Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.mft
File: V2si8nkFl0hL-WkVqDVDwZSz_R4.mft (raw, json)
Hash identifier: Z3deevlk/vGlgXVG6IwsS8RG3cK8A2FAzZM+8TlRryM=
Subject key identifier: BC:00:39:14:EC:18:D3:7C:72:00:3D:E5:10:AF:CC:8E:B5:C2:69:47
Authority key identifier: 57:6B:22:F2:79:05:97:48:4B:F9:69:15:A8:35:43:C1:94:B3:FD:1E
Certificate issuer: /CN=576b22f2790597484bf96915a83543c194b3fd1e
Certificate serial: 01983683D2F07C3080EA8A4D9FD36C8D7538
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V2si8nkFl0hL-WkVqDVDwZSz_R4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.mft
Manifest number: 053A
Signing time: Wed 23 Jul 2025 09:01:05 +0000
Manifest this update: Wed 23 Jul 2025 09:01:05 +0000
Manifest next update: Thu 24 Jul 2025 09:01:05 +0000
Files and hashes: 1: V2si8nkFl0hL-WkVqDVDwZSz_R4.crl (hash: qXIAyh7RmoQBT1CnDNfcrBFJ3TJQg/fYFVPfKQL4M5Q=)
2: WnvN9eO0xROw8P2u2NunmIAmhFM.roa (hash: ICDMCpB80BuzlOdYTKVVB47BHhMFIG3MGwkKpb0Kjms=)
3: ga2NxvzjVumF5thvPvomOtqub-A.roa (hash: Fnu74FvZlaTUv1bGjbnayDCXm216CFcy4KRgAcWl9Rk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.mft
rsync://rpki.ripe.net/repository/DEFAULT/V2si8nkFl0hL-WkVqDVDwZSz_R4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:36:83:d2:f0:7c:30:80:ea:8a:4d:9f:d3:6c:8d:75:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=576b22f2790597484bf96915a83543c194b3fd1e
Validity
Not Before: Jul 23 09:01:05 2025 GMT
Not After : Jul 24 09:01:05 2025 GMT
Subject: CN=bc003914ec18d37c72003de510afcc8eb5c26947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:65:e7:63:73:11:bb:55:43:23:7a:1a:26:54:
55:b4:b9:1e:7b:e2:5c:48:63:01:97:91:0f:6e:3c:
96:15:2b:a2:3a:0d:77:b7:9b:f7:4c:95:3c:fa:0e:
61:eb:89:78:c9:0e:23:22:9e:ae:6a:6c:80:28:fe:
86:bc:e0:9c:8b:7e:30:e8:29:9f:5d:26:2c:8a:02:
ef:38:f6:af:ce:ee:3b:9d:8a:33:d5:34:89:37:09:
00:bd:9f:52:41:c9:f9:48:70:43:c2:69:87:c5:80:
3d:1b:ac:ef:57:53:dc:bc:5b:92:b9:ac:3a:97:97:
cf:62:52:7c:b6:ad:32:12:71:82:b5:dc:a4:c5:7e:
a4:99:a4:84:c3:14:56:dd:cf:1f:a3:6e:59:6f:7e:
5d:58:d3:7e:c1:85:6f:3f:7b:a6:89:8d:16:7e:d8:
a6:0c:02:d2:49:f5:a7:91:b3:03:da:98:d4:2c:a4:
c9:30:17:16:66:49:1d:c6:d7:e0:4a:ed:be:9a:ae:
16:17:b9:3e:2a:9d:95:1e:5c:a4:93:63:c2:b9:ae:
de:da:dc:5e:a8:3c:dc:81:24:28:f8:a4:09:df:5f:
6e:0b:c1:0e:15:9a:20:22:93:0d:31:14:97:a5:ab:
0a:29:49:29:92:2d:96:c5:4c:93:77:c3:99:a1:b7:
32:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:00:39:14:EC:18:D3:7C:72:00:3D:E5:10:AF:CC:8E:B5:C2:69:47
X509v3 Authority Key Identifier:
keyid:57:6B:22:F2:79:05:97:48:4B:F9:69:15:A8:35:43:C1:94:B3:FD:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V2si8nkFl0hL-WkVqDVDwZSz_R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:44:08:ff:29:ad:20:e5:8c:78:33:01:da:9c:9b:9b:da:e1:
8c:3a:de:0e:ab:ae:d4:14:a4:d1:16:14:ad:25:b0:6f:8a:86:
51:b3:20:1e:d4:da:9c:9b:f8:59:ac:a4:53:fe:57:5c:d3:24:
e7:c1:29:72:e8:b2:b1:51:09:5d:ba:87:fc:84:2b:8c:49:79:
0f:6c:b6:f4:11:f6:07:3b:2f:2c:30:ef:e9:d0:82:b3:88:18:
36:3b:75:67:dd:26:e1:41:94:51:83:6a:50:6b:9a:d8:fa:84:
6a:e8:54:8c:24:45:d5:d2:f5:15:ec:41:ae:1a:5d:a5:47:86:
9a:82:83:c8:1c:22:95:19:4c:17:2f:c5:f4:ce:4a:30:92:3c:
96:0c:07:bf:aa:1b:e9:78:1e:a5:0a:b5:f8:ec:c0:9e:a2:37:
40:21:c8:1b:29:09:63:f5:a0:23:1c:fa:56:1c:39:ad:72:b0:
b9:2a:c2:be:02:7f:3f:fa:2f:8e:4d:81:c2:55:ad:b4:1c:83:
22:0d:60:25:be:2e:7d:5d:72:37:33:20:0a:3e:a3:48:d1:39:
b3:2f:e1:70:de:f3:f3:c1:f1:9b:e1:8c:98:b6:ec:2a:f9:48:
09:90:b7:1e:5f:7a:3c:ea:50:f9:fa:89:03:24:9f:d5:84:7b:
78:73:ca:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:24:51 2025 by rpki-client