:CF:19:ED:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V42FS9K-4kKoL7g5ItFJvM8Z7QI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:a9:91:2d:18:4d:78:be:3b:46:0e:dd:23:ae:1d:4c:4b:92:
d3:97:c8:38:ff:5a:6a:05:f5:fb:80:ed:ef:e3:d5:9d:bc:04:
c6:04:6d:44:31:a7:62:cb:40:ae:e8:ff:13:bf:79:8c:e9:67:
9c:af:76:e4:98:f5:db:1f:f4:88:03:81:d0:88:70:37:f2:23:
ba:09:8e:75:0a:76:62:49:1a:a9:76:94:9f:14:88:04:99:2a:
57:18:58:7d:9b:bd:7d:b6:3d:aa:b5:76:25:f7:d7:f4:eb:79:
1e:c9:7c:51:00:d4:b3:33:a2:11:64:51:2c:a2:d0:e3:cc:98:
4a:bf:47:f3:37:45:d5:92:d6:98:e6:73:ef:31:74:6e:ca:71:
55:c6:ed:ce:e1:23:35:42:9c:08:a6:d3:7c:0e:68:e0:20:96:
f7:8a:ea:d9:d5:b3:7a:4c:71:a6:28:73:0b:eb:39:91:e6:3b:
cc:b4:d0:1e:6a:6a:27:2f:18:b7:48:15:4b:ce:33:76:55:59:
6c:18:a0:bd:d6:6a:29:ed:c1:b8:1a:69:3c:21:95:70:d2:9a:
45:b6:48:48:0a:5d:ae:f1:24:67:52:39:34:30:92:15:ed:d0:
b8:10:85:28:63:39:9f:29:02:ce:e7:fd:bb:b5:00:48:b3:fb:
ee:db:7d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:46:21 2025 by rpki-client