Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/6149a5-c8de-4c61-beb7-2201203a0bab/1/V-K4ajPJ-XIUU22MopGdfzw4AM4.mft
File: V-K4ajPJ-XIUU22MopGdfzw4AM4.mft (raw, json)
Hash identifier: kr1vo5ndk168sUBmQK29dCId+uWcwn1fumlurvre82M=
Subject key identifier: 77:64:52:3E:36:52:75:8B:04:A8:0D:90:93:CA:D4:BB:E7:E5:00:6D
Authority key identifier: 57:E2:B8:6A:33:C9:F9:72:14:53:6D:8C:A2:91:9D:7F:3C:38:00:CE
Certificate issuer: /CN=57e2b86a33c9f97214536d8ca2919d7f3c3800ce
Certificate serial: 01975DCAD22AEF02036ED6091D324239ADDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V-K4ajPJ-XIUU22MopGdfzw4AM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/6149a5-c8de-4c61-beb7-2201203a0bab/1/V-K4ajPJ-XIUU22MopGdfzw4AM4.mft
Manifest number: 06EF
Signing time: Wed 11 Jun 2025 07:01:02 +0000
Manifest this update: Wed 11 Jun 2025 07:01:02 +0000
Manifest next update: Thu 12 Jun 2025 07:01:02 +0000
Files and hashes: 1: DnRh90F6ngW2Q_l8KyvAvTFYNhk.roa (hash: jU7eitkasCXaSHRJrOwhJr50g3LZ5XZllbkxukDWdO0=)
2: SW4Yp7z-czq3Wyk3SkqgTnWrKpk.roa (hash: YmIRklQ+efQc+b8RqPf+ZXpsg1COSPp4Bv5KKeWEZK8=)
3: V-K4ajPJ-XIUU22MopGdfzw4AM4.crl (hash: 9rmHpdHHDYRyVyUwuqTBmlrWKLDgWSD2hFIN04BHs6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/6149a5-c8de-4c61-beb7-2201203a0bab/1/V-K4ajPJ-XIUU22MopGdfzw4AM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/6149a5-c8de-4c61-beb7-2201203a0bab/1/V-K4ajPJ-XIUU22MopGdfzw4AM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/V-K4ajPJ-XIUU22MopGdfzw4AM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:ca:d2:2a:ef:02:03:6e:d6:09:1d:32:42:39:ad:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57e2b86a33c9f97214536d8ca2919d7f3c3800ce
Validity
Not Before: Jun 11 07:01:02 2025 GMT
Not After : Jun 12 07:01:02 2025 GMT
Subject: CN=7764523e3652758b04a80d9093cad4bbe7e5006d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:db:2d:07:38:86:21:12:ed:be:13:68:b4:8b:
f0:df:39:79:26:14:bb:21:f3:fd:d6:26:ef:2b:ad:
03:af:bc:79:d5:fd:52:15:f6:35:a4:14:ed:4e:7d:
8c:f5:e5:c1:fb:d5:0d:99:58:8c:1a:49:2e:f8:9d:
fa:17:e2:53:08:0e:73:4c:1a:39:a7:cb:ff:5f:9a:
03:a0:4c:85:2c:cd:29:9d:54:26:9b:7d:58:1d:ba:
8e:f4:f4:c8:d8:51:fb:52:26:22:59:6e:e3:fd:f1:
ef:80:f4:68:55:54:ed:43:4c:d1:c4:f3:c9:5f:93:
cb:6c:18:18:62:5e:a6:dd:f5:c7:72:7a:5e:0c:b7:
34:7d:54:c7:a7:85:2e:65:c6:e7:97:03:aa:65:7e:
61:94:f7:6f:93:4c:6b:79:8d:7b:d6:2a:34:7a:5c:
7f:44:df:6b:13:da:04:96:dd:b6:c9:b4:9e:83:a4:
35:16:17:17:9a:19:30:13:db:c4:c6:44:eb:55:25:
1d:7f:94:e5:86:78:1f:7f:91:ba:39:2f:1b:d5:6f:
f3:bc:a9:12:02:16:ab:18:4d:79:d2:6e:34:c0:a0:
81:cb:93:17:6e:11:64:2f:fd:47:66:7c:08:42:ec:
8b:0b:0f:06:d7:4b:81:94:c2:d3:e3:c1:20:3b:5d:
34:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:64:52:3E:36:52:75:8B:04:A8:0D:90:93:CA:D4:BB:E7:E5:00:6D
X509v3 Authority Key Identifier:
keyid:57:E2:B8:6A:33:C9:F9:72:14:53:6D:8C:A2:91:9D:7F:3C:38:00:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-K4ajPJ-XIUU22MopGdfzw4AM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/6149a5-c8de-4c61-beb7-2201203a0bab/1/V-K4ajPJ-XIUU22MopGdfzw4AM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/6149a5-c8de-4c61-beb7-2201203a0bab/1/V-K4ajPJ-XIUU22MopGdfzw4AM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:8f:6b:70:02:8b:d6:d9:68:4e:80:2e:a8:58:09:c2:4b:6f:
af:eb:3a:e4:db:b9:20:b3:d1:10:82:42:b9:c4:ad:b3:44:d1:
a5:a1:b0:95:38:17:3f:70:0b:d1:53:ff:74:35:10:3c:da:f6:
cd:d9:d2:eb:4b:cb:35:4e:d4:24:97:12:4e:f1:93:78:bb:4a:
37:6d:e8:52:93:27:f0:ad:10:b7:b7:66:e5:d4:42:4d:6a:3d:
cb:6b:97:f3:1a:26:db:be:58:7d:a8:9c:23:57:5f:b5:d3:55:
4b:6e:02:d9:9e:05:02:05:af:dd:22:3f:bc:ad:bf:64:9b:f3:
57:eb:eb:3f:17:06:a2:e0:b7:ff:24:22:58:f1:fc:8c:f9:45:
37:ef:ba:7b:31:54:55:a6:e4:56:63:4c:bf:d3:32:72:1f:08:
d8:23:01:79:eb:6f:0c:19:bb:aa:2e:89:ad:70:bf:38:77:32:
21:4d:86:2c:b5:46:f4:5c:1a:2f:d3:10:97:16:ee:fd:b3:31:
21:ed:f7:fa:2b:e0:3d:28:ff:e1:e1:ee:1e:28:92:90:db:38:
82:97:ec:c5:c1:81:4b:88:39:4a:be:2c:40:16:7a:f0:4e:b2:
94:e4:d8:48:36:ce:26:53:1d:f1:ea:a0:bb:a2:e9:e0:49:de:
19:b7:93:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 09:32:43 2025 by rpki-client