Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/46f501-7745-49da-b1d8-07309e796c78/1/V2tXrthT-J2ipbI98X-SF-76YbY.mft
File: V2tXrthT-J2ipbI98X-SF-76YbY.mft (raw, json)
Hash identifier: /cX69R07ZKuafA4kfcQAqaFlHFltcZDlulunIwZKMr4=
Subject key identifier: 95:9C:D0:C7:85:F5:0D:98:4D:5F:32:92:6D:CE:29:EA:59:FF:90:10
Authority key identifier: 57:6B:57:AE:D8:53:F8:9D:A2:A5:B2:3D:F1:7F:92:17:EE:FA:61:B6
Certificate issuer: /CN=576b57aed853f89da2a5b23df17f9217eefa61b6
Certificate serial: 0197488CBD45F4A2AAA8EECDC780E0DCC36F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V2tXrthT-J2ipbI98X-SF-76YbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/46f501-7745-49da-b1d8-07309e796c78/1/V2tXrthT-J2ipbI98X-SF-76YbY.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 04:01:12 +0000
Manifest this update: Sat 07 Jun 2025 04:01:12 +0000
Manifest next update: Sun 08 Jun 2025 04:01:12 +0000
Files and hashes: 1: B3vxfCdBbqCpFRIfeZyCQ2Fihm4.roa (hash: QTf5FbWUd2JRsm5/AHBpunnMm6hqVgSwd8D8NPeJObg=)
2: V2tXrthT-J2ipbI98X-SF-76YbY.crl (hash: NOv7O8Ey6RWuslbqLGwPUxOfasf7AuPhppt3Ln6415M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/46f501-7745-49da-b1d8-07309e796c78/1/V2tXrthT-J2ipbI98X-SF-76YbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/46f501-7745-49da-b1d8-07309e796c78/1/V2tXrthT-J2ipbI98X-SF-76YbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/V2tXrthT-J2ipbI98X-SF-76YbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:bd:45:f4:a2:aa:a8:ee:cd:c7:80:e0:dc:c3:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=576b57aed853f89da2a5b23df17f9217eefa61b6
Validity
Not Before: Jun 7 04:01:12 2025 GMT
Not After : Jun 8 04:01:12 2025 GMT
Subject: CN=959cd0c785f50d984d5f32926dce29ea59ff9010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6e:83:7e:79:1d:c8:93:48:87:4a:5e:a9:c8:
12:9c:e0:e7:00:be:92:bc:07:d5:d1:8a:e0:48:3c:
1a:0a:dc:f6:f4:0d:7a:f8:06:d4:79:09:f9:ea:8c:
fe:fa:fa:a1:ea:78:29:08:cf:96:63:1c:42:53:36:
96:52:a4:43:b8:2c:a2:53:5e:d9:76:6e:8f:73:cb:
49:36:57:d1:35:a0:de:b8:9c:fc:92:4b:97:6f:9b:
d5:9c:2b:d3:57:18:b1:9b:46:0b:89:d2:d3:a4:4d:
a4:1f:05:07:95:65:8c:69:5b:ae:02:7f:c8:8a:cb:
48:62:cb:66:39:1a:99:73:6c:af:fe:36:a6:80:08:
74:4a:ac:c4:8e:12:2d:c8:3b:45:18:a5:a5:ae:61:
36:58:32:0b:e5:1f:eb:65:15:d4:bf:b6:c7:95:bd:
eb:70:5c:25:e0:22:c1:c4:5b:11:23:9f:7a:18:e9:
b2:f9:46:93:70:c2:55:65:1e:7a:69:ce:61:0b:98:
11:ac:c7:ae:d7:c6:18:33:61:92:74:ae:72:52:f6:
d7:b2:9f:75:f6:a1:04:5d:e5:08:c9:44:dc:25:7c:
90:86:eb:63:e5:c6:5b:8f:18:73:c5:e7:74:2b:88:
a1:9a:f8:cc:12:14:c4:cb:3e:8e:6f:bf:b3:33:ce:
77:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:9C:D0:C7:85:F5:0D:98:4D:5F:32:92:6D:CE:29:EA:59:FF:90:10
X509v3 Authority Key Identifier:
keyid:57:6B:57:AE:D8:53:F8:9D:A2:A5:B2:3D:F1:7F:92:17:EE:FA:61:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V2tXrthT-J2ipbI98X-SF-76YbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/46f501-7745-49da-b1d8-07309e796c78/1/V2tXrthT-J2ipbI98X-SF-76YbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/46f501-7745-49da-b1d8-07309e796c78/1/V2tXrthT-J2ipbI98X-SF-76YbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:e6:df:17:74:54:ba:d8:e2:80:c0:a7:42:11:6b:b8:10:13:
5a:c7:6a:61:48:b3:fc:18:dd:8d:0e:a0:43:e8:08:5d:31:9c:
3e:d2:83:e1:21:0d:4d:35:99:60:4d:b8:6c:61:26:aa:bb:61:
3b:0f:0f:9b:35:08:b7:4a:8a:0e:a4:4e:6d:30:99:e2:aa:47:
3f:ca:6b:a6:51:cf:2d:19:ac:ce:77:00:02:fd:53:c5:71:45:
5d:72:40:11:a8:11:01:4c:62:bc:57:02:18:61:7d:97:f8:62:
1d:57:8d:70:8a:34:fa:6c:28:f1:06:e4:98:14:ec:a8:aa:f7:
ee:19:8f:3c:8e:e7:e9:47:3f:65:09:ed:61:ad:a3:fb:c6:59:
cb:11:28:fc:f8:00:f8:03:da:4f:56:ed:54:ea:79:be:e6:9e:
ab:7e:92:a3:26:91:e6:01:bf:33:ff:6a:d7:8c:3b:32:40:25:
90:d8:7a:1f:ab:0f:1a:de:90:68:6d:d2:3c:b6:e7:6d:fe:6d:
36:08:ab:f5:9f:a2:c0:d8:cf:64:40:08:15:55:e9:93:fd:bb:
b6:5c:f8:81:28:65:80:d4:71:62:a9:11:a6:ec:bb:a3:ec:1b:
e5:f1:e8:27:7f:06:ba:63:a3:cb:08:dc:45:c3:e8:27:78:ef:
ea:78:a2:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:04:25 2025 by rpki-client