Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.mft
File: v5joFwlZteYBj2ArOnSHstgCgQY.mft (raw, json)
Hash identifier: kB0tmYlXaVkQL0jUbaqPTa/S1MFpslLYjAnk0QB3MBw=
Subject key identifier: 8B:0A:19:EE:65:CD:7D:BA:C9:D8:DE:B7:76:F5:B2:1B:9D:F1:77:C2
Authority key identifier: BF:98:E8:17:09:59:B5:E6:01:8F:60:2B:3A:74:87:B2:D8:02:81:06
Certificate issuer: /CN=bf98e8170959b5e6018f602b3a7487b2d8028106
Certificate serial: 019754599053327211F0861719C90D8F0F95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v5joFwlZteYBj2ArOnSHstgCgQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.mft
Manifest number: 1584
Signing time: Mon 09 Jun 2025 11:00:45 +0000
Manifest this update: Mon 09 Jun 2025 11:00:45 +0000
Manifest next update: Tue 10 Jun 2025 11:00:45 +0000
Files and hashes: 1: WxyFMVLPaoedm2KunMSjCPtRmII.roa (hash: Ungr4kPsfNHZcdD5CyaeCkdVZRH3x9Cj4Xb6OMIiqY0=)
2: ekd0T-pWjR2fdJhmt79rFrJVVFk.roa (hash: SlYmHx07GpRwdPchZU3v+4uB8eJO2LbmRdoWgdkR9QQ=)
3: v5joFwlZteYBj2ArOnSHstgCgQY.crl (hash: JAu/p3qXqsYIqvax8zK6ZsDo7LF6z/nuz2M3KkZYydc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/v5joFwlZteYBj2ArOnSHstgCgQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:59:90:53:32:72:11:f0:86:17:19:c9:0d:8f:0f:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf98e8170959b5e6018f602b3a7487b2d8028106
Validity
Not Before: Jun 9 11:00:45 2025 GMT
Not After : Jun 10 11:00:45 2025 GMT
Subject: CN=8b0a19ee65cd7dbac9d8deb776f5b21b9df177c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9b:52:d1:9a:13:7e:ba:40:3e:bf:ad:49:37:
7c:39:cb:43:7b:ca:48:69:9e:d8:55:2e:00:22:ac:
b1:8e:7c:d1:ac:f1:a5:df:54:07:b6:fa:0a:03:f3:
a3:ee:c5:af:20:aa:32:1c:b2:fc:21:60:f1:68:3e:
be:64:3d:90:0c:69:86:f9:a8:21:48:e9:a3:96:ba:
5b:6c:80:2b:f8:01:08:a2:8e:0f:d9:55:52:84:bc:
c9:97:52:7e:a6:04:40:92:88:4f:d2:e1:5d:2f:e1:
96:45:40:54:76:ac:65:45:81:6a:7d:04:3b:87:54:
17:aa:5e:13:86:94:6a:ca:6b:3c:46:e0:d2:61:e9:
56:e0:f6:4c:4d:8d:42:da:35:e1:07:50:ae:88:5a:
c4:8d:43:23:77:05:0f:1b:86:cd:ba:a4:89:ef:9e:
b0:a7:bc:2c:26:cf:1c:fe:ed:d7:21:80:f7:43:58:
05:30:75:f2:ba:f8:a2:44:7c:31:5e:62:4f:5a:2c:
9e:f9:b1:92:f4:d3:6d:f3:98:ea:f5:4f:d1:9f:48:
55:d3:3d:0c:4d:c2:6a:06:79:ef:19:3d:00:b7:8d:
54:7e:35:ba:c8:20:79:e9:2c:e2:6a:38:a9:a4:aa:
38:c8:03:f8:3c:86:b4:46:93:e3:9a:b9:5e:ac:72:
9a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:0A:19:EE:65:CD:7D:BA:C9:D8:DE:B7:76:F5:B2:1B:9D:F1:77:C2
X509v3 Authority Key Identifier:
keyid:BF:98:E8:17:09:59:B5:E6:01:8F:60:2B:3A:74:87:B2:D8:02:81:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5joFwlZteYBj2ArOnSHstgCgQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:a0:5b:5a:79:18:23:9e:d9:e9:5d:d7:0a:09:58:ed:65:79:
b5:fd:fd:ac:0b:82:ec:47:e7:f2:3c:d7:e8:b9:72:7a:98:58:
e9:d8:05:30:aa:d7:e1:09:86:ae:37:14:8a:b0:c0:b2:58:d8:
45:dc:dc:85:d1:ea:cc:95:1b:b1:79:e5:3f:6b:25:d5:89:36:
52:c0:be:fa:30:1d:d3:20:54:e3:37:7c:1c:fb:f9:53:61:7f:
79:b6:c3:8c:7d:b8:30:ef:55:e0:08:f2:b5:de:dc:cd:bd:03:
4d:a0:4c:a4:e5:77:85:cf:6a:7f:34:97:cd:65:57:bc:7f:3c:
fc:bd:23:03:e2:a7:19:01:69:72:e0:4a:30:02:26:28:27:8a:
15:fc:fb:64:70:29:36:d8:e4:47:42:77:e0:8b:cd:ce:75:00:
d2:69:1e:ef:05:ff:12:06:46:a9:1f:ae:1d:30:9b:2e:d4:5d:
40:4c:4e:54:4a:14:f5:05:69:4a:2b:9b:c9:92:a4:3d:26:6b:
5d:bd:53:0f:2b:bb:5a:ef:72:ea:d9:24:3b:04:14:e5:a2:84:
d1:b0:07:8e:f2:b5:89:fd:59:82:36:74:0a:21:83:95:c8:17:
ce:33:51:bd:8b:8e:96:b0:07:80:63:af:6f:a3:6c:5d:4f:e7:
10:36:9e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:26:26 2025 by rpki-client