Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.mft
File: vj908rbk4o6f9so8yjpdeMosrWo.mft (raw, json)
Hash identifier: y3LqFBhQHQD4mNRUu3PMJIdqDqATVXxfdQhvntrsYKM=
Subject key identifier: CE:66:5A:97:E3:AF:E0:45:C9:45:BA:B5:46:59:81:D3:5C:F0:A5:31
Authority key identifier: BE:3F:74:F2:B6:E4:E2:8E:9F:F6:CA:3C:CA:3A:5D:78:CA:2C:AD:6A
Certificate issuer: /CN=be3f74f2b6e4e28e9ff6ca3cca3a5d78ca2cad6a
Certificate serial: 0197398797A5B15FE991E88877C5C7D97F95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vj908rbk4o6f9so8yjpdeMosrWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.mft
Manifest number: 08E1
Signing time: Wed 04 Jun 2025 06:01:16 +0000
Manifest this update: Wed 04 Jun 2025 06:01:16 +0000
Manifest next update: Thu 05 Jun 2025 06:01:16 +0000
Files and hashes: 1: XeXaIv0GnCQWCewZa3XGZvVcOuU.roa (hash: IlSm1MC8XpLI7JpFnpnOEj3N8KdmO1O/PRbAlZC1Yqs=)
2: keiUHgNWXQG1tCnd_1r6jW3ByFc.roa (hash: UWHI9ulMx4qU9scGVCWFH3JBiygO7K8ZUkSeDS3PRRY=)
3: vj908rbk4o6f9so8yjpdeMosrWo.crl (hash: FTVTmnHMsXqpW4iiL+EtAY8pjKm5vTUBOSpUcqVucIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vj908rbk4o6f9so8yjpdeMosrWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 06:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:39:87:97:a5:b1:5f:e9:91:e8:88:77:c5:c7:d9:7f:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be3f74f2b6e4e28e9ff6ca3cca3a5d78ca2cad6a
Validity
Not Before: Jun 4 06:01:16 2025 GMT
Not After : Jun 5 06:01:16 2025 GMT
Subject: CN=ce665a97e3afe045c945bab5465981d35cf0a531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:85:07:59:a6:1a:f9:37:87:77:fc:e1:b5:11:
5d:b0:a9:36:e7:72:2e:5c:52:8d:6d:62:10:a6:a6:
df:51:83:82:11:3f:25:e2:47:94:08:74:9d:b7:f0:
39:99:26:12:a0:cb:72:05:22:35:9b:2e:6d:60:08:
ee:a4:a8:f8:70:0c:d9:48:97:3c:06:e5:03:8d:0f:
96:dd:d2:f3:e3:be:e9:42:1b:7a:1c:5e:3f:b1:d3:
d3:09:7a:e4:69:ce:00:76:a8:23:39:70:34:b3:aa:
dd:06:5a:71:c7:13:62:53:17:08:bd:b0:df:5a:38:
7d:d4:fe:de:91:22:38:26:8f:9f:b7:ae:42:3f:9f:
73:03:c6:9a:69:d1:4a:32:5d:0b:16:ce:fd:12:5d:
49:a2:98:47:8c:67:27:28:3f:02:72:71:2f:9b:0a:
2b:e0:79:81:21:ea:23:35:3d:0e:45:52:a0:b1:38:
de:da:10:ff:8a:59:d6:bd:15:0a:6f:58:3a:f1:ee:
9d:08:38:40:17:bc:e0:b7:a8:6f:a3:5e:11:f5:22:
cc:ba:8e:ff:ca:32:9f:cb:dc:ce:cc:3b:d6:01:af:
81:17:ba:96:3c:c6:7b:75:3b:12:bf:3b:57:2a:c4:
84:9d:db:79:b3:be:a4:67:f2:a5:03:58:d3:7e:3b:
b0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:66:5A:97:E3:AF:E0:45:C9:45:BA:B5:46:59:81:D3:5C:F0:A5:31
X509v3 Authority Key Identifier:
keyid:BE:3F:74:F2:B6:E4:E2:8E:9F:F6:CA:3C:CA:3A:5D:78:CA:2C:AD:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vj908rbk4o6f9so8yjpdeMosrWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:09:23:68:05:f8:54:23:b8:44:af:b6:6d:28:db:0e:55:76:
2d:e3:2f:ec:58:92:d1:be:6a:03:9d:51:d4:5c:9f:60:b1:e0:
59:85:c2:4f:47:12:b5:8c:a7:7a:6f:71:99:94:27:bc:c7:80:
2f:8d:5a:f6:55:ff:65:cf:39:a4:b7:2c:10:ab:91:8c:38:f8:
9e:c9:2a:49:81:4a:77:ab:0d:1d:fd:ba:a9:2b:59:a4:16:a4:
c9:4f:8f:23:37:4c:ed:4f:0c:0f:cf:d1:a5:b5:c7:33:b8:54:
76:1a:2b:62:35:38:0e:5f:f2:15:ab:93:eb:63:b6:d3:11:ee:
9e:b6:12:bf:82:9f:84:cc:6c:d5:34:39:b9:98:4d:0e:6c:1b:
47:01:e6:ab:9a:4b:28:ab:25:14:25:2d:83:ae:0d:a3:44:f5:
d4:5e:5f:e9:2a:ca:74:8b:50:3b:e1:df:30:94:fc:1d:4c:5a:
95:31:83:d7:85:56:4c:6d:86:92:fb:50:86:f4:d0:45:fd:c8:
0b:c0:9e:16:75:cb:94:a4:6d:e5:eb:89:4b:1c:69:77:b9:74:
34:aa:c0:6f:75:4e:ec:c5:70:a6:9b:c4:55:b2:59:36:34:d7:
52:6f:bc:28:e2:c8:9d:4e:e8:7f:8e:c7:6f:d1:d6:d7:a6:db:
d8:e0:d7:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:43:58 2025 by rpki-client