Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/88c5b7-b126-4ed3-9d7a-e5ba4bfa171a/1/vZdNyMZF7SNRRcqqE1W6hfUldjQ.mft
File: vZdNyMZF7SNRRcqqE1W6hfUldjQ.mft (raw, json)
Hash identifier: uog5FJCRejKXyRD3ZdwaStr4oT0ypVP2eqdNXq4F5l0=
Subject key identifier: D1:38:9C:05:03:17:6D:25:FE:A2:65:B7:2D:06:5F:AF:C3:D0:87:26
Authority key identifier: BD:97:4D:C8:C6:45:ED:23:51:45:CA:AA:13:55:BA:85:F5:25:76:34
Certificate issuer: /CN=bd974dc8c645ed235145caaa1355ba85f5257634
Certificate serial: 01974A7B60D9221C1F6EDB9814B183125CDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZdNyMZF7SNRRcqqE1W6hfUldjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/88c5b7-b126-4ed3-9d7a-e5ba4bfa171a/1/vZdNyMZF7SNRRcqqE1W6hfUldjQ.mft
Manifest number: 1299
Signing time: Sat 07 Jun 2025 13:01:28 +0000
Manifest this update: Sat 07 Jun 2025 13:01:28 +0000
Manifest next update: Sun 08 Jun 2025 13:01:28 +0000
Files and hashes: 1: uulQ7vEdGhsy6Awn7kfrVQnLiMU.roa (hash: tZVgJDesulw5XmQQyaxeLBz/Dpnfz7Z3L4uwLGw8CzQ=)
2: vZdNyMZF7SNRRcqqE1W6hfUldjQ.crl (hash: zV3qKL3p9p1ckiT8dVsc4orY63VZM2XXxvLC/ikiwws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/88c5b7-b126-4ed3-9d7a-e5ba4bfa171a/1/vZdNyMZF7SNRRcqqE1W6hfUldjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/88c5b7-b126-4ed3-9d7a-e5ba4bfa171a/1/vZdNyMZF7SNRRcqqE1W6hfUldjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZdNyMZF7SNRRcqqE1W6hfUldjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:60:d9:22:1c:1f:6e:db:98:14:b1:83:12:5c:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd974dc8c645ed235145caaa1355ba85f5257634
Validity
Not Before: Jun 7 13:01:28 2025 GMT
Not After : Jun 8 13:01:28 2025 GMT
Subject: CN=d1389c0503176d25fea265b72d065fafc3d08726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:91:ca:3a:8b:f0:4c:8d:a1:fc:28:1a:bf:bd:
81:18:a1:f9:32:84:c0:ca:b3:c2:85:b3:4b:c1:3e:
b8:ed:49:94:8e:e5:dc:81:cb:60:05:9c:7c:76:dc:
8d:d9:ec:3e:dc:a5:8b:ca:99:f2:ce:60:25:4c:1b:
97:b0:39:6e:fe:fd:42:0a:d0:c5:49:25:15:16:00:
eb:65:05:b9:30:10:e8:a1:89:16:f7:c6:06:64:e5:
4c:00:27:38:64:68:41:9c:1d:63:08:a5:61:1b:3f:
d4:ea:a9:b4:98:4f:37:e4:bc:83:bd:65:c2:54:b4:
95:77:b2:1c:f1:51:9c:73:16:9a:3a:2f:02:aa:16:
fc:f3:33:dc:35:96:a7:d6:b3:d5:68:00:d4:7e:1e:
c3:97:6f:ff:71:6f:d4:8e:c5:5b:dc:56:8b:58:8a:
55:70:8e:84:9d:4d:c6:9a:ad:bf:75:26:d4:3b:a6:
48:d1:e7:54:2f:e5:56:b2:77:22:ce:48:cd:78:99:
f2:06:7e:df:58:46:6a:bc:e1:f2:00:91:aa:11:04:
c7:df:af:b7:83:c4:5d:c0:b6:96:de:8f:5f:30:54:
62:a8:82:66:b8:9f:f9:f3:50:03:45:ba:3a:cd:73:
3d:c4:6d:ae:9d:33:05:74:52:a1:13:dc:89:12:b8:
da:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:38:9C:05:03:17:6D:25:FE:A2:65:B7:2D:06:5F:AF:C3:D0:87:26
X509v3 Authority Key Identifier:
keyid:BD:97:4D:C8:C6:45:ED:23:51:45:CA:AA:13:55:BA:85:F5:25:76:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZdNyMZF7SNRRcqqE1W6hfUldjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/88c5b7-b126-4ed3-9d7a-e5ba4bfa171a/1/vZdNyMZF7SNRRcqqE1W6hfUldjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/88c5b7-b126-4ed3-9d7a-e5ba4bfa171a/1/vZdNyMZF7SNRRcqqE1W6hfUldjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:e1:7a:1f:68:3f:2a:3c:27:ba:29:31:b8:3a:20:8b:c2:42:
12:c3:1b:10:24:2b:d9:b2:6c:59:60:cf:f2:5c:77:d4:3b:5a:
f8:8e:b2:80:34:07:04:12:4b:ed:4f:3f:17:d6:d9:5c:cb:13:
7c:e4:43:a0:f1:d2:94:3f:0f:9c:85:4a:d9:d4:09:06:73:e6:
a3:f0:96:0e:5f:51:c5:cf:8e:dd:2f:92:5e:cb:37:bf:64:d9:
14:84:ee:9b:d8:28:30:2a:5c:50:64:a7:c2:11:33:a5:43:87:
b2:0b:a7:89:1f:65:f5:7a:54:72:08:b9:c1:6b:1f:2a:22:47:
f6:0c:82:36:c6:06:ff:73:a3:ef:7e:53:e9:3f:64:b8:df:09:
89:2c:17:81:9b:6a:6f:62:45:04:f9:59:1f:67:38:a8:65:97:
08:16:68:84:27:1c:85:27:62:fa:bd:fe:b7:3a:3f:da:93:10:
af:ba:a0:18:d1:df:a7:e1:e8:2b:61:37:12:16:f3:0e:42:9c:
ec:ea:c4:03:b0:76:cd:ac:2e:5e:00:af:97:05:97:a2:6c:f6:
60:d1:7a:f6:7d:cd:a2:7b:89:1f:1c:83:68:a9:cb:ae:a8:33:
d0:9e:bd:ab:33:9a:42:5d:a7:e3:23:b5:01:b0:0c:52:94:8e:
83:94:1d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:13:35 2025 by rpki-client