Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3abb5f-3379-4ed6-94c1-c7e338ff3b59/1/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.mft
File: vIiPBTCZ-sOlWYZEfLOxA4SV8zI.mft (raw, json)
Hash identifier: /9nuSPk0ivsexBCbI20DL2Xn9xwYRJ4dZUOJU99x+fQ=
Subject key identifier: 29:2F:7B:76:23:88:7F:59:94:93:2D:FE:BC:83:A3:DA:1D:4D:7B:E6
Authority key identifier: BC:88:8F:05:30:99:FA:C3:A5:59:86:44:7C:B3:B1:03:84:95:F3:32
Certificate issuer: /CN=bc888f053099fac3a55986447cb3b1038495f332
Certificate serial: 01975121522CF7707D70F445AA19A5522B8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3abb5f-3379-4ed6-94c1-c7e338ff3b59/1/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.mft
Manifest number: 097A
Signing time: Sun 08 Jun 2025 20:00:27 +0000
Manifest this update: Sun 08 Jun 2025 20:00:27 +0000
Manifest next update: Mon 09 Jun 2025 20:00:27 +0000
Files and hashes: 1: aAkRe7Jm1-dx0uQ95bjB-xCoSJc.roa (hash: c881F7DVYDXIoCHO9T/789+rI+yYESWFHrY/FcifwTE=)
2: vIiPBTCZ-sOlWYZEfLOxA4SV8zI.crl (hash: RfRcPPoThrRibJpBOvay8BbxQ5OOqDn69IFW7n4FqrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3abb5f-3379-4ed6-94c1-c7e338ff3b59/1/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/3abb5f-3379-4ed6-94c1-c7e338ff3b59/1/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.mft
rsync://rpki.ripe.net/repository/DEFAULT/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 20:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:21:52:2c:f7:70:7d:70:f4:45:aa:19:a5:52:2b:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc888f053099fac3a55986447cb3b1038495f332
Validity
Not Before: Jun 8 20:00:27 2025 GMT
Not After : Jun 9 20:00:27 2025 GMT
Subject: CN=292f7b7623887f5994932dfebc83a3da1d4d7be6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0e:c3:7e:88:28:70:b8:f1:54:ac:35:85:2c:
32:54:5d:bb:1c:73:dc:ef:06:a3:55:47:4f:21:63:
d3:8c:14:46:d7:f4:b3:30:26:4c:1f:74:ef:0b:e8:
c8:6d:08:77:5d:6b:ac:54:60:75:cb:42:ea:e2:51:
af:fc:5c:96:c4:ce:e5:b1:c8:ff:fd:f2:95:e2:8c:
ec:68:16:cf:ff:66:bc:f5:75:e0:52:9a:fc:08:a1:
eb:8d:fb:a6:19:85:77:ec:85:69:e4:18:9c:ee:63:
f9:30:6a:3b:84:ab:f1:43:83:e9:fb:a0:3f:c1:43:
c7:6f:5a:e1:c2:92:e0:c9:34:5f:cf:a6:41:94:b3:
28:19:8d:e9:18:b0:c5:2f:e7:55:b6:82:c1:4b:16:
16:1f:db:df:9b:71:3d:c7:7f:4a:e4:31:ff:1a:23:
93:70:db:79:72:5c:06:5b:a2:af:f2:41:37:0e:02:
c0:1d:de:28:36:a5:65:41:9e:7b:7c:87:78:bb:c5:
f1:a0:e3:cf:51:a7:9d:a6:2e:bd:42:ae:6f:79:82:
32:7a:a4:02:78:59:4b:17:c3:bb:a5:57:d7:3f:7a:
13:e4:c8:9f:de:06:66:e3:89:02:74:b2:46:4f:55:
56:1e:a2:56:c5:da:71:d4:75:e7:2c:fa:a9:92:06:
e0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:2F:7B:76:23:88:7F:59:94:93:2D:FE:BC:83:A3:DA:1D:4D:7B:E6
X509v3 Authority Key Identifier:
keyid:BC:88:8F:05:30:99:FA:C3:A5:59:86:44:7C:B3:B1:03:84:95:F3:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3abb5f-3379-4ed6-94c1-c7e338ff3b59/1/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3abb5f-3379-4ed6-94c1-c7e338ff3b59/1/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:6f:36:72:5a:49:75:f7:5f:21:15:00:84:cf:7a:5d:a5:d7:
69:00:c0:15:46:b6:46:77:66:6b:ef:d7:4d:de:02:6f:12:6d:
b5:ad:54:77:c1:e2:48:69:ed:e6:0e:7d:97:f9:6a:af:10:1c:
55:c2:41:5b:a8:3d:b5:df:c1:51:43:ae:bd:d2:f2:7e:98:44:
ef:7b:08:3c:fc:29:6b:10:23:e1:7f:1f:c1:da:7a:30:9e:3c:
27:a7:a5:9e:b3:a2:91:e1:ef:72:07:d6:15:68:0e:86:cf:a5:
4b:a6:9d:c7:68:e6:a7:0f:90:f0:d6:eb:7d:30:6d:fb:4a:a1:
a6:42:39:d6:f0:55:3a:c9:e6:b4:04:7f:9e:04:19:fb:46:26:
02:5f:27:20:6e:31:4e:9a:67:00:a4:c2:72:45:19:a8:86:79:
d6:f6:4b:2d:be:27:e9:9d:68:85:79:3b:19:8f:ef:fa:c5:e2:
fa:dd:b0:e7:13:54:8e:f7:0f:45:be:b5:d8:2c:6a:5c:40:07:
a5:de:4e:e5:23:1d:6a:d5:0a:c9:53:2f:21:3c:11:0b:99:fa:
86:b9:6b:bb:da:c3:03:f4:4f:4c:15:8a:d7:47:58:85:4b:e2:
54:62:3a:49:a0:be:20:fe:05:d3:47:e2:b0:76:62:05:44:9b:
f2:6e:a1:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:11:56 2025 by rpki-client