Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.mft
File: V2VnM04DVjndfMtJdqmycPcmMh0.mft (raw, json)
Hash identifier: TEdk6ATH2CS0qCKy8zJtiON1Q4m66fMc9Sp5e4SQkmE=
Subject key identifier: 8A:2F:F7:72:9A:07:30:25:F5:69:49:54:36:70:69:1C:FF:37:60:2C
Authority key identifier: 57:65:67:33:4E:03:56:39:DD:7C:CB:49:76:A9:B2:70:F7:26:32:1D
Certificate issuer: /CN=576567334e035639dd7ccb4976a9b270f726321d
Certificate serial: 01984D78F3399570517E2CD1EF2DAC9A2050
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V2VnM04DVjndfMtJdqmycPcmMh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.mft
Manifest number: 15FF
Signing time: Sun 27 Jul 2025 20:00:28 +0000
Manifest this update: Sun 27 Jul 2025 20:00:28 +0000
Manifest next update: Mon 28 Jul 2025 20:00:28 +0000
Files and hashes: 1: BF6mEEyNMbb-xRm9_vXJ4CAvddM.roa (hash: LKI2ZmXTKLgLquBH6Yp7C5JIlsxvJUmapEogTIwlb5g=)
2: V2VnM04DVjndfMtJdqmycPcmMh0.crl (hash: ffFwYel508pVxTChJ3oRm7dTf83mXju66OSTk16YCXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/V2VnM04DVjndfMtJdqmycPcmMh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 20:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4d:78:f3:39:95:70:51:7e:2c:d1:ef:2d:ac:9a:20:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=576567334e035639dd7ccb4976a9b270f726321d
Validity
Not Before: Jul 27 20:00:28 2025 GMT
Not After : Jul 28 20:00:28 2025 GMT
Subject: CN=8a2ff7729a073025f56949543670691cff37602c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:62:5f:82:a9:c0:96:ca:5f:4a:e9:17:0b:0c:
9b:ad:9e:f6:34:b7:f3:dc:db:70:77:27:be:e5:0c:
92:66:ed:5c:ef:60:39:5c:5d:43:04:a8:12:ba:5d:
06:78:1b:c0:18:14:1e:93:44:d6:cd:6a:79:9a:ee:
5c:b1:56:bf:8b:33:19:c0:f9:26:84:41:15:71:ed:
60:56:37:52:68:e2:0a:39:8c:c4:82:3a:62:5c:f1:
ed:a6:2f:14:43:17:b6:13:99:67:1c:f7:31:02:d6:
a0:e1:87:b6:e5:f4:25:a2:1d:a5:a1:c7:a3:ae:eb:
7e:b8:30:2c:b8:b8:dc:a3:c3:6e:95:92:95:14:14:
ae:fa:54:04:3d:1e:db:30:ea:f7:f6:d4:08:b5:52:
06:b3:51:5a:b3:a5:f9:ae:10:f1:c0:b0:d7:0a:b5:
41:92:71:b2:c0:9f:04:6f:8d:4f:23:cf:35:13:6b:
6d:0e:79:71:8e:3c:4e:e0:b5:6e:f7:a2:d6:3f:26:
d9:fc:35:1f:43:8d:47:2d:41:90:32:95:d4:f0:5b:
c2:df:de:99:35:c2:9f:43:02:fa:d8:ef:7c:41:ca:
7c:8f:68:ef:ea:ec:85:3e:66:7b:e2:8f:32:7c:e7:
68:ea:80:c2:51:86:09:f5:18:80:db:84:e4:a2:46:
3f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:2F:F7:72:9A:07:30:25:F5:69:49:54:36:70:69:1C:FF:37:60:2C
X509v3 Authority Key Identifier:
keyid:57:65:67:33:4E:03:56:39:DD:7C:CB:49:76:A9:B2:70:F7:26:32:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V2VnM04DVjndfMtJdqmycPcmMh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:71:a2:f6:65:ee:01:26:31:63:7a:8c:6f:95:fb:fa:da:81:
5c:ad:8f:82:c8:79:59:ab:df:1b:5a:72:0e:28:cf:54:78:52:
a8:c4:7d:31:56:7d:84:4e:fd:5d:cb:36:ee:70:98:a2:0e:71:
d3:ee:0c:f0:dc:0e:5f:5b:56:a5:5f:d0:53:d2:bf:ac:b2:dd:
d3:dc:ca:b9:cc:a5:d2:ef:93:22:2c:d9:de:34:6c:e3:d6:1a:
27:13:96:92:8a:92:0b:5f:54:21:dd:b2:53:49:57:53:14:85:
c6:1b:4c:a3:c2:4b:12:c4:9b:21:b2:5c:fa:be:36:27:46:4e:
27:85:1f:95:10:f1:a7:73:75:bc:ad:78:a0:8a:0f:2b:fe:f0:
94:bc:7a:3f:32:95:3f:7c:9d:42:d6:38:d8:c2:1a:ff:05:1d:
f6:6c:98:48:7a:1e:71:18:be:5a:14:8f:2c:1b:83:de:87:ba:
42:df:89:67:b1:1c:ea:72:3d:5d:8a:d7:5f:6b:22:67:88:14:
07:76:9a:11:85:19:01:73:fd:ca:dd:bc:2a:54:51:8e:ce:0e:
e5:d5:fd:a3:13:35:06:7a:3c:f5:5c:33:f5:6a:58:ef:2c:ea:
b7:4e:58:87:e9:da:41:9c:57:dd:6e:4f:1c:43:85:1e:b5:12:
2b:56:e7:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 06:05:05 2025 by rpki-client