Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/083198-49a7-4864-a46d-6375e1645604/1/V7ifXMeCGeoSc_n1PFueM7xdvrU.mft
File: V7ifXMeCGeoSc_n1PFueM7xdvrU.mft (raw, json)
Hash identifier: I6sH67v9MzcnocYjW3Xn+yQTrw9nIYmawlqCb9oRMGQ=
Subject key identifier: 4E:DB:A9:DE:B6:31:94:0D:20:01:84:77:60:2A:90:86:79:22:19:C8
Authority key identifier: 57:B8:9F:5C:C7:82:19:EA:12:73:F9:F5:3C:5B:9E:33:BC:5D:BE:B5
Certificate issuer: /CN=57b89f5cc78219ea1273f9f53c5b9e33bc5dbeb5
Certificate serial: 0199350007B49537BC8AA91731EB413B029D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V7ifXMeCGeoSc_n1PFueM7xdvrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/083198-49a7-4864-a46d-6375e1645604/1/V7ifXMeCGeoSc_n1PFueM7xdvrU.mft
Manifest number: 0643
Signing time: Wed 10 Sep 2025 19:00:18 +0000
Manifest this update: Wed 10 Sep 2025 19:00:18 +0000
Manifest next update: Thu 11 Sep 2025 19:00:18 +0000
Files and hashes: 1: 2XZNJdR9Iep0Ywseo8-8iJMB8Tg.roa (hash: 7pIfh2Q654qMx1AmZFUCn+BOOHgc4UU06A+k+bghDdg=)
2: RRZa9Q054kEMSroT3AuPzC585XQ.roa (hash: 7iVMMtB+9zg3QA2J8+DzasUBkyEpZ63pEDBVLFDl2DE=)
3: V7ifXMeCGeoSc_n1PFueM7xdvrU.crl (hash: fnU2IAO42GFXG2FdhvQyRkvpIgKC0dh+/XhGdzqVf7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/083198-49a7-4864-a46d-6375e1645604/1/V7ifXMeCGeoSc_n1PFueM7xdvrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/083198-49a7-4864-a46d-6375e1645604/1/V7ifXMeCGeoSc_n1PFueM7xdvrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/V7ifXMeCGeoSc_n1PFueM7xdvrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 19:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:00:07:b4:95:37:bc:8a:a9:17:31:eb:41:3b:02:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57b89f5cc78219ea1273f9f53c5b9e33bc5dbeb5
Validity
Not Before: Sep 10 19:00:18 2025 GMT
Not After : Sep 11 19:00:18 2025 GMT
Subject: CN=4edba9deb631940d20018477602a9086792219c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a0:f4:ef:8c:3d:32:91:3c:6f:93:75:e1:a1:
e6:df:b4:5a:98:49:7a:c7:6b:a5:db:c3:10:71:ce:
49:fc:24:ae:e1:9d:cf:9b:0f:a0:88:b3:12:53:31:
fd:4e:c0:43:60:f8:d5:42:ad:34:04:bf:b2:94:15:
8a:0c:f6:8d:05:66:e6:72:2c:82:b8:3a:a1:32:bb:
16:a0:fa:30:e2:6e:d2:83:c4:93:7e:3c:c0:e0:08:
6e:55:66:ba:75:9b:c1:8e:05:34:dd:d5:38:48:29:
f6:cc:f1:7f:a2:7b:e8:9d:8c:37:33:2d:0e:ab:a7:
82:a9:ab:bf:0a:09:ef:b2:85:8f:2d:3e:63:ed:f8:
e3:7a:b8:ac:97:0b:3e:d5:50:2d:c9:a1:b6:54:9a:
77:b2:52:9c:8b:99:2a:67:f3:c8:3e:ec:7c:a1:ac:
8b:b0:66:93:49:6b:c6:57:ba:6e:ab:38:14:69:4a:
e4:ed:ef:b5:57:8a:80:26:51:b4:b0:32:6e:05:32:
17:58:df:ce:5b:9b:e6:0f:d5:7b:13:c1:13:43:24:
b5:08:a0:fc:be:f0:ca:55:16:86:00:9f:00:24:7b:
27:d7:8d:ae:54:f6:4c:1e:a9:2d:3d:a7:3a:f6:23:
44:3a:9d:b6:eb:77:24:66:fc:85:72:ec:d8:31:e5:
1f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:DB:A9:DE:B6:31:94:0D:20:01:84:77:60:2A:90:86:79:22:19:C8
X509v3 Authority Key Identifier:
keyid:57:B8:9F:5C:C7:82:19:EA:12:73:F9:F5:3C:5B:9E:33:BC:5D:BE:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7ifXMeCGeoSc_n1PFueM7xdvrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/083198-49a7-4864-a46d-6375e1645604/1/V7ifXMeCGeoSc_n1PFueM7xdvrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/083198-49a7-4864-a46d-6375e1645604/1/V7ifXMeCGeoSc_n1PFueM7xdvrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:1e:6b:b7:a8:ef:81:04:39:eb:45:65:51:bf:0b:32:de:40:
82:0d:82:15:a8:21:95:90:9e:da:69:89:39:74:bc:43:cd:3c:
31:27:57:67:ff:ff:11:ca:f0:bc:a9:c7:61:03:75:be:40:02:
4f:5b:4a:35:02:1a:d3:f3:65:bd:e2:e7:c1:ee:5b:75:2b:a2:
2b:ec:0a:de:9f:5a:bb:49:ef:b6:45:77:ac:56:4f:83:c8:2c:
99:5c:76:99:89:29:f7:5e:af:50:a0:a7:ed:2c:1b:c4:8d:f1:
72:3f:67:e7:b0:66:36:a0:7c:31:16:d6:d4:8b:a4:e3:35:40:
b2:bf:ea:b1:2e:30:56:c6:3a:f7:47:5f:b6:0c:2d:d3:c4:f7:
bb:47:ee:89:24:53:c5:9c:65:1b:96:95:b3:3f:c1:c0:c8:20:
1b:89:30:07:54:bc:d3:93:30:a6:94:b9:cf:69:a6:38:d2:8e:
8a:ab:e2:d7:4e:a6:07:98:28:ff:a8:67:d8:68:76:19:65:11:
ce:81:5a:25:62:e8:05:8a:7e:3a:b9:0f:9e:8e:a9:8e:e4:fb:
9e:f0:cf:57:fb:32:d8:dd:b2:b9:16:ae:70:88:fc:ff:ed:17:
c7:19:0e:05:22:94:86:a8:57:ef:b4:12:b4:4f:0b:30:ba:80:
f9:48:e6:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 21:43:04 2025 by rpki-client