Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.mft
File: V0zKiZ71v0I38Pa90XeSIbIAUvM.mft (raw, json)
Hash identifier: AW+2gt9QhJyEhaCM6vsc820ISnZZT2xU/oCEpMkEZp4=
Subject key identifier: F9:0A:82:CE:67:35:C8:06:B4:E1:01:AA:52:9A:44:A9:4D:07:86:83
Authority key identifier: 57:4C:CA:89:9E:F5:BF:42:37:F0:F6:BD:D1:77:92:21:B2:00:52:F3
Certificate issuer: /CN=574cca899ef5bf4237f0f6bdd1779221b20052f3
Certificate serial: 01974B1FABF625F47B224EA334C926B82C87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V0zKiZ71v0I38Pa90XeSIbIAUvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.mft
Manifest number: 1583
Signing time: Sat 07 Jun 2025 16:00:56 +0000
Manifest this update: Sat 07 Jun 2025 16:00:56 +0000
Manifest next update: Sun 08 Jun 2025 16:00:56 +0000
Files and hashes: 1: V0zKiZ71v0I38Pa90XeSIbIAUvM.crl (hash: f5lC5wH/MqzxfZbLPyDxxfrH0ZCUcG1wVaLfb5m1r1U=)
2: hJUOwaTvP74lE8UHTrGlvy92Ql0.roa (hash: AMxeUVD26hTz30vzgYyULbbdEqiL9GrkX+UdMqFq2KY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/V0zKiZ71v0I38Pa90XeSIbIAUvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 16:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:ab:f6:25:f4:7b:22:4e:a3:34:c9:26:b8:2c:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=574cca899ef5bf4237f0f6bdd1779221b20052f3
Validity
Not Before: Jun 7 16:00:56 2025 GMT
Not After : Jun 8 16:00:56 2025 GMT
Subject: CN=f90a82ce6735c806b4e101aa529a44a94d078683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a5:78:90:68:06:28:b9:8c:11:fa:ba:b1:21:
33:e8:1b:93:37:d5:bb:a1:ee:97:17:9b:e2:c4:93:
b3:86:a4:3a:98:e6:e3:0c:cc:5f:53:e1:6c:45:70:
28:aa:d3:e7:1c:57:dd:65:f1:cd:bb:dc:bb:dd:b6:
d5:2e:a5:40:0a:86:73:72:64:db:12:ba:6a:19:5c:
44:a9:13:bc:17:ac:a8:5a:5d:50:5e:0a:10:f5:83:
ad:6f:76:5a:7c:35:31:ad:20:cd:7a:b9:25:9a:d9:
21:28:aa:b4:4a:78:75:44:21:74:aa:6b:12:1e:18:
e3:3a:68:e2:0f:d2:a7:a5:68:a5:89:09:b4:00:57:
e7:a0:2b:c3:fc:a2:40:db:b3:bc:80:8a:f9:96:b3:
31:0d:33:74:38:cd:e7:1f:76:ec:42:77:ee:30:5c:
21:6b:a9:0e:0e:93:40:71:08:70:23:da:28:a6:d0:
32:65:1d:09:a3:50:f0:bc:7b:56:22:87:b0:2c:f9:
d9:a3:a9:22:63:90:47:29:c2:d0:77:99:ff:9f:41:
c2:a9:6e:90:6e:a5:97:7c:0b:df:0d:fc:dc:13:43:
97:e9:9e:d7:9e:bd:f8:88:7a:af:93:fd:02:87:ed:
85:67:dc:15:f5:ae:dc:db:8b:63:dc:3a:8b:73:3c:
b0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:0A:82:CE:67:35:C8:06:B4:E1:01:AA:52:9A:44:A9:4D:07:86:83
X509v3 Authority Key Identifier:
keyid:57:4C:CA:89:9E:F5:BF:42:37:F0:F6:BD:D1:77:92:21:B2:00:52:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0zKiZ71v0I38Pa90XeSIbIAUvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:7a:80:41:1b:a9:44:cd:1d:54:e0:9c:70:d3:44:1c:0c:7c:
f9:a4:b1:c8:29:95:c8:9d:69:d5:b6:a3:a6:f4:17:96:c8:ca:
a2:27:97:45:b4:49:32:f2:2e:39:e2:a0:54:7d:73:8d:26:5d:
1e:3c:27:d4:e7:87:d4:53:02:ad:04:58:b6:69:15:5e:12:55:
e9:af:98:95:de:5a:44:00:63:3d:63:fe:94:4f:ab:74:0d:6f:
f9:2e:f0:db:1a:a6:ce:dc:d0:da:8c:d9:9b:3d:87:4d:4c:60:
73:bb:06:7e:21:af:bb:0d:f5:90:e5:b5:61:6d:24:8c:14:4e:
0a:31:0a:e0:2f:10:5f:93:7c:83:ee:e7:af:00:ca:62:eb:41:
08:e0:84:36:d2:83:ea:bc:07:e7:ca:1a:31:da:5c:27:b6:c6:
dd:67:01:80:b3:32:b5:fe:0a:87:1c:24:53:8a:ea:22:a0:6e:
dd:87:92:fe:1a:22:94:0b:35:d2:f7:96:bb:c0:5b:00:8c:e8:
31:0b:29:3c:e3:2f:04:68:9d:0f:1f:6c:71:26:c4:a0:87:a0:
b6:bc:6b:ef:94:17:4e:4f:43:fa:b8:50:4d:0d:74:b4:65:89:
da:51:28:27:64:56:35:b0:b7:a3:ad:1c:98:f5:9f:4e:3b:3e:
96:ed:3b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:04:16 2025 by rpki-client