Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.mft
File: V21ZSUoKkn96aPkJ7O9XfNUD2xw.mft (raw, json)
Hash identifier: gjCgCNef1yNHZ99xo9f+Kr1DRXKNC7FAulQfTKEmUvc=
Subject key identifier: 65:88:13:F8:41:8B:AF:B4:7F:FE:B6:52:05:9C:57:06:62:04:90:CF
Authority key identifier: 57:6D:59:49:4A:0A:92:7F:7A:68:F9:09:EC:EF:57:7C:D5:03:DB:1C
Certificate issuer: /CN=576d59494a0a927f7a68f909ecef577cd503db1c
Certificate serial: 01974968050206DD4054BD3082B0DA823150
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V21ZSUoKkn96aPkJ7O9XfNUD2xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.mft
Manifest number: 1580
Signing time: Sat 07 Jun 2025 08:00:43 +0000
Manifest this update: Sat 07 Jun 2025 08:00:43 +0000
Manifest next update: Sun 08 Jun 2025 08:00:43 +0000
Files and hashes: 1: EjNs4c7ExfB-Xn86trYUTIGxY9M.roa (hash: 5gdWhqxScCqY+ac2NlShb0emeLCeoscJIL/u5Z1pQss=)
2: FQ_8F69qJ1OIvrywFvryFirKQj8.roa (hash: q2ovk1tVG4lGYgmszBcNRyfEZ8Wo4tad3oDRiuzylzY=)
3: V21ZSUoKkn96aPkJ7O9XfNUD2xw.crl (hash: /dBZR9ItnnlOmv4dt7zg2+USG2+KlWtQhExDVr8pjuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/V21ZSUoKkn96aPkJ7O9XfNUD2xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:05:02:06:dd:40:54:bd:30:82:b0:da:82:31:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=576d59494a0a927f7a68f909ecef577cd503db1c
Validity
Not Before: Jun 7 08:00:43 2025 GMT
Not After : Jun 8 08:00:43 2025 GMT
Subject: CN=658813f8418bafb47ffeb652059c5706620490cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e4:5c:56:98:27:42:57:35:88:1f:b9:6c:7b:
ae:01:cf:40:d5:46:9b:3c:5b:57:ed:3b:1f:fe:15:
8b:06:ea:80:4d:79:29:0f:8c:7f:24:4b:a5:c8:d4:
28:ce:f3:2b:7d:a4:43:bd:b9:fa:32:cc:01:3a:3a:
07:6c:3c:6b:70:ef:c6:c0:20:f8:ca:29:b9:53:9c:
e8:fe:d1:0d:a2:db:26:6d:37:ac:25:96:1b:0f:ba:
8d:9a:99:9f:3a:d4:7d:ef:39:15:16:28:91:1b:e5:
99:f2:a1:34:76:8b:1a:a8:98:29:30:a6:55:17:e4:
ed:43:7f:83:0f:c1:ae:e6:f8:51:2b:9f:ef:56:b8:
71:86:cf:81:85:e7:58:20:c1:28:c6:89:9e:38:bb:
68:5b:ab:f8:55:5a:60:05:25:9a:15:2c:16:72:7a:
d4:bb:e1:39:ef:66:43:b6:77:07:61:a6:6c:a9:13:
3c:e6:e7:4d:71:83:00:f2:31:78:26:6f:6e:16:86:
28:5b:97:90:28:db:20:da:14:51:d4:28:be:db:70:
5d:2c:70:0e:e8:4f:e0:d7:da:a2:ae:81:f3:b3:8e:
28:42:a6:30:d3:c7:25:17:5b:73:0b:b5:0d:bc:3c:
5a:21:89:01:f2:f8:b8:1e:be:b6:50:b3:5c:d2:5c:
98:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:88:13:F8:41:8B:AF:B4:7F:FE:B6:52:05:9C:57:06:62:04:90:CF
X509v3 Authority Key Identifier:
keyid:57:6D:59:49:4A:0A:92:7F:7A:68:F9:09:EC:EF:57:7C:D5:03:DB:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V21ZSUoKkn96aPkJ7O9XfNUD2xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:eb:70:1c:cd:08:02:33:53:14:1a:36:32:b4:ac:a7:82:4e:
3c:ab:3d:73:ce:77:1d:9c:00:82:7e:6a:95:ae:dd:50:95:b6:
b7:f3:46:8e:d2:4b:1d:07:0f:06:4a:87:f3:1a:35:fb:d2:c7:
00:84:49:8a:b2:ac:ec:fb:d7:35:8c:39:e8:36:de:c8:f8:79:
97:95:d5:7c:b5:a3:b0:bf:6f:a4:31:7c:c2:72:98:52:ab:f1:
95:a7:d2:29:e9:d0:eb:7f:66:b1:8e:ba:67:d5:08:cd:f4:63:
a4:e9:fe:f1:80:80:f0:4c:6f:31:45:82:db:4e:16:d4:d6:bc:
ff:16:c4:90:c7:01:2a:3f:0f:43:db:76:7e:cb:13:6b:99:0b:
03:33:ee:16:47:82:51:1d:67:62:c0:05:69:4c:54:32:cb:1d:
23:e5:0b:93:59:25:04:17:fe:45:43:29:af:dd:9c:f3:11:15:
03:56:0d:d6:0c:4f:1d:b1:30:e3:a9:9d:da:96:94:fc:08:42:
c3:b5:6e:79:c9:bc:44:28:ab:7c:af:0e:df:d6:7b:c9:b2:58:
7b:5f:9c:8d:94:10:4f:a0:0e:8b:e3:c2:93:eb:42:a8:59:82:
7b:c9:a0:b5:fa:7f:22:2c:06:b7:75:9e:6f:58:a6:cd:f7:ee:
a2:c4:15:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:20:57 2025 by rpki-client