Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
File: vosVwjfzTFxcU0S0B567OlidAUg.mft (raw, json)
Hash identifier: 3cDv6F4fZ8eYz4qHo4W/gGkO77wdNg3y39qQA3Z0oXU=
Subject key identifier: 31:EC:2A:A0:89:40:62:53:CA:E9:18:CF:CA:FC:EC:E1:A3:39:06:CB
Authority key identifier: BE:8B:15:C2:37:F3:4C:5C:5C:53:44:B4:07:9E:BB:3A:58:9D:01:48
Certificate issuer: /CN=be8b15c237f34c5c5c5344b4079ebb3a589d0148
Certificate serial: 019762F0D0453F5F1376863AB4E34F1F83A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
Manifest number: 0B5C
Signing time: Thu 12 Jun 2025 07:00:38 +0000
Manifest this update: Thu 12 Jun 2025 07:00:38 +0000
Manifest next update: Fri 13 Jun 2025 07:00:38 +0000
Files and hashes: 1: hKsPJ4MnZD2pYCjFxua95M8Pd_I.roa (hash: doF91Tq6urawTtlcrWXugjS7shhgWKPbbEAfjccw0S8=)
2: vosVwjfzTFxcU0S0B567OlidAUg.crl (hash: fWa3phQQGSRIYe3Apo0SxGw6bT2Dc3izMVGYulMtekI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:62:f0:d0:45:3f:5f:13:76:86:3a:b4:e3:4f:1f:83:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be8b15c237f34c5c5c5344b4079ebb3a589d0148
Validity
Not Before: Jun 12 07:00:38 2025 GMT
Not After : Jun 13 07:00:38 2025 GMT
Subject: CN=31ec2aa089406253cae918cfcafcece1a33906cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3f:77:98:84:ee:8a:9e:c2:0e:5b:c2:09:8c:
80:ae:ca:8d:75:fe:b3:be:bf:d9:84:8f:a1:e8:30:
87:fe:b8:c4:0a:2c:77:45:db:da:0c:d1:32:d2:33:
09:53:92:ca:a6:d8:60:72:8d:12:3c:99:31:8f:1d:
0a:15:b1:e3:da:89:17:63:5d:ad:17:a6:d7:03:1f:
6a:a5:de:5e:98:c6:61:ba:9e:74:55:50:4a:da:c6:
3b:2e:bc:59:4e:01:2d:bb:7e:63:a6:80:37:f3:47:
6d:22:00:7e:e9:6f:a7:0e:c5:1d:9c:f3:83:72:1c:
7d:51:56:ba:0a:a5:c7:59:e6:5f:ea:a3:b9:46:8d:
d5:32:b2:31:1a:17:31:58:58:47:92:6c:28:a5:90:
9c:6f:5c:ae:b3:a6:4f:78:7b:ba:1d:fb:d8:0a:38:
71:12:ad:d3:c9:4f:de:7f:66:e5:72:79:8c:dc:e4:
7d:fc:a5:e8:5e:08:b1:e3:da:f7:f9:ea:c6:88:f1:
ad:7e:dc:78:5c:26:5e:12:36:f3:19:91:2f:81:35:
f3:8d:03:a9:a9:e4:fc:8e:c2:f9:98:e1:aa:66:72:
86:9a:58:20:c4:57:4a:4c:ef:48:96:be:6d:78:90:
db:f0:42:78:97:b5:61:71:d2:35:f0:38:08:3f:74:
4f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:EC:2A:A0:89:40:62:53:CA:E9:18:CF:CA:FC:EC:E1:A3:39:06:CB
X509v3 Authority Key Identifier:
keyid:BE:8B:15:C2:37:F3:4C:5C:5C:53:44:B4:07:9E:BB:3A:58:9D:01:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:0c:f8:dc:a7:66:94:ba:08:7a:61:a2:cf:dd:98:73:99:31:
08:30:19:64:77:a8:de:0e:73:fb:49:c9:2d:1c:cc:f6:1b:2c:
b3:e0:30:fd:4c:e0:89:50:b1:77:c5:38:7a:52:cf:14:8b:3b:
f1:55:ec:2c:eb:3c:ce:e9:3c:df:8d:6e:a2:93:87:b8:1a:af:
32:c0:65:ef:1e:a5:c9:2c:ed:1f:6e:93:01:dd:9e:8c:e6:71:
a9:b4:aa:7e:f8:15:b6:0f:69:4b:01:92:26:bc:a8:62:13:25:
00:6b:e6:ad:cd:13:ae:a3:29:e2:28:a5:af:29:43:70:2e:dd:
94:d1:10:93:37:1e:ee:c9:74:57:e7:c3:22:96:e6:ca:94:3f:
d8:6f:72:60:2c:f7:4b:f2:b6:97:1b:9e:4a:de:b8:55:80:03:
fb:3f:7c:db:78:3b:9c:46:d7:b6:de:b8:6d:ab:75:13:c3:19:
b1:60:de:53:19:75:94:7a:a5:95:bb:e9:b7:9a:30:5d:03:c0:
58:80:d2:56:bb:32:4e:87:dc:25:8f:0d:a4:5f:c9:c5:2e:7e:
28:a5:a7:6b:e1:f7:5f:d7:8a:4b:b5:41:98:39:10:30:80:92:
2e:19:90:c3:d1:45:c8:15:8e:87:3a:5e:27:cb:a7:45:94:3e:
02:12:bb:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 09:20:08 2025 by rpki-client