Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
File: vCYT4PJtOQfwljQL4FDCAdNY1tU.mft (raw, json)
Hash identifier: yo+74D5vfxmeNECPifyHnRYCeFgmr5+v7ejxXyEHvyM=
Subject key identifier: ED:49:33:C1:E7:8C:F9:C8:A3:84:3C:5C:42:16:A1:4D:09:45:5A:FA
Authority key identifier: BC:26:13:E0:F2:6D:39:07:F0:96:34:0B:E0:50:C2:01:D3:58:D6:D5
Certificate issuer: /CN=bc2613e0f26d3907f096340be050c201d358d6d5
Certificate serial: 0197458B3AAB37DFAC5B2E756F445B803075
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
Manifest number: 0232
Signing time: Fri 06 Jun 2025 14:00:41 +0000
Manifest this update: Fri 06 Jun 2025 14:00:41 +0000
Manifest next update: Sat 07 Jun 2025 14:00:41 +0000
Files and hashes: 1: urJ49fIkD8qF9GsD_zFu82_16aQ.roa (hash: CgkfZ2tObyCZ5wcx0o7Zqg/j5Bh2RYB4YUbPkk96BQA=)
2: vCYT4PJtOQfwljQL4FDCAdNY1tU.crl (hash: yL7NMZbQARuwjCOzC9Td9SO00hME5oJiKQKN0erft8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 14:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:8b:3a:ab:37:df:ac:5b:2e:75:6f:44:5b:80:30:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc2613e0f26d3907f096340be050c201d358d6d5
Validity
Not Before: Jun 6 14:00:41 2025 GMT
Not After : Jun 7 14:00:41 2025 GMT
Subject: CN=ed4933c1e78cf9c8a3843c5c4216a14d09455afa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c4:f2:8b:5e:ad:4e:1d:d6:f6:a0:19:d7:4e:
5c:a1:6b:41:f8:54:ef:d1:e7:e6:47:a8:20:b1:83:
60:41:5e:5d:d6:77:62:4f:e7:be:5d:06:3f:28:6f:
6e:45:d2:9b:57:79:10:eb:55:a1:5d:d4:40:4d:7d:
fb:7b:32:99:df:76:89:f1:b4:cb:00:ce:8b:0c:d2:
45:8c:66:0b:20:f1:af:72:62:7b:3c:8f:65:89:9a:
51:14:76:d7:d1:15:6f:21:95:dd:c7:0e:77:2e:11:
a9:ca:0b:98:d7:96:e1:1f:21:b2:11:53:4a:95:40:
06:95:a5:d6:87:63:e0:55:3a:c2:5e:9c:f5:8c:6e:
2e:c2:5d:93:87:d0:f3:4b:5f:64:65:5c:06:9d:a1:
2c:34:ba:27:59:34:17:66:29:44:7e:bb:7b:df:e4:
65:b0:64:95:d3:49:56:d3:5f:06:3e:82:83:3f:d2:
4d:0a:84:1b:dd:91:79:55:ff:77:8c:07:91:f8:68:
6e:6f:e5:c0:a1:d3:c4:b0:a7:e1:28:71:b3:39:5b:
47:09:ec:68:dd:c9:91:2b:14:61:17:01:5b:8e:44:
a8:94:8f:4d:c3:79:7c:a3:c4:db:4b:c2:eb:98:53:
9d:b9:24:ae:27:6b:d6:5d:6c:60:4a:8f:49:47:22:
7e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:49:33:C1:E7:8C:F9:C8:A3:84:3C:5C:42:16:A1:4D:09:45:5A:FA
X509v3 Authority Key Identifier:
keyid:BC:26:13:E0:F2:6D:39:07:F0:96:34:0B:E0:50:C2:01:D3:58:D6:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:ef:8d:66:20:7e:ed:1c:84:a2:43:fc:8b:a2:e4:ae:54:e4:
af:d8:ea:a6:7d:1a:02:26:aa:57:6e:66:3a:a3:17:b9:52:88:
fd:39:5c:b9:16:7f:57:36:dd:21:2f:0e:72:b4:43:5e:57:68:
cd:2d:6d:5e:9e:4e:33:15:f0:26:11:f8:9d:1d:2e:65:7b:bc:
c4:3b:94:29:a5:a9:93:f3:1d:e7:9d:87:9b:e7:d6:b5:8e:b2:
fe:f7:6a:4e:bd:d2:9b:61:1f:5a:25:2a:ec:09:03:b4:b1:c6:
3c:3c:ee:96:cb:77:15:b0:ae:b3:ce:c0:ff:87:88:6a:83:5a:
69:fe:18:93:a0:84:a0:cd:3b:85:0f:6a:59:8e:9d:16:76:28:
d2:23:9b:b7:59:c6:71:e0:17:07:a9:ee:7b:3d:28:ff:71:6f:
5b:0e:30:14:3d:6f:48:5c:e8:c1:9f:c6:58:2d:da:f7:f2:c4:
18:2a:ad:31:2d:c5:78:49:a2:f4:31:ef:5e:e7:9c:54:e3:40:
64:15:c0:1a:42:be:41:45:a9:75:e6:62:69:1a:4b:d0:09:79:
62:06:87:a0:76:45:b6:aa:d2:b8:61:11:d4:4d:78:7d:d4:78:
ad:b9:06:b6:ec:3c:b0:52:35:bf:a3:d4:10:9e:3a:8b:00:40:
2d:c1:6b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:20:26 2025 by rpki-client