Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.mft
File: vR211yi9J2tMdS4SWlCP-HhK0oU.mft (raw, json)
Hash identifier: mMRJ8HwW4CnJ6SudEwg1wueoXxHd8VvqrQmgTOL7e74=
Subject key identifier: 68:BC:61:A2:7F:4C:98:05:77:6E:B7:5B:A2:0F:E0:41:98:1C:47:48
Authority key identifier: BD:1D:B5:D7:28:BD:27:6B:4C:75:2E:12:5A:50:8F:F8:78:4A:D2:85
Certificate issuer: /CN=bd1db5d728bd276b4c752e125a508ff8784ad285
Certificate serial: 0197CDCE204E04F9160F3BBF7C2D6F49449E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vR211yi9J2tMdS4SWlCP-HhK0oU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.mft
Manifest number: 1167
Signing time: Thu 03 Jul 2025 01:02:07 +0000
Manifest this update: Thu 03 Jul 2025 01:02:07 +0000
Manifest next update: Fri 04 Jul 2025 01:02:07 +0000
Files and hashes: 1: 7IfWcJSratNnlfLMrnbIuQWgR8I.roa (hash: S2czlmmJLkq2AObWA1vCv3NtLmwVMJ2FnTs6ITj1XcQ=)
2: vR211yi9J2tMdS4SWlCP-HhK0oU.crl (hash: GHzsanmgCuet6LyClBFUECOjvdY/tx7RxXrk9TwAOeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vR211yi9J2tMdS4SWlCP-HhK0oU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 01:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cd:ce:20:4e:04:f9:16:0f:3b:bf:7c:2d:6f:49:44:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd1db5d728bd276b4c752e125a508ff8784ad285
Validity
Not Before: Jul 3 01:02:07 2025 GMT
Not After : Jul 4 01:02:07 2025 GMT
Subject: CN=68bc61a27f4c9805776eb75ba20fe041981c4748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:37:9e:25:1b:14:a8:cc:b5:43:67:21:f9:d0:
35:2a:e1:87:75:fa:eb:fc:ef:67:f9:63:ce:d3:f8:
83:36:c2:2b:20:02:96:ce:59:f3:c7:b5:53:cd:0c:
0b:59:1c:6f:9d:1e:72:7a:43:0d:4f:80:fe:f4:42:
56:ff:32:d0:45:00:44:5d:10:17:f6:37:73:80:a9:
11:de:ff:fc:a8:02:ee:9f:ba:1c:bb:c7:1c:7b:1e:
e1:1d:64:c1:32:54:05:b4:55:77:4b:90:29:f8:77:
a0:d6:a1:bb:21:93:18:fe:a1:a2:04:0a:ed:a7:64:
68:09:5d:3a:cb:e2:56:ce:d9:b5:f8:62:29:f1:21:
1a:76:1f:91:16:ab:1a:e3:b7:09:ac:c4:9b:cc:19:
e8:14:2f:2f:2e:26:b6:17:6b:8c:36:79:99:fe:7b:
bc:a0:82:8d:e9:b1:2c:45:6b:e8:e5:a0:ff:0a:e2:
ce:0a:21:40:cd:47:a6:92:32:f9:2c:00:19:e0:ff:
02:e6:b5:dd:10:9f:ed:60:5e:a4:03:5d:94:47:31:
45:39:36:9a:1b:de:c2:8c:e7:08:0c:6f:10:24:45:
64:79:c9:5e:d9:33:9f:55:f7:8a:95:8f:61:67:c3:
f6:9e:bd:97:cd:2e:e7:27:68:1e:01:6e:1a:bc:97:
ea:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:BC:61:A2:7F:4C:98:05:77:6E:B7:5B:A2:0F:E0:41:98:1C:47:48
X509v3 Authority Key Identifier:
keyid:BD:1D:B5:D7:28:BD:27:6B:4C:75:2E:12:5A:50:8F:F8:78:4A:D2:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vR211yi9J2tMdS4SWlCP-HhK0oU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:74:f0:0c:48:78:ac:c4:15:e4:14:43:09:f5:de:cb:1c:ae:
25:eb:f4:0c:a5:3c:f9:89:87:9d:da:67:39:a4:77:0f:d2:1a:
dd:91:01:3d:24:4d:56:81:68:71:de:5d:87:64:05:fc:ae:00:
32:ee:b8:13:54:c7:38:ca:fe:55:b8:1e:2b:76:8d:72:20:7e:
fa:98:67:17:79:aa:91:b6:b9:52:80:3f:2e:df:b0:2d:49:1c:
63:f8:1c:b7:c2:bd:89:52:44:fc:f5:11:d8:e5:ba:c5:49:63:
35:0b:10:70:df:12:f0:63:ab:8d:8e:9a:7d:78:3e:94:62:8b:
42:89:4e:23:df:ee:94:20:1d:18:7c:1b:55:52:8e:da:99:d6:
ee:f2:47:a8:40:98:c4:d0:e3:13:b6:dc:01:f5:fb:f2:a0:33:
9d:19:2b:6b:84:53:d0:8f:57:af:85:b6:1c:17:ca:77:0b:69:
6b:09:16:5c:9f:b0:b5:f1:32:ad:56:97:86:89:55:f6:c4:20:
b3:05:ee:60:4c:da:9b:70:5c:19:bf:e6:c5:3a:74:e1:1c:32:
52:44:1e:b8:d5:9c:f0:2c:06:55:2c:79:23:3c:1f:ef:a3:5a:
b1:d4:3d:e8:60:e9:7f:7c:85:d7:f7:42:ff:6a:db:7a:e3:b8:
a3:71:9e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 07:35:32 2025 by rpki-client