Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.mft
File: vIwagDL1fyKwFFSmXvMt6ndJbQs.mft (raw, json)
Hash identifier: nifevsZ/KGG/8TVs9cGwWa+XgEQ2KNknMzYmxdHNJM4=
Subject key identifier: 0A:07:29:41:76:41:9D:9C:53:8F:E5:16:B5:21:28:DA:87:36:BA:BF
Authority key identifier: BC:8C:1A:80:32:F5:7F:22:B0:14:54:A6:5E:F3:2D:EA:77:49:6D:0B
Certificate issuer: /CN=bc8c1a8032f57f22b01454a65ef32dea77496d0b
Certificate serial: 019749318EB7039AAEB473F681258F09878B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIwagDL1fyKwFFSmXvMt6ndJbQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.mft
Manifest number: 08B0
Signing time: Sat 07 Jun 2025 07:01:13 +0000
Manifest this update: Sat 07 Jun 2025 07:01:13 +0000
Manifest next update: Sun 08 Jun 2025 07:01:13 +0000
Files and hashes: 1: 87EiEbuhBkMDFm619edEsUyoB7Y.roa (hash: iu5N7p/QfYR3g8fpVRiIN4OpWGAgMRa+uUZVim92tYw=)
2: hhHnsqFssAy3cZ6p2eic8J_5Jkg.roa (hash: 4+RUythcb8WdsV0R43hgKvkcYTcHEmIS4/pDs5LGxZk=)
3: vIwagDL1fyKwFFSmXvMt6ndJbQs.crl (hash: 1qLGrkw2fvGp6sRYzh9L8YwAUct7SzfKEuHfPhQFplM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/vIwagDL1fyKwFFSmXvMt6ndJbQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:8e:b7:03:9a:ae:b4:73:f6:81:25:8f:09:87:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc8c1a8032f57f22b01454a65ef32dea77496d0b
Validity
Not Before: Jun 7 07:01:13 2025 GMT
Not After : Jun 8 07:01:13 2025 GMT
Subject: CN=0a07294176419d9c538fe516b52128da8736babf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ad:43:81:1a:16:89:f2:a2:ae:12:b0:b5:0e:
89:78:f4:77:ab:b3:5f:f6:25:53:4a:b5:ce:49:26:
9e:c6:2d:f9:92:46:89:63:5b:e1:88:f7:29:a4:bf:
2f:31:12:6e:0e:5c:eb:64:b2:eb:ed:ef:15:aa:a4:
90:22:be:4d:53:c1:97:1e:df:4f:36:ec:f8:5d:28:
2b:ec:e2:f4:e5:ce:fd:b1:55:fc:8f:c0:c4:90:07:
c0:d5:99:bf:ae:fb:c8:d1:e7:3b:48:7d:b7:be:4f:
ed:31:9a:5c:87:58:0a:63:85:1a:94:0a:6e:10:28:
ce:dc:03:ba:87:81:34:fa:64:f7:ed:85:e3:82:53:
33:11:57:e9:06:be:9d:f1:d6:39:83:8e:3c:f3:4a:
77:e5:3a:55:9c:ec:76:e2:32:a6:76:a6:74:48:85:
7a:bd:3a:83:07:7f:90:f7:1e:94:e1:85:4d:bd:5a:
64:9f:8d:8c:c5:14:85:0a:7f:05:de:94:b8:38:ac:
4f:ec:40:dc:26:6f:58:a8:d5:5e:dd:fe:0c:24:01:
fb:4b:c1:86:11:bc:31:7b:0a:ef:b6:9d:9f:23:30:
8a:a0:c1:5d:f5:db:50:85:f1:90:0d:4d:ea:78:75:
a4:67:47:4f:48:0e:ca:60:1e:aa:62:2d:9f:7d:8d:
ca:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:07:29:41:76:41:9D:9C:53:8F:E5:16:B5:21:28:DA:87:36:BA:BF
X509v3 Authority Key Identifier:
keyid:BC:8C:1A:80:32:F5:7F:22:B0:14:54:A6:5E:F3:2D:EA:77:49:6D:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIwagDL1fyKwFFSmXvMt6ndJbQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:51:0a:34:21:2a:1d:a7:51:f5:1a:0d:8f:e6:e7:e9:f3:a1:
4b:88:8c:78:d8:dd:80:e1:f0:5f:47:db:8a:96:08:c1:ea:73:
1d:17:d9:8f:cc:df:5f:64:84:c5:28:52:af:8d:64:d1:53:ed:
da:af:5f:17:2c:b4:4f:d2:dc:e7:f3:6e:83:4b:e7:b4:8b:e5:
4b:e3:e3:5e:5a:dc:01:61:a4:da:da:08:ca:da:3c:d4:be:37:
99:69:79:38:37:f1:15:be:24:12:b0:e7:0a:05:0e:36:35:67:
1c:bf:b9:74:6d:cd:f6:64:3e:64:90:aa:1a:79:a6:c1:35:38:
b8:a7:54:7f:37:b3:c6:e1:85:e3:7c:bd:2a:d0:7a:02:c2:db:
88:d6:9c:a4:b6:28:35:2d:8b:d6:4f:1f:9f:54:7e:43:3f:0f:
05:9d:e7:2d:ef:46:65:eb:2f:8f:75:ad:59:96:23:03:a8:07:
99:3d:7f:f1:24:86:3f:4e:f9:55:b3:65:c6:3b:e6:69:a9:ce:
90:cf:50:a6:71:ed:a4:2b:92:e5:17:c9:5c:d2:e7:07:8b:57:
03:a2:62:55:76:8a:c4:7f:33:4f:6e:5c:bb:f6:60:48:7b:d9:
de:37:39:c0:10:10:52:93:9d:ad:47:23:e3:11:b0:6a:28:dc:
0e:99:cc:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:31:35 2025 by rpki-client