Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft
File: vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft (raw, json)
Hash identifier: 0Vtc3uUBTj4D+YZ1L+mciPgVs7A9ovZ059Yebbn7RdM=
Subject key identifier: A7:54:28:A9:2A:6A:F7:C0:DD:AD:0F:1F:39:73:E3:F8:D4:DB:F0:B0
Authority key identifier: BD:B7:AA:C7:C4:93:BC:8A:A7:EC:70:59:D3:EC:76:BB:FC:2F:23:D8
Certificate issuer: /CN=bdb7aac7c493bc8aa7ec7059d3ec76bbfc2f23d8
Certificate serial: 01974967B9073B77E96504E0D9CC305A28F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vbeqx8STvIqn7HBZ0-x2u_wvI9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 08:00:23 +0000
Manifest this update: Sat 07 Jun 2025 08:00:23 +0000
Manifest next update: Sun 08 Jun 2025 08:00:23 +0000
Files and hashes: 1: 6pAZoUeyJNKjbIkJ9bo52GGChiE.roa (hash: H9UE5mQZ+sgOHGu/NqWUAUZ7b5ITdi+7fpdJ+eVNZFg=)
2: vbeqx8STvIqn7HBZ0-x2u_wvI9g.crl (hash: w9Fjhai8ld0qnpz/50Vd99u4zKAURCTsgX91FvwFBuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/vbeqx8STvIqn7HBZ0-x2u_wvI9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:67:b9:07:3b:77:e9:65:04:e0:d9:cc:30:5a:28:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdb7aac7c493bc8aa7ec7059d3ec76bbfc2f23d8
Validity
Not Before: Jun 7 08:00:23 2025 GMT
Not After : Jun 8 08:00:23 2025 GMT
Subject: CN=a75428a92a6af7c0ddad0f1f3973e3f8d4dbf0b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:0d:58:61:fe:b1:ca:7b:08:36:fb:96:bd:7c:
0d:32:a1:3e:b6:b0:f9:14:df:67:5c:cd:a5:98:d1:
7e:ac:ef:db:21:22:8e:8c:b4:ea:7b:38:ca:14:85:
b9:a6:a7:3f:87:90:4a:48:3e:ef:bf:e7:88:2a:27:
28:e6:53:dd:91:e5:24:03:98:23:60:c7:32:a4:89:
d2:42:8d:72:6a:56:1f:3b:14:65:7d:fd:89:62:fc:
17:ac:95:c9:78:ea:d5:8f:ac:32:df:81:26:f5:00:
33:7e:b2:ab:89:d0:f3:ba:fe:72:69:94:17:bb:c6:
6b:09:85:8d:9e:d4:cf:36:ff:f1:e4:f9:d3:a5:e8:
d5:5a:4b:18:38:3b:2a:ac:e0:ac:19:7d:fd:c4:be:
c0:9a:4d:c6:10:9c:ca:1a:cf:bc:1a:d6:5a:4c:81:
4d:74:ab:98:d4:f1:58:11:e8:d0:90:a1:e6:69:e8:
f6:4b:a8:bc:07:d6:b5:db:e0:b4:7b:83:d6:22:49:
7c:2e:76:92:2a:9e:7f:79:f7:1c:19:e1:5c:af:f6:
77:ef:3b:e9:e8:f1:44:50:ea:69:64:8d:25:92:ea:
03:cb:5e:97:34:7f:75:c9:a1:8a:c2:89:3d:16:86:
7d:c5:1c:43:68:a1:9b:6a:c5:b0:32:4a:bf:71:57:
ae:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:54:28:A9:2A:6A:F7:C0:DD:AD:0F:1F:39:73:E3:F8:D4:DB:F0:B0
X509v3 Authority Key Identifier:
keyid:BD:B7:AA:C7:C4:93:BC:8A:A7:EC:70:59:D3:EC:76:BB:FC:2F:23:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbeqx8STvIqn7HBZ0-x2u_wvI9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:31:2f:27:7f:aa:f5:ac:c6:ac:bd:82:74:44:e6:14:d1:d6:
03:5f:b0:d2:16:1e:d2:13:68:d0:e4:98:69:89:eb:b5:cd:3b:
a3:f8:9f:ed:23:7a:9b:ef:66:63:df:86:9c:2e:7e:e7:61:22:
4a:e0:9e:d0:ac:37:20:a3:01:99:35:07:3b:fc:6c:5a:0b:f4:
6c:a5:80:f5:dd:25:60:4c:4c:f1:1d:86:4c:b3:a3:56:99:b1:
81:73:1e:00:d2:5f:e9:7d:41:35:62:30:5c:45:8b:c2:37:45:
5c:58:ca:a6:ea:f8:fb:4e:49:58:27:7c:81:c5:95:0d:a1:16:
08:4b:fe:ed:6a:01:a5:7b:55:3f:5f:4f:05:cc:15:fd:68:c2:
04:58:b7:fa:31:a9:37:fe:1a:44:76:45:41:4c:ba:61:17:19:
2e:0a:f1:ec:a8:e7:8c:6e:e1:f5:b7:50:69:5a:0f:d2:3b:ea:
de:9c:3d:80:c5:59:29:69:10:73:5e:4e:ee:8e:f0:0d:74:91:
bb:cb:98:ff:e2:f1:18:8d:e3:99:76:88:16:7b:39:92:ad:b9:
83:d2:e8:c2:52:51:d4:64:02:59:06:13:a1:a0:93:22:46:34:
78:78:b0:d0:2a:b4:1e:01:35:c1:54:7d:62:c9:c5:07:26:2e:
b9:9d:6f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:59:59 2025 by rpki-client