Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/a35052-7336-425f-a7ba-87f68b71e44d/1/V7J1ubzEXc6LPvAXLJZzeACUek4.mft
File: V7J1ubzEXc6LPvAXLJZzeACUek4.mft (raw, json)
Hash identifier: TUkbOq57tqDzqIRL5075TPqTTEQt3VZeboMBJpKY3M4=
Subject key identifier: 8E:54:54:AC:8D:10:7B:80:ED:40:6A:8B:67:4F:BA:46:70:13:09:91
Authority key identifier: 57:B2:75:B9:BC:C4:5D:CE:8B:3E:F0:17:2C:96:73:78:00:94:7A:4E
Certificate issuer: /CN=57b275b9bcc45dce8b3ef0172c96737800947a4e
Certificate serial: 0197499F6E88BEA66CA573ABE44D9B0E3A5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V7J1ubzEXc6LPvAXLJZzeACUek4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/a35052-7336-425f-a7ba-87f68b71e44d/1/V7J1ubzEXc6LPvAXLJZzeACUek4.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 09:01:14 +0000
Manifest this update: Sat 07 Jun 2025 09:01:14 +0000
Manifest next update: Sun 08 Jun 2025 09:01:14 +0000
Files and hashes: 1: ABuElM6_NHXhhyjrbNO7-7-4-tw.roa (hash: RB6lZGDNmRmLvQ7wPbU3Ifx1OhDqRcQW8eOAw1dgZcE=)
2: V7J1ubzEXc6LPvAXLJZzeACUek4.crl (hash: LsGara+vuOCnRk5T1L73ZA/A8Xr0SG29gX5A4JWgGT0=)
3: sIxOdNT6bFxHKmNN0CZFI4DmR-8.roa (hash: 5J0fAmw/YI6nG5pD9p8YdD7k7oyOLgeH2PS70uMH6I4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/a35052-7336-425f-a7ba-87f68b71e44d/1/V7J1ubzEXc6LPvAXLJZzeACUek4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/a35052-7336-425f-a7ba-87f68b71e44d/1/V7J1ubzEXc6LPvAXLJZzeACUek4.mft
rsync://rpki.ripe.net/repository/DEFAULT/V7J1ubzEXc6LPvAXLJZzeACUek4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:6e:88:be:a6:6c:a5:73:ab:e4:4d:9b:0e:3a:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57b275b9bcc45dce8b3ef0172c96737800947a4e
Validity
Not Before: Jun 7 09:01:14 2025 GMT
Not After : Jun 8 09:01:14 2025 GMT
Subject: CN=8e5454ac8d107b80ed406a8b674fba4670130991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:42:a6:c3:f8:63:4b:3e:0e:5e:83:08:f7:dc:
8b:ad:d0:bf:38:12:9a:88:21:78:35:34:0f:d9:6c:
32:d1:2a:05:e5:28:62:39:eb:e9:35:77:15:b4:57:
71:52:02:6e:34:57:1d:65:6f:85:77:65:e1:b6:0c:
36:95:0e:72:61:bf:da:e1:29:85:25:d9:60:89:f4:
cd:9a:bf:bf:f2:00:e3:3b:55:81:50:58:69:25:10:
0f:e8:af:01:59:3f:3a:55:e0:3b:32:98:41:77:c2:
97:25:1a:9e:bd:03:d9:36:0e:c2:da:69:95:5e:44:
cd:60:25:b2:d0:05:10:73:20:01:3a:dd:6a:fa:e5:
26:4e:26:3e:c0:49:f3:cf:72:95:26:41:b3:99:23:
31:fb:e0:b3:90:cc:38:21:6b:a4:73:5c:4e:f7:67:
37:31:20:d3:71:0c:b9:b1:4a:01:b0:7b:51:ce:3b:
bc:19:d4:8b:b8:4d:59:eb:d6:68:31:40:f8:d0:c6:
e9:ed:0f:57:c6:81:91:f6:ee:71:17:d0:a8:85:6c:
ff:a7:16:a7:05:bf:21:90:88:ac:7a:64:2a:96:58:
54:fe:e2:45:80:34:d7:ef:90:b2:db:1b:17:bf:16:
59:d1:6a:36:7c:ca:92:e9:0b:f8:ed:46:c6:85:ec:
72:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:54:54:AC:8D:10:7B:80:ED:40:6A:8B:67:4F:BA:46:70:13:09:91
X509v3 Authority Key Identifier:
keyid:57:B2:75:B9:BC:C4:5D:CE:8B:3E:F0:17:2C:96:73:78:00:94:7A:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7J1ubzEXc6LPvAXLJZzeACUek4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a35052-7336-425f-a7ba-87f68b71e44d/1/V7J1ubzEXc6LPvAXLJZzeACUek4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a35052-7336-425f-a7ba-87f68b71e44d/1/V7J1ubzEXc6LPvAXLJZzeACUek4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:c7:5b:b2:66:8a:b8:16:54:7b:e3:b7:06:1b:ee:1f:25:6c:
58:e9:36:2e:30:54:8f:2e:72:dd:de:81:e6:bb:a9:f8:cc:57:
76:f9:5c:e6:e1:f8:05:03:71:72:70:d1:0e:65:04:6e:61:ad:
21:aa:d3:54:fb:1c:b6:1d:a2:be:03:d1:35:f4:a8:3f:28:c1:
24:04:e9:4d:43:4f:56:85:69:ee:b2:df:b2:8d:87:79:a5:c3:
14:92:38:ba:8a:40:04:85:9f:92:8f:9e:cc:fc:9c:cc:96:e0:
7a:83:c8:09:99:87:99:fb:33:eb:ad:24:3f:c2:26:8b:0a:ed:
8c:d1:16:f1:40:b9:e1:6f:c5:9c:6d:17:c1:9c:94:5c:fc:c6:
e2:60:89:fb:9d:25:eb:40:0b:73:43:bd:7f:2d:7d:bd:24:a2:
81:c4:9b:dc:3e:1d:68:1c:57:79:82:00:e9:ac:ce:2a:ea:c3:
9c:6c:e6:3c:39:d7:c1:e8:1b:53:61:52:77:a7:1f:58:ba:a3:
f8:89:b6:d4:02:2d:3a:18:70:fa:ac:71:fd:9c:c0:c9:58:f2:
7e:36:b1:2c:62:9b:26:1f:7a:14:ec:98:c3:e8:61:1f:1f:f0:
8f:4c:4a:d5:29:3d:8f:c6:90:a7:4e:22:dd:37:b9:a9:7b:fe:
bc:89:f6:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:07:06 2025 by rpki-client