Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/9e7d10-243f-47b5-afc4-356ee9776153/1/vRkRNDImIp0gPqMmqdadT8NGxXU.mft
File: vRkRNDImIp0gPqMmqdadT8NGxXU.mft (raw, json)
Hash identifier: VKuqonq5z8X30bUUCh0d2LC4Ng9TS9hKk/FreFq3eqo=
Subject key identifier: CF:F9:6F:DB:A5:80:33:7D:A7:09:69:6B:56:93:C7:D8:C6:92:88:F0
Authority key identifier: BD:19:11:34:32:26:22:9D:20:3E:A3:26:A9:D6:9D:4F:C3:46:C5:75
Certificate issuer: /CN=bd1911343226229d203ea326a9d69d4fc346c575
Certificate serial: 01974DEA0FAAAED81B5C0AF0A87F8AA5A539
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vRkRNDImIp0gPqMmqdadT8NGxXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/9e7d10-243f-47b5-afc4-356ee9776153/1/vRkRNDImIp0gPqMmqdadT8NGxXU.mft
Manifest number: 09B8
Signing time: Sun 08 Jun 2025 05:01:14 +0000
Manifest this update: Sun 08 Jun 2025 05:01:14 +0000
Manifest next update: Mon 09 Jun 2025 05:01:14 +0000
Files and hashes: 1: 8vm_891vteHi79TbQnGkI8cOQqI.roa (hash: JfWucuJfmWPdMg2hC2g4IUg1QZRP4I3zcWXq8eNKv+E=)
2: vRkRNDImIp0gPqMmqdadT8NGxXU.crl (hash: LDg5ticnfe0WcwV5fnwOERk8dMPwoUUAJtVfn/xsFpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/9e7d10-243f-47b5-afc4-356ee9776153/1/vRkRNDImIp0gPqMmqdadT8NGxXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/9e7d10-243f-47b5-afc4-356ee9776153/1/vRkRNDImIp0gPqMmqdadT8NGxXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vRkRNDImIp0gPqMmqdadT8NGxXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:ea:0f:aa:ae:d8:1b:5c:0a:f0:a8:7f:8a:a5:a5:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd1911343226229d203ea326a9d69d4fc346c575
Validity
Not Before: Jun 8 05:01:14 2025 GMT
Not After : Jun 9 05:01:14 2025 GMT
Subject: CN=cff96fdba580337da709696b5693c7d8c69288f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:88:7f:67:2c:53:3a:3c:76:6c:53:5e:44:77:
7f:f8:1e:4b:21:76:1f:b2:f6:44:bb:b0:5c:f4:e5:
52:cf:41:d9:2c:86:22:06:b9:4d:bf:47:99:62:e6:
5c:de:16:b9:ab:df:bb:39:40:af:3e:93:fb:59:09:
21:15:79:70:e2:7b:b9:81:ac:d1:65:be:52:99:82:
45:1a:ee:d2:41:7a:63:4b:bf:59:ce:d2:ed:cc:1d:
3c:b6:da:4e:d4:eb:5c:bf:95:0b:11:c8:89:9a:64:
ab:2b:22:12:47:db:65:2e:63:0e:c9:c0:2d:60:48:
54:cf:40:74:60:21:43:f0:52:fe:8f:64:ca:c4:3e:
34:44:84:e5:2b:b4:01:9b:f7:3f:c0:86:12:74:e3:
18:4e:06:ca:06:4f:d3:47:0e:29:d1:f5:87:ec:f2:
0b:53:79:64:f8:bc:0d:06:d5:b3:fe:69:d2:11:6c:
2c:36:ff:59:f0:d3:67:3e:b3:19:6f:f2:57:a8:ab:
55:59:25:8e:ec:7b:56:ea:2e:6b:e8:0e:e5:aa:a7:
b6:5b:7f:0e:8c:df:d3:9c:6c:8b:1e:65:ba:d3:a4:
59:2b:59:05:75:31:04:d5:28:20:78:71:5f:5d:56:
fc:fb:72:89:d7:ac:84:13:16:f2:e4:31:46:1c:01:
2a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F9:6F:DB:A5:80:33:7D:A7:09:69:6B:56:93:C7:D8:C6:92:88:F0
X509v3 Authority Key Identifier:
keyid:BD:19:11:34:32:26:22:9D:20:3E:A3:26:A9:D6:9D:4F:C3:46:C5:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRkRNDImIp0gPqMmqdadT8NGxXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9e7d10-243f-47b5-afc4-356ee9776153/1/vRkRNDImIp0gPqMmqdadT8NGxXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9e7d10-243f-47b5-afc4-356ee9776153/1/vRkRNDImIp0gPqMmqdadT8NGxXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:03:fb:2b:d4:d9:46:dd:ba:fe:30:4d:c0:7e:13:11:83:a5:
17:a6:41:40:d4:b4:c3:0c:a4:94:2c:30:54:3f:55:ab:1a:46:
22:bf:10:7c:90:48:3c:67:ae:10:bd:89:2d:bd:71:c0:64:1e:
bb:b6:6a:1e:51:8f:de:83:9b:e2:f1:78:ea:9e:6c:8e:e2:4e:
01:3b:38:6b:41:79:45:85:c4:07:6a:ba:c3:9c:9f:05:04:a0:
fc:02:55:04:5b:3f:0b:2a:94:75:13:74:cc:dc:c1:50:df:fd:
b0:e0:86:1c:c2:da:da:28:6e:8e:86:7e:a4:6f:40:3f:75:41:
c8:fa:b5:30:b8:69:11:2a:f9:5c:7e:8c:23:71:9e:79:00:23:
a3:46:78:f8:65:27:fa:61:78:b7:d3:9a:c2:bd:8a:ff:2c:5e:
7d:37:1f:db:f0:46:4b:cc:c0:12:47:1d:fc:e7:59:53:40:9d:
7e:b4:89:eb:4c:7d:58:65:55:d2:be:72:55:e8:43:a5:d2:f3:
ec:88:ab:15:3a:2d:fb:8b:71:e4:f7:1c:d1:11:8a:67:ce:e5:
f7:5d:75:06:dd:dc:79:22:3d:a7:f2:c9:9c:dd:d3:de:d0:b3:
88:2d:5f:a6:0a:5a:b3:a5:16:66:e1:dc:73:36:ff:0b:a5:d7:
97:b3:6a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:08:58 2025 by rpki-client