Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
File: v2wd9mI3TUrs0Miz-EMS30ISVZk.mft (raw, json)
Hash identifier: H56hKrmw8nJK3SKae4saoz90h3SC+nMJst8hK7wA97I=
Subject key identifier: CB:58:95:E0:C1:21:B8:41:CA:E5:DD:AB:BC:10:1E:D2:D8:5B:5B:03
Authority key identifier: BF:6C:1D:F6:62:37:4D:4A:EC:D0:C8:B3:F8:43:12:DF:42:12:55:99
Certificate issuer: /CN=bf6c1df662374d4aecd0c8b3f84312df42125599
Certificate serial: 01973987AC831F4AB12E11590F8265C210C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
Manifest number: 144D
Signing time: Wed 04 Jun 2025 06:01:22 +0000
Manifest this update: Wed 04 Jun 2025 06:01:22 +0000
Manifest next update: Thu 05 Jun 2025 06:01:22 +0000
Files and hashes: 1: V8R9NuBsBMtjM8dngpbvo3MJx5s.roa (hash: kncxVZkCgNT2UYYst35neieskR5Qm/mNu8V3+IA6Ku8=)
2: v2wd9mI3TUrs0Miz-EMS30ISVZk.crl (hash: h+4ovAabKdncZ8CfEuedy3kmiBNIaDyniy/SrD3VGQk=)
3: yd8_f-atyxFNKtcv_cFVTfpnZt4.roa (hash: pN1o2J3yJeBV6MHLs3BSzPMoqupOmN0yj1atUVgcuyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 06:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:39:87:ac:83:1f:4a:b1:2e:11:59:0f:82:65:c2:10:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf6c1df662374d4aecd0c8b3f84312df42125599
Validity
Not Before: Jun 4 06:01:22 2025 GMT
Not After : Jun 5 06:01:22 2025 GMT
Subject: CN=cb5895e0c121b841cae5ddabbc101ed2d85b5b03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:df:7c:34:c8:8c:89:1c:cf:a1:88:cb:87:ef:
27:df:4f:f4:f9:06:48:00:29:21:cf:ab:7f:9a:3e:
c6:35:c0:e2:ec:53:19:5d:06:17:ab:c1:9b:5a:69:
bd:32:2b:2b:d7:82:ec:15:81:b2:a5:4b:6f:ef:a7:
08:1e:b2:e9:cb:da:1b:b7:d3:0d:3a:4d:9e:66:d5:
7a:4c:aa:db:d0:03:0c:16:cb:b7:77:d6:57:c8:01:
17:51:9d:dd:45:fd:b3:8e:e7:68:6f:33:f4:b4:03:
2b:c6:ea:88:db:af:4c:b8:91:07:1b:3f:41:d3:53:
13:c1:c0:33:54:f4:ce:5d:07:0e:26:9b:84:3f:7f:
3f:9e:e8:e9:d7:48:8e:d1:ff:fb:9c:53:c1:70:88:
4e:5c:bb:4b:ba:dd:4b:9f:31:31:f1:7c:f4:89:2a:
63:47:23:89:b6:e3:f0:4f:10:cd:fc:be:e2:d1:3b:
64:61:45:5a:e9:d3:8a:3d:c8:5d:fc:19:1a:20:cc:
ad:3b:b7:75:24:5d:c6:2a:91:b2:49:34:0f:96:d7:
3d:06:58:ff:51:5f:f2:92:4d:30:fc:3d:11:91:7d:
32:44:87:c8:cb:6c:05:1b:96:28:e9:6c:5b:96:44:
e4:47:de:20:54:77:62:d5:cd:fe:b7:24:9a:78:2c:
bc:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:58:95:E0:C1:21:B8:41:CA:E5:DD:AB:BC:10:1E:D2:D8:5B:5B:03
X509v3 Authority Key Identifier:
keyid:BF:6C:1D:F6:62:37:4D:4A:EC:D0:C8:B3:F8:43:12:DF:42:12:55:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:90:a7:ca:98:5f:3a:07:45:c2:28:46:7e:df:75:93:da:d3:
3e:b7:4e:8b:af:a3:05:22:7d:44:6c:6a:26:de:ac:ed:ab:90:
ed:ce:7e:63:eb:cb:e8:58:ad:de:be:fd:ca:46:58:cf:79:ba:
04:40:2b:fe:3a:5a:3a:1a:90:85:6a:2a:c4:7d:fa:e8:66:08:
8d:53:ff:10:de:7b:c1:9c:10:b5:90:7d:8a:b1:0d:39:67:29:
44:c0:ef:a9:e3:2f:8a:cd:2d:ce:a4:73:bf:8d:13:c0:ca:46:
d0:cc:85:d1:3f:a3:f7:e5:21:3f:41:14:ea:a8:58:44:c9:f0:
fc:c7:ff:cd:e5:65:c9:30:1a:70:b3:e8:00:ba:5c:90:69:8b:
70:18:7a:e0:47:f2:dd:ae:ac:41:d9:82:79:8b:70:03:62:fc:
17:17:59:c1:03:67:d5:b5:b9:ad:86:9e:62:aa:a6:3f:97:0d:
f7:ab:55:c2:22:3c:d6:71:21:76:04:21:64:ea:25:a0:a7:e8:
58:86:80:b0:22:ba:00:87:1f:48:aa:98:05:8e:ea:94:87:8e:
97:50:0c:10:a5:d5:60:44:a0:3d:df:d8:c7:bf:e1:a1:23:5f:
85:bb:6c:6e:09:3f:b2:fa:29:5b:b7:7e:9a:a0:40:8d:4e:d5:
a7:b2:1f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:43:54 2025 by rpki-client