Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
File: vSX3G6QTFIO7m4I92IZR06_UTns.mft (raw, json)
Hash identifier: wRJocPBnkljXwGweDgUt+0wuh63fl2s9A86OAIIj8NE=
Subject key identifier: A5:D0:06:E1:34:E2:51:F2:0E:F2:3A:35:30:E3:61:05:3B:A1:62:47
Authority key identifier: BD:25:F7:1B:A4:13:14:83:BB:9B:82:3D:D8:86:51:D3:AF:D4:4E:7B
Certificate issuer: /CN=bd25f71ba4131483bb9b823dd88651d3afd44e7b
Certificate serial: 019747795C3355B192E113A640296344DF7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
Manifest number: 124D
Signing time: Fri 06 Jun 2025 23:00:25 +0000
Manifest this update: Fri 06 Jun 2025 23:00:25 +0000
Manifest next update: Sat 07 Jun 2025 23:00:25 +0000
Files and hashes: 1: VTzQEre1LOW5un0PlYn-CvmDAKI.roa (hash: fUzpWZIo72ujZLDiYOULGotM+6e+u6e7TR9QhDLmQyE=)
2: uOlfWw_ot1GNz-xDs0HfE8f0GXg.roa (hash: p6HLTz97eUfObx31ZQ7fD3+tg4SDQ5VAA/i07H3/8o4=)
3: vSX3G6QTFIO7m4I92IZR06_UTns.crl (hash: 0N80TjdizF4UBeTDFj2B4+9ns+KonuC2EZwDGVdT0z8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:5c:33:55:b1:92:e1:13:a6:40:29:63:44:df:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd25f71ba4131483bb9b823dd88651d3afd44e7b
Validity
Not Before: Jun 6 23:00:25 2025 GMT
Not After : Jun 7 23:00:25 2025 GMT
Subject: CN=a5d006e134e251f20ef23a3530e361053ba16247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f4:14:73:c5:a1:7e:00:71:81:cd:f6:e4:81:
81:72:92:b1:c5:7a:b2:d3:57:60:53:36:ee:a0:d3:
f6:62:0c:69:de:92:16:8c:18:0a:98:12:be:ae:6a:
3c:a6:12:6e:68:bc:65:65:28:da:30:3a:aa:b6:1b:
48:b9:ba:ea:be:93:14:81:3f:6f:8d:b3:aa:90:15:
61:ca:c8:d9:cc:6a:48:65:6c:20:9a:1f:c0:02:55:
41:3e:94:f8:de:bb:84:b9:f9:00:81:df:eb:08:17:
da:6b:48:18:ff:c0:f9:a7:6f:21:9a:67:25:8f:08:
b0:cf:04:e9:fb:3d:a6:14:95:cf:86:5c:1c:4c:3d:
23:4e:5a:f7:92:59:ac:de:f6:61:22:a4:f6:59:33:
bc:2e:35:8b:db:4f:94:e3:94:be:65:c1:c8:76:8d:
53:90:b3:39:0a:87:34:a8:f3:72:d7:8e:47:5f:15:
b2:8b:78:0c:2b:f4:96:20:a7:bd:2c:93:06:b3:d8:
3a:3d:63:51:81:7c:96:bf:c3:7d:1c:2a:59:c8:af:
cd:a4:16:88:12:fe:f0:00:97:20:c6:95:46:d3:15:
b4:02:82:50:c7:71:e6:ea:2b:64:db:ba:1a:37:73:
1a:ae:3e:dd:91:e7:1f:df:c6:43:be:e7:91:b4:d8:
ad:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D0:06:E1:34:E2:51:F2:0E:F2:3A:35:30:E3:61:05:3B:A1:62:47
X509v3 Authority Key Identifier:
keyid:BD:25:F7:1B:A4:13:14:83:BB:9B:82:3D:D8:86:51:D3:AF:D4:4E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:8e:cf:c7:57:f5:88:0b:34:f7:f7:f4:d1:ab:41:01:c0:3e:
fa:14:67:33:c1:e6:3d:3c:b9:4c:e1:76:b3:0e:cc:eb:5b:93:
c2:86:1d:88:7a:e0:b4:b1:b5:6c:6b:40:72:4a:a9:c6:7b:11:
10:73:e4:c9:6a:67:6a:a5:63:48:9c:37:26:1b:87:54:d3:56:
9e:20:a6:eb:af:d2:a9:eb:e1:a0:f6:25:a1:6d:5d:21:b3:79:
37:b2:5c:19:b1:1b:88:ee:d7:67:28:10:ab:57:ad:be:68:49:
9b:11:1d:d3:94:4f:72:af:d4:aa:37:26:32:04:80:14:2b:71:
74:62:96:9c:dc:0d:34:ea:97:40:c1:e4:66:dc:2a:a2:4a:d9:
33:93:33:6e:c5:1c:92:b9:44:cb:25:55:94:bb:47:72:54:e8:
2b:c6:ac:90:74:4f:7a:ff:32:cb:28:fe:cb:42:96:16:f8:90:
6d:e7:77:1e:d4:f2:d7:64:52:b3:a6:2b:5a:54:0f:85:42:89:
19:34:fa:4f:d1:1b:7c:10:84:f5:40:34:d8:46:16:1e:d2:1d:
bd:bc:70:10:1a:e1:ef:fa:a0:09:82:2c:d0:82:7d:39:4b:86:
41:7b:6d:41:4a:46:c6:ef:10:31:f0:3d:2a:dc:37:12:6e:51:
3e:6d:0c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:14:30 2025 by rpki-client