Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.mft
File: vPnwsJRzjFKC-_SzBnDsX9y1id8.mft (raw, json)
Hash identifier: trVEHDWOxCRfvDkyU0Sh8VWkjL2T8AkPlSArrOV1bp8=
Subject key identifier: 71:84:C9:CE:5C:B0:02:F9:47:6F:65:86:6F:F5:5D:E1:9D:75:0C:20
Authority key identifier: BC:F9:F0:B0:94:73:8C:52:82:FB:F4:B3:06:70:EC:5F:DC:B5:89:DF
Certificate issuer: /CN=bcf9f0b094738c5282fbf4b30670ec5fdcb589df
Certificate serial: 0197C9F0B89B3E5C15C29D202B9D519B02AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vPnwsJRzjFKC-_SzBnDsX9y1id8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.mft
Manifest number: 15BD
Signing time: Wed 02 Jul 2025 07:01:25 +0000
Manifest this update: Wed 02 Jul 2025 07:01:25 +0000
Manifest next update: Thu 03 Jul 2025 07:01:25 +0000
Files and hashes: 1: GcXZXurTGrAnFXKjvUHU9XD_YyQ.roa (hash: CVqER74xo0XyQrFlwwf0CdK9BC9SAVXvCBJxlFB4CBw=)
2: vPnwsJRzjFKC-_SzBnDsX9y1id8.crl (hash: hFUJ5NzCqvBM0w35y5P1skpwVK0XG3ulavLLV3TTkc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vPnwsJRzjFKC-_SzBnDsX9y1id8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 07:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:f0:b8:9b:3e:5c:15:c2:9d:20:2b:9d:51:9b:02:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcf9f0b094738c5282fbf4b30670ec5fdcb589df
Validity
Not Before: Jul 2 07:01:25 2025 GMT
Not After : Jul 3 07:01:25 2025 GMT
Subject: CN=7184c9ce5cb002f9476f65866ff55de19d750c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:86:5f:b3:5b:5b:6d:94:bd:e2:c1:cf:92:56:
88:70:41:3e:dd:19:a6:06:62:57:38:a8:71:cf:8e:
f6:18:b4:97:d6:ff:b9:6f:47:88:2f:7d:f5:13:60:
f4:72:a9:1b:f3:ea:bd:b6:39:1f:6a:05:b2:3b:45:
09:0b:86:a6:e4:d1:01:65:26:ff:63:a6:fe:e7:95:
16:30:2b:df:99:ef:23:b4:21:97:a9:c7:5b:a1:bb:
4d:f8:05:7f:d8:d6:87:22:38:5a:8c:73:c8:3f:42:
7c:a1:ff:36:2a:24:d2:2c:01:aa:7b:5b:8d:74:e5:
7a:0a:94:39:0f:8a:38:68:30:03:38:39:e3:94:66:
16:98:75:cb:cb:a5:b8:48:12:b0:cd:7d:61:9b:68:
38:90:b0:86:4d:db:22:f0:cf:e2:f9:e3:ce:39:65:
36:23:16:1f:5e:ea:a4:02:44:6a:9c:9a:db:4a:89:
e1:87:25:8f:f9:4a:3f:42:2c:cb:35:93:ea:92:a0:
aa:70:44:4b:b4:65:30:45:66:39:33:ed:30:10:bf:
e0:d0:2a:d6:d1:ac:06:3a:f0:2c:f3:f8:c6:3f:de:
26:0f:24:f3:99:ec:e3:c0:48:90:5c:b5:64:88:29:
82:57:e7:16:52:96:00:0b:8a:c4:cc:29:16:44:f0:
ad:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:84:C9:CE:5C:B0:02:F9:47:6F:65:86:6F:F5:5D:E1:9D:75:0C:20
X509v3 Authority Key Identifier:
keyid:BC:F9:F0:B0:94:73:8C:52:82:FB:F4:B3:06:70:EC:5F:DC:B5:89:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vPnwsJRzjFKC-_SzBnDsX9y1id8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:59:e8:da:7b:46:00:23:80:ae:66:92:7a:a6:0b:1f:1a:8a:
8b:18:d4:01:0f:77:61:49:d0:b0:06:99:ca:d7:4e:ab:e9:0e:
4a:a6:40:9d:d3:4b:a9:92:40:aa:1d:66:c7:0c:ca:a6:5d:e0:
32:38:3a:16:ac:6d:48:e9:ce:e0:4b:c5:43:1d:b8:a9:a1:87:
28:37:18:b7:9f:6b:65:14:b8:9a:84:92:b4:55:0d:70:dc:1e:
bc:d9:90:64:0a:88:24:12:35:83:55:b9:3a:06:1e:24:7b:7d:
a9:10:4b:85:d8:48:93:68:1f:9b:d5:3a:c5:30:49:fd:d4:dc:
eb:7f:ac:1b:84:dd:68:94:a0:69:d4:2d:dc:9b:02:94:98:82:
33:6a:14:fe:bb:81:d8:d4:e5:20:3e:bf:66:a6:b4:3b:94:ec:
43:d6:0e:91:81:40:66:20:77:4d:36:3f:d7:f4:c6:10:98:1e:
d4:7e:d0:31:af:b9:98:71:01:c6:25:95:44:68:f4:b3:22:32:
54:0f:25:3e:2c:dc:93:c3:53:72:0a:1f:7e:b0:97:92:88:12:
f8:a1:6b:02:a7:76:5e:2a:78:9f:77:58:e1:2a:a0:b5:b0:6e:
38:2a:72:2b:7e:56:1a:fe:ba:97:00:9c:dd:33:1b:42:32:93:
29:e0:d0:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 13:52:07 2025 by rpki-client