
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft
File: fVexU-7RELy9FNx-M_1H8C4v4HE.mft (raw, json)
Hash identifier: TG8b3dxH7MjeFkrjikutlHLnSLpJ6xTE8+WlUkFXfrQ=
Subject key identifier: 52:99:B8:68:21:CC:A7:7F:10:09:A6:4A:9A:0F:40:6D:1E:4B:2F:55
Authority key identifier: 7D:57:B1:53:EE:D1:10:BC:BD:14:DC:7E:33:FD:47:F0:2E:2F:E0:71
Certificate issuer: /CN=7d57b153eed110bcbd14dc7e33fd47f02e2fe071
Certificate serial: 01974855430BF53617195FB5B55D18C81F2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVexU-7RELy9FNx-M_1H8C4v4HE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 03:00:36 +0000
Manifest this update: Sat 07 Jun 2025 03:00:36 +0000
Manifest next update: Sun 08 Jun 2025 03:00:36 +0000
Files and hashes: 1: 1gktZR41lM7jL9DWPWwIpWV6M78.roa (hash: HJiBs8EKqMUy6AK9Z/fItBE1opDLfro1xaIJHGboLfU=)
2: fVexU-7RELy9FNx-M_1H8C4v4HE.crl (hash: ivLvYgty5uHLdydI8066Eo41lXaebIQVnfeG2PjCIio=)
3: kUIltMqyJJ6z_MdFBE4UK_gpE0M.roa (hash: pWOc8zM/cAP0pnHrLKIMmGeqVgPcNsErRAC9f0Wl2a4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVexU-7RELy9FNx-M_1H8C4v4HE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 03:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:43:0b:f5:36:17:19:5f:b5:b5:5d:18:c8:1f:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d57b153eed110bcbd14dc7e33fd47f02e2fe071
Validity
Not Before: Jun 7 03:00:36 2025 GMT
Not After : Jun 8 03:00:36 2025 GMT
Subject: CN=5299b86821cca77f1009a64a9a0f406d1e4b2f55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ec:b5:04:81:5c:5b:22:2b:72:fd:3d:d5:96:
42:7c:f8:c6:2f:0a:0b:73:ca:ef:dc:1f:94:d3:d3:
cd:15:72:c5:80:32:aa:f2:27:6a:33:a1:be:bd:40:
46:ee:25:09:cb:be:6f:04:60:5a:9d:e4:89:92:6f:
d4:6e:4e:03:20:07:e4:1c:0b:7b:57:ee:c4:13:29:
81:be:83:da:5c:30:99:35:e7:61:50:1c:68:f5:43:
eb:d6:36:69:ff:c3:dc:f0:11:66:04:65:23:51:8c:
fc:2e:87:4f:10:5d:a2:d5:68:69:52:3d:76:13:03:
2c:f9:77:19:bf:37:d2:30:c0:d9:e1:a3:a8:b0:6d:
87:67:8b:c2:e5:c0:e9:52:ac:e4:15:07:dc:0a:77:
f4:c2:44:30:c8:60:88:68:74:f3:6e:d4:7b:3e:cf:
de:5e:80:dd:e2:73:72:01:33:84:8d:4c:fb:b4:d1:
f1:4f:4e:90:07:3a:10:4a:a2:9a:37:1e:00:b5:cf:
6e:d5:e7:57:52:55:98:dc:a4:a9:fb:07:21:80:43:
11:6b:c6:c7:c2:75:5f:51:ac:df:73:f0:f2:68:b4:
b3:f6:d3:99:86:45:b2:ab:0c:16:54:02:83:53:f7:
4e:86:8a:29:59:46:06:b9:df:a2:21:0e:88:1d:15:
b6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:99:B8:68:21:CC:A7:7F:10:09:A6:4A:9A:0F:40:6D:1E:4B:2F:55
X509v3 Authority Key Identifier:
keyid:7D:57:B1:53:EE:D1:10:BC:BD:14:DC:7E:33:FD:47:F0:2E:2F:E0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVexU-7RELy9FNx-M_1H8C4v4HE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:cc:74:29:b7:fa:31:fa:e7:dc:24:f7:a7:1f:21:1b:5f:eb:
b9:95:8e:57:2e:b6:f0:47:ea:74:c7:73:f5:01:c6:46:c1:f8:
70:ab:27:0a:45:55:47:b8:49:a0:5f:f8:95:37:1c:b7:04:f1:
2b:b9:62:fa:10:dc:3a:80:90:a4:b1:c6:3e:3c:ce:57:fc:76:
cf:4d:96:1c:16:fe:1e:25:70:5a:12:38:c4:14:e9:9f:37:f4:
8b:b2:1e:4c:31:2c:80:f8:c4:be:02:38:f8:49:ab:9c:48:c6:
e5:55:82:ca:31:7a:d4:ae:78:bb:60:83:ef:9b:c4:6b:69:1a:
84:ae:f4:18:fd:b0:f2:99:35:df:42:a0:e7:29:22:bb:12:1a:
1b:6b:c4:5f:8a:a2:08:68:75:ed:bb:12:e2:e6:1f:a8:f5:10:
53:1b:bd:a8:50:09:95:0d:17:91:21:25:4c:da:38:75:1d:cb:
db:ad:9e:2f:f4:4c:c4:e6:8d:82:6e:a0:cd:c9:c5:f0:ac:2b:
ed:a4:fe:12:29:d2:82:ad:7d:6e:97:4a:6c:0b:51:e8:9d:a3:
da:29:02:bd:21:ff:de:12:08:ef:b1:1d:8b:dd:de:99:66:40:
73:cb:00:95:c4:06:c6:9a:de:c5:39:b4:17:f8:6a:de:a0:8d:
e0:03:9d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:34:17 2025 by rpki-client