Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.mft
File: V21ZSUoKkn96aPkJ7O9XfNUD2xw.mft (raw, json)
Hash identifier: jFrlW+kCsmZ8/oTKRhJ5t2iPZAAbLTkYxjta5RRUUNg=
Subject key identifier: 9D:0D:FB:F9:85:14:C6:91:F3:B3:F5:31:13:64:44:42:63:57:1D:1A
Authority key identifier: 57:6D:59:49:4A:0A:92:7F:7A:68:F9:09:EC:EF:57:7C:D5:03:DB:1C
Certificate issuer: /CN=576d59494a0a927f7a68f909ecef577cd503db1c
Certificate serial: 01992367BF51E64CADE3E6F286CF80615DC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V21ZSUoKkn96aPkJ7O9XfNUD2xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.mft
Manifest number: 1679
Signing time: Sun 07 Sep 2025 09:00:25 +0000
Manifest this update: Sun 07 Sep 2025 09:00:25 +0000
Manifest next update: Mon 08 Sep 2025 09:00:25 +0000
Files and hashes: 1: 8Tg_w4jLr-o6paH7i7ao61nZQwM.roa (hash: BXi5IdwKZUBuQCj2qQLYriilM2He/krSkrWhx7hLw5g=)
2: V21ZSUoKkn96aPkJ7O9XfNUD2xw.crl (hash: z67sjpS6YKJ0DFrL080c6jX+UbMXNHA+TdLr1LkYQ9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/V21ZSUoKkn96aPkJ7O9XfNUD2xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:67:bf:51:e6:4c:ad:e3:e6:f2:86:cf:80:61:5d:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=576d59494a0a927f7a68f909ecef577cd503db1c
Validity
Not Before: Sep 7 09:00:25 2025 GMT
Not After : Sep 8 09:00:25 2025 GMT
Subject: CN=9d0dfbf98514c691f3b3f5311364444263571d1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a0:20:ab:45:86:12:34:25:7c:de:82:26:f7:
09:53:6c:37:02:c0:fd:17:b7:0a:2b:20:ad:e5:77:
51:0f:af:8b:50:5f:e1:25:84:b5:33:11:26:4a:bd:
e6:b6:09:bf:99:88:d3:80:25:46:14:3e:18:b2:5f:
fe:ce:00:69:f9:be:01:99:e9:55:58:2a:2a:9e:cf:
45:bd:2d:61:39:3a:fa:c3:ce:a5:9e:81:e9:cb:83:
a4:8f:20:66:6d:fb:29:0c:8c:b8:ea:5f:d1:e9:97:
be:e1:5a:f9:64:9b:ca:21:eb:38:f5:a6:49:8b:01:
1c:1d:ae:1e:ae:15:3a:a0:05:3a:71:ed:f5:ec:b0:
3f:b2:6e:b1:fa:2c:a4:25:cc:95:ad:2f:b2:d2:e7:
78:a4:a0:fc:02:ec:bf:59:80:8d:9f:61:be:e8:16:
34:dd:04:50:a2:1e:08:11:5e:81:5d:82:26:87:a6:
30:0c:48:f2:7d:5f:b9:86:ca:a7:dc:63:90:3f:8c:
78:28:a5:f2:73:a5:ce:a0:22:ca:0d:04:24:a9:0e:
ff:97:90:9b:fc:3b:3c:7f:0a:25:28:58:b4:0f:47:
29:c0:77:59:27:82:c0:6f:09:2c:95:5d:00:25:52:
ef:a4:ab:ea:85:30:82:c2:77:0b:8c:39:33:9c:b2:
97:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:0D:FB:F9:85:14:C6:91:F3:B3:F5:31:13:64:44:42:63:57:1D:1A
X509v3 Authority Key Identifier:
keyid:57:6D:59:49:4A:0A:92:7F:7A:68:F9:09:EC:EF:57:7C:D5:03:DB:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V21ZSUoKkn96aPkJ7O9XfNUD2xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:b5:7e:c9:43:ca:22:ea:79:a4:9b:7a:5d:f9:4b:72:dd:1f:
19:56:17:e4:08:d6:99:79:d6:c6:dc:ca:49:1f:bf:f7:25:02:
a2:49:94:72:22:e3:79:e1:45:00:f2:f3:c5:b8:91:28:52:e6:
83:a7:1a:47:15:99:f0:de:d4:ba:0b:e1:b0:fb:2f:42:42:38:
1d:91:72:fd:cb:77:f9:80:58:b2:56:77:bf:ec:0f:06:90:ed:
86:fe:28:c0:e8:2b:a8:68:f4:a8:cf:38:09:22:54:a8:e2:09:
52:0f:fc:1b:ad:ef:b1:28:04:0a:a5:9a:55:05:91:f4:f2:83:
3e:a0:53:c2:06:a5:ce:08:eb:27:ff:f4:1b:97:c5:02:fe:36:
ac:e9:4d:8c:84:ef:4b:36:29:9a:5a:28:f2:63:56:28:2a:23:
85:3b:da:62:73:4a:45:68:de:a1:e6:c8:b9:cf:4f:66:c5:5a:
2b:02:2f:5c:3a:25:f9:b8:bf:7e:2c:22:6e:c9:2a:70:8c:9a:
4a:e0:9c:e8:48:10:70:ea:fd:31:b3:15:89:b0:73:42:5f:60:
4c:98:6f:29:ae:c6:95:97:f9:61:52:ad:70:9c:73:28:ac:9c:
24:65:59:5d:27:66:0b:2d:82:f1:e1:80:77:13:19:83:7b:19:
5e:ef:d3:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:49:27 2025 by rpki-client