Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
File: vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft (raw, json)
Hash identifier: j6O5fqpbeyUxUVugzQoST4G4vXz0BaxF+lp6kcv+iOw=
Subject key identifier: 4A:A7:26:46:F9:4F:6C:7A:13:4C:5F:6C:83:AA:FD:73:7D:98:E1:E2
Authority key identifier: BE:E0:A9:49:97:67:2A:92:0A:29:0C:CB:FD:04:91:26:F7:07:5C:99
Certificate issuer: /CN=bee0a94997672a920a290ccbfd049126f7075c99
Certificate serial: 019853B1E74BF8F204C409013EDB93A0D777
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vuCpSZdnKpIKKQzL_QSRJvcHXJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
Manifest number: 1607
Signing time: Tue 29 Jul 2025 01:00:24 +0000
Manifest this update: Tue 29 Jul 2025 01:00:24 +0000
Manifest next update: Wed 30 Jul 2025 01:00:24 +0000
Files and hashes: 1: 48X0W84hRzbzikjtu3NRrgiUVes.roa (hash: P9ZEa8jjn4X+qLk45EN8bhgk1iRKqKb3xPDq8e5YB94=)
2: TDfXhLaJicDqER43mZJ9Gt5o4NM.roa (hash: xPlhAH8Cus6o3YMGrcO3bp4+1D+Angi7zwsI6/D/vLM=)
3: vuCpSZdnKpIKKQzL_QSRJvcHXJk.crl (hash: I0aGGGTkKNvHuSB8i5mUw6PJ4UbhHK0IVxwBgn5rPbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vuCpSZdnKpIKKQzL_QSRJvcHXJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:b1:e7:4b:f8:f2:04:c4:09:01:3e:db:93:a0:d7:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bee0a94997672a920a290ccbfd049126f7075c99
Validity
Not Before: Jul 29 01:00:24 2025 GMT
Not After : Jul 30 01:00:24 2025 GMT
Subject: CN=4aa72646f94f6c7a134c5f6c83aafd737d98e1e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:35:fa:57:05:91:f1:d2:3d:c7:00:a6:6b:be:
6c:96:b0:08:49:a4:67:94:60:39:92:f8:60:cb:7d:
90:42:ea:00:61:09:38:bd:1c:f5:f2:a2:05:5c:0b:
95:b6:ca:1a:3b:4a:cb:9e:72:33:b3:b7:1c:73:19:
29:12:85:a0:46:42:ee:c1:f0:dd:29:f7:fa:21:ea:
24:f0:14:2f:73:d4:c2:db:06:0f:cf:0b:86:5d:61:
a3:01:82:2b:a1:74:87:92:1d:af:2f:f7:7b:3a:ee:
af:50:15:b6:b5:f6:bb:85:80:3c:08:d5:f9:0c:23:
50:a7:0d:0c:f0:5e:67:ac:31:1e:ed:fe:d5:d5:e8:
db:3f:c4:91:88:12:99:91:84:c2:4f:6f:3b:54:96:
15:8f:41:50:88:4a:da:c4:22:15:7f:99:28:a7:17:
cc:9b:13:8d:c6:1b:ad:5b:1f:7a:d2:3f:a3:04:2c:
54:08:8a:07:97:4c:64:c6:02:81:e1:a9:f9:20:ce:
08:a6:c3:3b:55:12:95:fa:87:bb:5d:f4:da:d6:a9:
32:9d:79:9e:96:af:a9:83:f6:c4:3a:41:51:fa:ba:
fc:03:dd:ec:c5:7e:6a:11:5b:70:00:70:ed:10:76:
de:bc:aa:ee:f8:8c:57:df:27:c6:24:66:70:55:b8:
82:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A7:26:46:F9:4F:6C:7A:13:4C:5F:6C:83:AA:FD:73:7D:98:E1:E2
X509v3 Authority Key Identifier:
keyid:BE:E0:A9:49:97:67:2A:92:0A:29:0C:CB:FD:04:91:26:F7:07:5C:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vuCpSZdnKpIKKQzL_QSRJvcHXJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:62:79:6c:44:97:d6:77:b2:5a:2f:fe:dd:45:ae:72:aa:85:
e2:a6:0e:96:90:f0:1a:45:5f:64:3f:ab:ef:5d:3e:c0:90:1a:
31:3d:1f:fc:3f:35:92:c1:7f:e0:40:c3:8c:5e:97:5e:fe:c3:
7d:01:9e:ff:99:9d:20:35:5d:8c:ca:4a:5b:a7:1b:53:f0:bf:
d1:c6:ab:16:b1:25:93:85:49:b9:f7:63:84:2e:cf:c4:3e:ea:
2e:a5:3a:d1:83:40:4e:b7:9e:8b:53:7d:de:d6:6c:90:f4:2d:
6d:7c:93:d6:a8:c3:95:f2:85:36:59:fc:02:5b:83:39:2f:1c:
14:3b:bd:23:08:64:e9:8f:f5:8f:52:40:ad:28:cd:7b:1e:f5:
f3:83:c5:db:60:db:cf:cc:df:5a:d6:bf:16:50:35:1a:35:d2:
8a:d5:b9:68:ea:cc:5b:48:74:ee:56:01:78:13:cb:87:15:8d:
f4:78:66:c9:bc:e4:22:2a:b4:09:92:8f:ab:3c:5f:a2:1e:e1:
af:61:0b:96:e0:9e:11:7d:17:a5:fd:cc:ef:1a:7a:5b:bf:aa:
d4:68:c3:bc:08:bc:15:bc:be:82:c3:71:07:51:86:1d:4d:24:
92:cb:a5:c5:f2:53:ee:80:41:27:e0:a3:d5:b1:52:73:f2:cb:
aa:da:84:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 08:46:03 2025 by rpki-client