Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.mft
File: vJxAXxQuU-tnscSZI6t5XoQyjJs.mft (raw, json)
Hash identifier: UAOK0aPfjcU9Nb8PDsMYqd5YwRCSHNpXyjSEjbaNKjI=
Subject key identifier: 45:4A:CB:AE:48:6E:63:C0:67:EA:C8:B8:36:0E:E9:5F:BD:C0:6A:ED
Authority key identifier: BC:9C:40:5F:14:2E:53:EB:67:B1:C4:99:23:AB:79:5E:84:32:8C:9B
Certificate issuer: /CN=bc9c405f142e53eb67b1c49923ab795e84328c9b
Certificate serial: 019746D4DC390DFA8167DF8CE4E921A649EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJxAXxQuU-tnscSZI6t5XoQyjJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.mft
Manifest number: 157A
Signing time: Fri 06 Jun 2025 20:00:44 +0000
Manifest this update: Fri 06 Jun 2025 20:00:44 +0000
Manifest next update: Sat 07 Jun 2025 20:00:44 +0000
Files and hashes: 1: irXjb7CbWugP3w5JDOFWDswYhlc.roa (hash: xfc5cfeM1faq3Raf49DNOnepZD3IOLsHNfYtcKklaZE=)
2: vJxAXxQuU-tnscSZI6t5XoQyjJs.crl (hash: q6h1d7POfe2QluemNM+i8wUhGoMO9bvgPrNaNJZov5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJxAXxQuU-tnscSZI6t5XoQyjJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:d4:dc:39:0d:fa:81:67:df:8c:e4:e9:21:a6:49:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9c405f142e53eb67b1c49923ab795e84328c9b
Validity
Not Before: Jun 6 20:00:44 2025 GMT
Not After : Jun 7 20:00:44 2025 GMT
Subject: CN=454acbae486e63c067eac8b8360ee95fbdc06aed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f0:9f:7b:fb:45:d0:a8:60:92:b8:81:cd:47:
00:c2:3a:96:58:85:4c:cb:90:d2:15:4a:57:8b:dd:
a0:e5:12:25:86:61:6a:b5:7e:e2:fe:06:33:e3:02:
2a:7f:69:21:1e:80:c7:26:b7:d1:8e:74:8a:f9:04:
5c:82:19:1c:2a:f7:aa:d6:f7:29:d6:08:84:c1:d0:
ba:66:26:5c:f2:d4:33:3f:e6:c2:de:db:d8:b9:e8:
63:6f:05:cd:91:75:de:89:4d:79:c9:51:27:36:1b:
f0:7b:cd:5a:35:65:5f:eb:3b:c3:c4:ef:3c:d3:1d:
e8:a3:a7:f6:6a:90:6b:6a:35:b0:75:fa:64:1b:0b:
1d:5f:cf:51:f4:11:fe:f5:cb:05:3f:4a:8e:2d:ad:
da:77:e0:e5:ab:f4:a9:21:51:4d:48:b2:16:d2:72:
c6:b5:f7:a6:7a:ff:14:af:10:8a:ee:17:ec:0b:a8:
cb:07:68:0a:95:e4:64:6c:76:b6:c6:9d:0d:15:a3:
08:be:a8:f8:04:29:ec:18:6e:c5:06:22:d8:c6:c3:
0e:df:65:99:2c:7a:11:68:ab:f2:3e:38:28:bf:75:
d5:f4:08:8d:65:23:6a:9b:81:05:fb:03:49:91:8e:
2a:0e:d1:80:49:81:9a:63:c0:e8:4a:15:62:69:f1:
84:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:4A:CB:AE:48:6E:63:C0:67:EA:C8:B8:36:0E:E9:5F:BD:C0:6A:ED
X509v3 Authority Key Identifier:
keyid:BC:9C:40:5F:14:2E:53:EB:67:B1:C4:99:23:AB:79:5E:84:32:8C:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJxAXxQuU-tnscSZI6t5XoQyjJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:1d:e2:67:aa:ed:99:cb:22:21:eb:e8:df:f5:b3:51:2e:e0:
61:c4:12:75:f0:7a:f4:02:ad:cd:a5:6c:b2:e5:62:18:07:c1:
5c:20:15:98:66:e2:48:b3:1a:7c:11:3c:4a:38:bc:05:a6:87:
bf:b3:35:a9:0f:63:b4:58:9a:44:ea:94:2f:92:44:a6:47:ec:
d3:c3:01:8f:26:67:a5:4d:27:55:5c:a1:74:d0:ee:58:25:91:
34:9d:fb:71:85:c6:e8:b9:48:a7:f4:46:b2:b0:89:d7:1b:11:
1b:fd:d3:78:f1:25:91:f0:11:e2:03:ce:12:75:89:ad:4e:7b:
a0:fe:c0:6e:5d:ed:bd:d8:c4:ab:51:f1:db:36:a6:fc:5f:14:
e1:6f:61:8c:a8:90:f6:a8:75:77:39:66:7e:bb:4e:71:34:b6:
34:e8:78:00:86:d4:6c:68:99:11:4a:21:82:5e:10:72:2e:e7:
0f:b3:2f:ce:be:74:1f:18:ba:02:1c:63:71:a8:f9:27:15:25:
8c:6c:90:e0:7d:ca:b7:df:86:b4:61:06:3b:2a:f7:b1:a5:44:
a6:d0:a0:55:fd:15:72:d2:f1:68:e1:5e:3f:06:d7:51:14:13:
03:98:9a:a6:da:8d:66:5f:1d:fb:d1:01:3f:cf:de:a2:0c:79:
9b:81:2b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:16:36 2025 by rpki-client