Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
File: V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft (raw, json)
Hash identifier: 5L8ZHy7FSj0nawu1+N8OTEkBb2mcgwrH6zB4qyFofaI=
Subject key identifier: B8:FD:60:68:35:F6:B4:A0:17:82:F4:05:B5:9B:51:DB:E9:6D:9F:CA
Authority key identifier: 57:8D:85:4B:D2:BE:E2:42:A8:2F:B8:39:22:D1:49:BC:CF:19:ED:02
Certificate issuer: /CN=578d854bd2bee242a82fb83922d149bccf19ed02
Certificate serial: 0197499F655B429312697F4C16F6EE3E8885
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V42FS9K-4kKoL7g5ItFJvM8Z7QI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
Manifest number: 1581
Signing time: Sat 07 Jun 2025 09:01:12 +0000
Manifest this update: Sat 07 Jun 2025 09:01:12 +0000
Manifest next update: Sun 08 Jun 2025 09:01:12 +0000
Files and hashes: 1: NhjTM3dOPnMsLQ7ebQq_0aK61EU.roa (hash: pDZlPFnX9elEIPNsw2D7ajm33IBeKqhaDpBvumlLRQw=)
2: O9m05o_UDIKemPeCfI7Sc16B69Y.roa (hash: yXqGk5sjcirZhyM4OHBNZEpEXcAXLb0N0cHRwAFg1zo=)
3: V42FS9K-4kKoL7g5ItFJvM8Z7QI.crl (hash: OVDHG0gbnTt765V7Q2iD7sp9pAKUd8XMXlUiRvmRwlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
rsync://rpki.ripe.net/repository/DEFAULT/V42FS9K-4kKoL7g5ItFJvM8Z7QI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:65:5b:42:93:12:69:7f:4c:16:f6:ee:3e:88:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=578d854bd2bee242a82fb83922d149bccf19ed02
Validity
Not Before: Jun 7 09:01:12 2025 GMT
Not After : Jun 8 09:01:12 2025 GMT
Subject: CN=b8fd606835f6b4a01782f405b59b51dbe96d9fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0e:83:df:c0:65:8d:b6:12:22:81:9e:d3:33:
d5:72:11:4a:7a:75:c2:20:35:fa:ea:f7:09:a0:3c:
3c:20:df:b9:c0:bb:bc:9a:8f:1b:23:c8:09:1f:9f:
a8:ae:c8:ec:62:28:e6:a2:9b:b2:6e:e0:19:bb:53:
0a:ea:b4:9c:84:5a:f0:a7:a0:2f:b0:65:0f:41:4d:
66:87:d1:ae:86:71:6c:6f:e2:ed:15:82:54:74:24:
e4:ff:11:66:55:3b:dd:ac:e3:70:0e:60:21:19:f0:
e5:9f:6f:5d:5f:21:34:67:d1:2d:46:7a:05:05:82:
a3:f4:7e:a2:d6:b6:20:af:0d:0e:e1:39:cb:0b:97:
b0:7b:41:ca:0d:86:03:87:88:1f:60:a6:12:2d:e6:
f0:c9:17:5d:d2:17:87:ed:11:fb:04:88:69:5b:26:
44:bf:89:64:ca:b8:fc:9e:b2:0a:05:95:aa:6b:4a:
eb:55:2f:e4:ae:85:bd:e1:73:69:90:b6:97:f0:36:
d1:87:6a:9b:7a:64:bf:44:ff:ad:88:c6:88:d7:a4:
0c:e6:13:ba:4b:fe:fc:3f:d5:a0:fe:b7:b7:b3:7c:
e4:16:0f:61:7f:01:fc:77:f0:e9:7f:ea:37:3b:86:
56:74:b7:38:66:12:c4:dd:54:71:48:9c:9d:e0:1d:
48:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:FD:60:68:35:F6:B4:A0:17:82:F4:05:B5:9B:51:DB:E9:6D:9F:CA
X509v3 Authority Key Identifier:
keyid:57:8D:85:4B:D2:BE:E2:42:A8:2F:B8:39:22:D1:49:BC:CF:19:ED:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V42FS9K-4kKoL7g5ItFJvM8Z7QI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:0e:03:76:ec:21:15:d0:ca:e6:4a:eb:06:5c:fb:d3:34:cb:
a0:ed:82:e1:bc:12:f6:1a:7d:57:9b:f5:30:ae:27:1f:c3:dc:
2a:e3:e1:05:bd:3c:c1:58:fc:1d:4d:e7:00:70:6c:38:21:e3:
55:65:74:3b:8d:4e:e1:7c:ac:cc:41:2a:12:e1:6a:a9:bf:f7:
42:44:21:ec:2a:ec:bc:5f:c3:12:b2:99:9c:86:ba:4d:6a:1f:
f2:00:4c:02:7b:d5:3f:12:80:18:02:2a:71:5d:b6:2a:2b:f0:
73:a8:2e:51:52:61:99:c3:52:e9:52:3a:52:4a:b4:86:f0:63:
33:45:d6:66:8e:72:46:ed:5c:a4:e9:f5:0f:b9:c7:33:4e:a0:
a8:e1:91:a8:76:ca:ba:09:33:20:9e:ab:22:86:9a:d7:3c:09:
e0:f5:02:79:2e:55:2e:0d:b7:37:53:72:31:a0:59:91:4b:0e:
93:c4:d1:f1:d6:28:a8:df:cd:5a:cb:d3:42:be:81:fa:99:2e:
f9:5e:73:85:20:08:a7:89:c6:e4:64:0a:de:13:37:5b:19:1c:
85:06:57:f7:6e:cd:2f:d1:a6:57:97:34:03:d3:8b:38:fc:4b:
46:e8:ec:61:9b:af:bf:56:49:c4:1e:9e:1c:fe:e3:6b:e7:fe:
c7:a1:85:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:17:05 2025 by rpki-client