Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
File: vZctRCdupBAu9q7TDyrljpmz51E.mft (raw, json)
Hash identifier: kNvT6HPj0t0BHTTKGTziwHAGTZlrIWc7UZXAAEztESM=
Subject key identifier: E4:29:A1:9B:53:D6:53:B7:F7:2D:AD:19:2F:8F:73:A2:88:D0:36:5B
Authority key identifier: BD:97:2D:44:27:6E:A4:10:2E:F6:AE:D3:0F:2A:E5:8E:99:B3:E7:51
Certificate issuer: /CN=bd972d44276ea4102ef6aed30f2ae58e99b3e751
Certificate serial: 019747B11BEC8A981D5E27754D6B4D79186A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 00:01:18 +0000
Manifest this update: Sat 07 Jun 2025 00:01:18 +0000
Manifest next update: Sun 08 Jun 2025 00:01:18 +0000
Files and hashes: 1: b6NjfbPhaNhgb-BW4tqnY3lmaqA.roa (hash: pqBGjfGCyQz5ophzP0TT0DFUBi4mqZdJUqu+xhB6npw=)
2: vZctRCdupBAu9q7TDyrljpmz51E.crl (hash: MXKhDJa20nsS0aTOuD1y4BlDm17vmsa0ySMSEuuJW8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:b1:1b:ec:8a:98:1d:5e:27:75:4d:6b:4d:79:18:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd972d44276ea4102ef6aed30f2ae58e99b3e751
Validity
Not Before: Jun 7 00:01:18 2025 GMT
Not After : Jun 8 00:01:18 2025 GMT
Subject: CN=e429a19b53d653b7f72dad192f8f73a288d0365b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:be:57:15:1c:99:cc:ae:cb:3f:2e:7c:d3:ee:
d2:ed:82:6a:94:2e:51:be:56:e0:70:9e:c9:e5:52:
08:ca:8e:b3:22:7f:fe:44:da:65:48:13:9e:64:ec:
90:a3:d7:28:4b:d9:d5:4d:b0:d8:29:b3:44:c0:71:
58:49:52:b4:cb:94:3a:16:70:c0:63:8a:34:8b:b3:
d3:0a:d9:de:6a:1d:2a:1e:15:92:26:6d:29:20:ad:
6d:a0:ff:46:89:23:7f:b4:0a:c9:96:75:63:53:3e:
ac:28:5a:27:37:e5:a9:37:aa:dd:b3:24:1e:f5:44:
d6:84:86:bd:06:44:6b:18:57:76:4c:5a:6e:0a:11:
5b:98:72:81:e5:9f:76:7c:25:cc:c0:30:b1:4c:29:
b2:06:91:cb:90:b5:bb:47:50:1f:37:b2:d7:16:e2:
73:40:c8:26:94:9b:57:69:ee:34:7a:59:3e:3e:d1:
da:89:d7:60:60:1d:be:8c:6f:c8:0b:75:21:be:3d:
ed:9a:b1:19:24:ee:06:98:24:25:97:97:22:04:49:
fc:d5:a9:99:58:ac:de:78:fd:1f:04:52:5c:51:f0:
09:ee:9e:d6:9f:d6:da:64:0c:b0:fb:02:fc:ef:a7:
6a:6b:9a:f7:db:2b:3d:4c:16:c5:b4:05:5c:7e:00:
77:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:29:A1:9B:53:D6:53:B7:F7:2D:AD:19:2F:8F:73:A2:88:D0:36:5B
X509v3 Authority Key Identifier:
keyid:BD:97:2D:44:27:6E:A4:10:2E:F6:AE:D3:0F:2A:E5:8E:99:B3:E7:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:42:73:7b:0c:82:42:3d:23:0f:e6:41:a0:64:e3:27:e7:b4:
d4:f0:f6:33:16:be:8f:fc:9a:33:0a:e4:2f:a9:0b:9f:08:a3:
16:5f:2e:6b:c5:c9:46:cf:26:8f:4a:08:f2:62:d5:25:d8:79:
7b:ee:6c:a5:e6:9c:75:0c:74:c3:d0:42:82:8d:16:cd:59:6d:
b3:34:bb:40:63:c1:29:5f:30:e8:e8:a2:d9:47:ff:cf:ab:93:
39:07:b5:93:b5:bf:09:1b:3c:48:7b:6a:4e:dc:a2:a6:c3:08:
6c:62:dd:a5:26:4b:f4:5a:1f:cc:00:3a:08:53:7d:20:c6:20:
68:6c:2e:af:19:cf:52:64:41:ea:d0:12:19:71:cf:82:43:5d:
61:9e:cf:d2:47:76:97:ee:5a:49:1a:55:22:c3:76:54:2d:d9:
0c:f9:f5:60:f0:dc:01:cb:36:02:80:e8:6b:76:ea:19:bb:d6:
e6:1a:8c:4e:5e:39:a8:d0:28:a4:90:4e:4c:87:32:b7:22:6f:
78:ce:f7:1f:48:98:12:5c:bd:da:3a:1d:d9:44:db:34:dc:3e:
79:58:e1:08:bb:34:7c:a2:8c:ee:65:07:f0:39:fa:9a:b4:be:
2c:91:2e:d9:b6:49:f5:44:77:a6:1f:3f:09:e9:58:5e:45:04:
5f:da:92:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:56:39 2025 by rpki-client