Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
File: vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft (raw, json)
Hash identifier: 2GWoPVBf71qouvOLEudQrXZ5SE+yMCQqs/vEu5cASSI=
Subject key identifier: F5:BC:17:8E:30:8A:5D:BE:C1:B8:6A:27:23:A0:E5:DB:44:D0:1B:54
Authority key identifier: BD:74:10:F4:E6:2C:77:72:C7:8D:57:50:B2:1F:C2:14:33:9E:94:A2
Certificate issuer: /CN=bd7410f4e62c7772c78d5750b21fc214339e94a2
Certificate serial: 019747E7B33DE5587DEFA8F27FE376EA2DCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 01:00:56 +0000
Manifest this update: Sat 07 Jun 2025 01:00:56 +0000
Manifest next update: Sun 08 Jun 2025 01:00:56 +0000
Files and hashes: 1: FG-qCrDb70MUjmpPeG_ABqm2g4I.roa (hash: hYgrw8pe3ohnrPXEYOqOtmTKKEz+HL/P8NWGWnKRQYA=)
2: hsH2HQBoiRDw665UcWSV1lTXYOg.roa (hash: 3M/n4+ffcKMFrGFddlkXam66igSrpB60cTzmDDLi+7s=)
3: vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl (hash: qVQkqtmmgCoQKv9LPq5rfeUarBLZqJqWmW87aIuGKvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:b3:3d:e5:58:7d:ef:a8:f2:7f:e3:76:ea:2d:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd7410f4e62c7772c78d5750b21fc214339e94a2
Validity
Not Before: Jun 7 01:00:56 2025 GMT
Not After : Jun 8 01:00:56 2025 GMT
Subject: CN=f5bc178e308a5dbec1b86a2723a0e5db44d01b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:82:b1:3d:53:92:d2:a1:ac:d4:7d:6f:91:0a:
87:2e:f4:ed:29:cb:03:55:0b:86:99:16:05:f8:02:
fb:8e:7e:12:8e:a3:fe:58:f8:94:9a:d1:ff:3a:4d:
05:b6:a3:1f:a8:d1:c9:13:b8:12:7a:b5:5b:ff:2d:
f4:f9:34:dc:52:d0:06:55:28:48:2b:a5:36:7a:69:
f9:62:da:11:1c:a8:0f:9e:6f:26:57:17:36:7d:c1:
fc:ad:34:08:1a:fd:d4:7f:8d:ac:70:bb:d6:0e:c0:
f4:d0:0f:99:fa:d5:84:09:86:90:b5:05:f4:bf:6c:
66:de:27:75:3b:9c:39:ee:11:70:9e:63:81:15:6d:
b6:07:d7:8b:79:ed:25:f3:c7:97:6f:c0:5d:c7:c2:
0f:ea:49:26:97:7b:72:6e:ae:bf:69:3e:24:2f:b7:
a0:73:09:f1:34:b1:ef:df:45:c2:35:b5:07:f5:68:
f4:9b:f0:44:7a:79:66:a5:e2:50:b8:a1:91:fa:fb:
fa:52:6a:f2:b3:59:1e:c0:d6:43:97:0e:65:88:4b:
36:64:88:a8:1b:64:6a:f7:94:62:62:b4:d6:d7:00:
9c:74:38:1e:74:5e:eb:e7:50:05:dc:fc:59:08:31:
b2:0c:95:5a:ea:18:d8:35:6d:06:2b:95:ba:a8:73:
03:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:BC:17:8E:30:8A:5D:BE:C1:B8:6A:27:23:A0:E5:DB:44:D0:1B:54
X509v3 Authority Key Identifier:
keyid:BD:74:10:F4:E6:2C:77:72:C7:8D:57:50:B2:1F:C2:14:33:9E:94:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:60:ad:02:57:ee:17:ee:1b:4b:73:90:f4:24:61:53:42:a2:
a4:ea:b7:41:85:d0:46:d8:c4:98:09:b5:01:cb:ff:d8:16:0e:
0e:9b:d7:44:65:7e:4b:de:a0:4d:90:a9:27:13:12:ef:c4:ed:
fd:8d:d6:41:72:db:30:2f:b6:b1:f8:97:78:98:18:83:d1:d9:
ad:60:ce:4c:d8:46:f6:ca:96:85:14:3d:4e:c6:8c:b3:9b:ac:
e3:3a:95:76:36:25:67:64:c8:a5:9b:31:d7:c1:f3:51:db:8d:
85:18:8b:17:9f:33:92:6e:b0:6b:16:4e:7c:d0:3b:21:90:9a:
fc:c1:c6:de:3c:c0:c0:4a:b8:a7:39:e3:c9:8d:74:38:69:2c:
86:cd:39:d1:e3:c8:ff:a0:99:56:f0:e6:6a:14:fe:c0:5f:a8:
28:18:2c:90:8d:c5:fd:d7:f2:94:80:c9:9f:70:c0:4c:85:67:
3f:65:7d:35:fc:03:7a:85:6f:8a:3f:10:36:56:cd:3b:fe:6f:
03:ce:d0:50:35:8f:54:f5:df:eb:37:5c:2b:a5:1d:33:13:92:
ba:fe:75:f6:60:42:db:20:cb:1d:06:f9:5d:bf:9b:10:da:0b:
fb:60:51:08:e6:ff:f1:a7:1c:da:ab:d0:f7:ac:96:5b:20:12:
cd:de:42:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:34:38 2025 by rpki-client