Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft
File: V0U31U828UIjG8gXA4hyy2B7Iec.mft (raw, json)
Hash identifier: iQIsDEU5qEJJ1tx2r0g3Qq2a8QW2m36M1+yW9EVXn/k=
Subject key identifier: D6:5D:4B:BD:CB:88:92:1F:06:67:F0:2F:78:74:F0:F2:9A:9D:36:29
Authority key identifier: 57:45:37:D5:4F:36:F1:42:23:1B:C8:17:03:88:72:CB:60:7B:21:E7
Certificate issuer: /CN=574537d54f36f142231bc817038872cb607b21e7
Certificate serial: 019748C31D2AD4EDEFA5DD0CAF060D64BE6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V0U31U828UIjG8gXA4hyy2B7Iec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft
Manifest number: 1580
Signing time: Sat 07 Jun 2025 05:00:35 +0000
Manifest this update: Sat 07 Jun 2025 05:00:35 +0000
Manifest next update: Sun 08 Jun 2025 05:00:35 +0000
Files and hashes: 1: NG7h3MLl7rsjKfJWWMgCk14YKA8.roa (hash: TfduHN4QjBYJ2zJVMdkqYrJchaPgW7zgFk7X9cdWumk=)
2: V0U31U828UIjG8gXA4hyy2B7Iec.crl (hash: NWVpzyiAnE8zTISnpM+p595wnyKyNI6O10FeMtEsE+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft
rsync://rpki.ripe.net/repository/DEFAULT/V0U31U828UIjG8gXA4hyy2B7Iec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:1d:2a:d4:ed:ef:a5:dd:0c:af:06:0d:64:be:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=574537d54f36f142231bc817038872cb607b21e7
Validity
Not Before: Jun 7 05:00:35 2025 GMT
Not After : Jun 8 05:00:35 2025 GMT
Subject: CN=d65d4bbdcb88921f0667f02f7874f0f29a9d3629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:08:55:e9:a6:d7:d2:fc:75:4c:46:71:f2:f8:
df:d0:1b:c5:73:59:64:2c:e5:ad:2d:a1:d1:a6:a2:
64:48:ec:58:a0:1a:c1:ec:57:71:42:1d:54:91:cb:
74:80:8b:87:47:4f:ed:b4:18:cc:3b:f8:fe:d1:5b:
c6:f7:1a:df:87:e4:9b:30:b9:4a:6e:8c:a5:2f:a6:
f6:20:95:e5:42:6b:7b:49:05:24:54:a0:c1:d9:b4:
bf:53:73:47:52:2b:10:08:a3:49:50:94:52:74:cd:
a9:37:1b:dc:b4:6c:89:cb:35:99:48:5d:b2:d6:85:
97:2d:ac:35:f0:34:13:39:00:b8:79:c3:e8:99:25:
26:16:40:77:ed:eb:22:e5:41:5f:fb:bc:79:eb:09:
23:57:2b:52:2e:b1:44:c6:87:25:d0:60:67:88:64:
15:91:7a:c1:44:7d:b4:fd:c4:85:8c:91:31:ae:c0:
b1:eb:9e:34:d2:aa:7a:a6:2b:92:be:39:fe:2e:ea:
23:b8:84:da:76:62:4a:43:4e:45:ae:46:71:cb:93:
ae:ed:d0:be:67:f9:c4:24:b1:5a:30:94:62:d4:b8:
b8:c7:50:66:af:6e:2e:c3:52:6d:71:3a:a9:40:56:
40:1a:2e:6a:1d:97:d2:b2:f4:39:d9:64:88:be:22:
db:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:5D:4B:BD:CB:88:92:1F:06:67:F0:2F:78:74:F0:F2:9A:9D:36:29
X509v3 Authority Key Identifier:
keyid:57:45:37:D5:4F:36:F1:42:23:1B:C8:17:03:88:72:CB:60:7B:21:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0U31U828UIjG8gXA4hyy2B7Iec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:cd:5c:e0:37:9e:6b:e3:47:23:a7:67:96:57:6e:41:d3:e5:
ea:d2:a7:35:7d:64:ad:14:a5:28:f4:a1:ae:e8:fa:38:30:24:
44:62:b4:07:ca:5d:0e:e3:47:a1:ea:e4:7a:ad:88:3e:7e:f7:
97:72:65:e0:3b:6c:74:a2:80:af:c1:56:25:1a:15:33:f2:4a:
fb:be:0f:8a:d4:58:4f:68:10:3c:b1:e4:15:ac:2e:cf:20:6b:
7d:47:42:fb:d1:f7:88:ef:39:b4:dc:f0:93:82:91:f6:b0:86:
f4:ff:26:03:7e:fc:ba:70:b2:ca:c9:33:35:6c:7e:a1:1d:79:
90:2b:d4:77:8b:5f:82:e9:b7:23:31:1a:e1:04:3f:de:7c:ac:
fe:f4:bc:10:0a:3a:2d:3d:54:2d:ef:a8:d1:23:79:99:5c:f3:
b9:fb:d1:4c:a7:62:c2:3d:87:85:86:40:48:63:c5:1e:92:96:
1e:57:d4:93:de:e0:72:37:f4:d4:8a:54:7e:eb:5b:d2:73:1f:
30:62:d4:0e:92:f0:3e:a6:82:a3:96:29:c1:9c:b3:56:61:a2:
c7:c9:4e:2a:b8:5b:c0:a8:9c:72:39:24:53:b6:08:ea:6a:66:
41:04:5c:87:e0:66:b6:df:02:12:59:6a:61:48:44:3a:ee:00:
d9:a0:fc:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:24:52 2025 by rpki-client