Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.mft
File: vklD9SA9Q0YKE61OqdfVuVDGE80.mft (raw, json)
Hash identifier: vxusozMtdLhmLtkOpQBQKuJUSazrsy7NPYJWMq6dzi8=
Subject key identifier: 43:DA:C2:4E:04:09:1C:BB:E6:FC:91:AC:F3:A3:47:4D:8F:80:7D:7E
Authority key identifier: BE:49:43:F5:20:3D:43:46:0A:13:AD:4E:A9:D7:D5:B9:50:C6:13:CD
Certificate issuer: /CN=be4943f5203d43460a13ad4ea9d7d5b950c613cd
Certificate serial: 01974A0CDD37FCF1F5D0D499A1E0745C382F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vklD9SA9Q0YKE61OqdfVuVDGE80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.mft
Manifest number: 1465
Signing time: Sat 07 Jun 2025 11:00:46 +0000
Manifest this update: Sat 07 Jun 2025 11:00:46 +0000
Manifest next update: Sun 08 Jun 2025 11:00:46 +0000
Files and hashes: 1: FvmWK8AMx-teHQ5tWkhhyLwCTdQ.roa (hash: coWDehO4MQ177+hdG6n28lrng5GzRH0clwFKkBo/jyg=)
2: P0eLHT9-M-aTFtL_3Zf0a5B6Ndg.roa (hash: uyQciIXo2hsIiWCjmOsDyTK0I4LR9Xab2ALuXJDMpzQ=)
3: s1Gqcb4cma0dzStLOOm8HvEO5jQ.roa (hash: NwYmvG8onNhwCfDmhQjAdYoUGMe+Y6N54avr4BG3ekE=)
4: vklD9SA9Q0YKE61OqdfVuVDGE80.crl (hash: mXO8rO6wiGm716IVIBLFfMcN623599W2rE7aHG7Dy84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.mft
rsync://rpki.ripe.net/repository/DEFAULT/vklD9SA9Q0YKE61OqdfVuVDGE80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:dd:37:fc:f1:f5:d0:d4:99:a1:e0:74:5c:38:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be4943f5203d43460a13ad4ea9d7d5b950c613cd
Validity
Not Before: Jun 7 11:00:46 2025 GMT
Not After : Jun 8 11:00:46 2025 GMT
Subject: CN=43dac24e04091cbbe6fc91acf3a3474d8f807d7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b6:3a:e9:06:c5:b8:fe:00:59:fc:f4:31:76:
31:7a:b6:e6:f9:18:d9:c0:47:69:7e:39:56:49:9e:
dd:5f:94:24:8b:80:eb:d4:96:05:9b:b4:16:ee:49:
54:e6:5d:37:98:10:c8:6e:3d:bc:42:d7:4c:0f:39:
e5:93:ab:ea:6d:a0:ec:1f:a2:e3:02:64:c3:08:1e:
30:62:ca:83:4f:df:bc:0e:76:79:a9:07:95:e4:7a:
f7:ad:00:8f:42:6c:ae:ee:cb:73:32:c9:d1:95:58:
01:34:77:fe:89:b1:92:65:64:27:ec:74:4c:c6:f9:
66:bb:68:1a:15:04:1a:d1:0f:0f:8c:d9:da:4c:70:
5a:d8:ea:0c:80:98:75:39:a0:9c:89:06:3e:65:0b:
09:ef:0d:d4:72:fe:ea:96:12:28:0c:cf:40:36:3e:
ff:0d:ee:cd:a0:12:fd:7c:fd:51:23:6d:3f:94:d5:
7a:4b:68:04:65:30:e6:d5:c8:f1:23:82:0b:85:2c:
4e:a9:0a:22:59:03:e6:b6:59:14:84:85:0b:77:58:
f0:45:a4:b7:3c:c7:b5:cd:0f:27:c4:ef:a0:b6:e1:
29:df:ff:af:ba:e1:e4:45:16:ca:f8:92:df:6c:db:
18:03:02:52:86:02:ab:5c:2e:40:9f:ef:85:9a:a2:
fd:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:DA:C2:4E:04:09:1C:BB:E6:FC:91:AC:F3:A3:47:4D:8F:80:7D:7E
X509v3 Authority Key Identifier:
keyid:BE:49:43:F5:20:3D:43:46:0A:13:AD:4E:A9:D7:D5:B9:50:C6:13:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vklD9SA9Q0YKE61OqdfVuVDGE80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:7c:73:61:2b:7a:d7:7c:bc:67:c8:0f:b1:da:02:99:a9:0d:
29:1c:66:d4:ba:3e:1f:62:8b:79:5e:6b:9f:b6:41:ac:0c:d9:
19:47:63:ba:fe:e5:9f:83:a6:30:a4:16:0b:78:b5:42:f0:36:
ef:18:3f:92:b7:e5:39:27:6a:73:bd:42:64:3f:c3:0d:a1:9d:
c9:5e:ee:49:0a:4f:ec:3c:e4:ca:39:1c:84:b0:5c:1a:8a:61:
08:96:a9:ef:cc:87:ed:87:b3:7f:a5:2e:23:6d:6e:0c:0c:f1:
2a:31:e5:70:d1:9c:ec:e9:33:0e:1c:53:17:29:35:a1:b9:4d:
ea:55:ff:ba:fd:7e:12:a3:b8:14:6d:1e:4c:0a:4e:e6:54:b6:
b1:fe:75:19:fd:0d:c7:1d:a1:75:2c:ce:f6:cf:13:19:92:1e:
69:58:28:30:b6:c2:81:c9:b3:c9:ac:23:bc:55:c3:48:07:28:
ff:fb:1a:3c:86:e8:95:df:a1:79:75:04:64:d0:5b:df:64:12:
cb:4d:d2:ee:80:75:5c:63:a1:c0:95:16:75:77:1c:f6:15:51:
34:51:dc:7a:84:f8:7a:cc:79:3b:1d:2d:66:5c:2f:4b:ee:e2:
e0:52:56:04:54:43:ea:1a:41:cb:b8:f9:56:d0:70:ec:7a:4f:
20:dc:8d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:13:05 2025 by rpki-client