Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/V_ZNsaQq2-ncMibryAr7t11Kfxg.mft
File: V_ZNsaQq2-ncMibryAr7t11Kfxg.mft (raw, json)
Hash identifier: 25Gu7RBaRMXUtCypRkY6OetiW+o41F14ALJ5kByPWJg=
Subject key identifier: 04:92:5D:7A:33:63:FD:42:51:CA:58:F8:B7:D2:3B:85:14:66:2C:A2
Authority key identifier: 57:F6:4D:B1:A4:2A:DB:E9:DC:32:26:EB:C8:0A:FB:B7:5D:4A:7F:18
Certificate issuer: /CN=57f64db1a42adbe9dc3226ebc80afbb75d4a7f18
Certificate serial: 0198499C7EC3E30372C105FC74751D7E28C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V_ZNsaQq2-ncMibryAr7t11Kfxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/V_ZNsaQq2-ncMibryAr7t11Kfxg.mft
Manifest number: 15BC
Signing time: Sun 27 Jul 2025 02:00:49 +0000
Manifest this update: Sun 27 Jul 2025 02:00:49 +0000
Manifest next update: Mon 28 Jul 2025 02:00:49 +0000
Files and hashes: 1: A8RA-KyHreMNSgmJAylrJgsQAGI.roa (hash: nePGMmr2buSknOQjxf358rj5Sl4Q3WncEvIivf/SZEI=)
2: V_ZNsaQq2-ncMibryAr7t11Kfxg.crl (hash: l8xMDtyAf+NsfMzl1RElfHiE5WGIqMa3cT1JYwakBOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/V_ZNsaQq2-ncMibryAr7t11Kfxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/V_ZNsaQq2-ncMibryAr7t11Kfxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/V_ZNsaQq2-ncMibryAr7t11Kfxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 02:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:7e:c3:e3:03:72:c1:05:fc:74:75:1d:7e:28:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57f64db1a42adbe9dc3226ebc80afbb75d4a7f18
Validity
Not Before: Jul 27 02:00:49 2025 GMT
Not After : Jul 28 02:00:49 2025 GMT
Subject: CN=04925d7a3363fd4251ca58f8b7d23b8514662ca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3c:2d:39:92:a3:6b:8d:57:d8:69:6d:0e:7d:
0c:93:77:fb:33:d2:d9:f1:f2:b2:28:8b:0e:76:51:
04:a9:ff:a0:93:a3:25:68:86:6f:df:ac:27:52:3e:
15:ab:15:1a:a9:8f:15:bd:35:9e:40:07:17:7c:ca:
6f:9a:f7:34:26:c8:7a:da:e6:b3:08:d0:b3:4f:a5:
7b:a9:0d:89:9b:0b:41:c8:58:c4:18:5f:3c:b6:32:
6c:8a:f3:ea:74:5d:ab:95:24:54:7e:f5:55:9f:5f:
6b:46:57:14:02:02:f8:84:35:50:9d:ee:6f:94:7c:
d3:0d:83:a7:d5:c0:26:30:82:ab:a4:c7:81:e7:91:
2b:de:71:db:a3:9a:65:37:4d:29:bf:59:b0:53:82:
b3:92:92:ff:70:3d:a1:e6:d2:b4:59:a8:50:13:52:
bf:cf:91:0f:0b:9c:db:c3:c7:e1:4e:11:fb:4d:e0:
37:ca:23:f4:6d:73:73:8b:60:e9:3f:bb:e3:b2:25:
d2:df:47:83:60:67:3a:0f:2a:3b:25:9a:be:b5:4b:
a2:8a:4d:81:20:c2:62:3b:17:50:8f:a1:39:59:8c:
7a:7d:ba:23:68:80:1f:0e:c6:03:19:ac:23:d0:81:
1f:ae:da:d4:a2:09:cb:56:d2:8f:f5:5c:70:a9:14:
f0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:92:5D:7A:33:63:FD:42:51:CA:58:F8:B7:D2:3B:85:14:66:2C:A2
X509v3 Authority Key Identifier:
keyid:57:F6:4D:B1:A4:2A:DB:E9:DC:32:26:EB:C8:0A:FB:B7:5D:4A:7F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V_ZNsaQq2-ncMibryAr7t11Kfxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/V_ZNsaQq2-ncMibryAr7t11Kfxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/V_ZNsaQq2-ncMibryAr7t11Kfxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:a2:b5:91:2d:99:42:d0:83:4f:3f:30:53:38:c0:f9:75:c5:
2a:e8:68:82:07:ab:10:3c:ad:ad:17:68:f8:1d:50:8d:72:a6:
76:33:60:a8:c5:8e:e9:5f:4b:59:5a:fa:90:57:b4:53:09:cd:
41:33:de:79:ee:87:7a:d1:61:a9:76:65:cc:09:bc:c6:5e:f9:
e9:d0:6a:43:d0:15:5b:43:2f:4e:0b:b0:24:62:29:6e:b5:f4:
76:4e:ed:62:e1:79:b4:e6:26:d4:fd:51:37:d8:8d:d1:98:6f:
55:f9:e3:a3:2b:72:e4:bd:82:74:56:52:17:e3:49:47:0e:db:
29:9e:66:12:1d:1c:10:f9:f8:0b:49:b8:2b:31:a5:58:85:7d:
eb:51:7d:33:8f:bd:38:aa:cc:b2:47:76:c0:6e:d8:23:17:7d:
d4:75:89:c6:51:81:31:94:69:74:60:89:cf:83:41:8e:0b:5a:
7d:d4:e1:54:61:7b:d0:64:74:e6:32:42:de:50:c7:fd:98:67:
46:3a:6c:d7:56:df:71:43:a7:38:00:76:08:53:38:e4:b9:49:
44:d3:d2:2a:4b:63:22:38:cd:e5:46:bd:a4:c7:30:46:e1:d3:
cc:d4:c7:bc:98:bd:12:9f:bb:8a:92:da:a1:5c:b7:63:67:99:
1e:d7:5f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:29:49 2025 by rpki-client