Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
File: vf89luiqFB0ixCQq7_eK9x74skQ.mft (raw, json)
Hash identifier: 33wZAmO81y7Lw9zihEsR1g1ABsCAWzrdHF0hnbG7Rhk=
Subject key identifier: 40:ED:9B:4C:CA:F9:C4:79:69:C3:63:0A:C9:32:EE:AD:B8:F7:70:56
Authority key identifier: BD:FF:3D:96:E8:AA:14:1D:22:C4:24:2A:EF:F7:8A:F7:1E:F8:B2:44
Certificate issuer: /CN=bdff3d96e8aa141d22c4242aeff78af71ef8b244
Certificate serial: 01974EC51165623CCA96F93B64159BD6D041
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vf89luiqFB0ixCQq7_eK9x74skQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
Manifest number: 1513
Signing time: Sun 08 Jun 2025 09:00:27 +0000
Manifest this update: Sun 08 Jun 2025 09:00:27 +0000
Manifest next update: Mon 09 Jun 2025 09:00:27 +0000
Files and hashes: 1: 41AytB41hodYM5wYhqpxuiF8N9s.roa (hash: OnxInRURjXFa44Bu3c4RrKsYyRXWI0CzeYkFHBMxcR8=)
2: vf89luiqFB0ixCQq7_eK9x74skQ.crl (hash: U+bo8PGJRT8n9rPMv8Ezm5VS73OBIfp0zmOvw/Y1rjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vf89luiqFB0ixCQq7_eK9x74skQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:11:65:62:3c:ca:96:f9:3b:64:15:9b:d6:d0:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdff3d96e8aa141d22c4242aeff78af71ef8b244
Validity
Not Before: Jun 8 09:00:27 2025 GMT
Not After : Jun 9 09:00:27 2025 GMT
Subject: CN=40ed9b4ccaf9c47969c3630ac932eeadb8f77056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ce:ad:ce:cd:02:ae:cd:d3:95:40:0b:b7:17:
c8:d8:d4:b3:f2:ea:fe:52:eb:cf:ee:ab:64:9a:74:
c6:26:e7:17:f7:1d:44:10:19:53:57:2f:95:4d:86:
3c:ee:5e:4c:88:7e:35:8f:cb:bd:bf:20:34:8f:0f:
fa:7d:d7:83:81:a6:6b:c4:a4:e2:ac:3c:4f:5e:b6:
71:e1:68:2a:5b:6b:6b:fe:3c:3c:bf:03:b6:98:c6:
5d:68:43:17:d3:c2:ac:86:0f:81:e8:1e:63:7c:dc:
26:db:40:5e:6e:75:12:a2:5d:1e:83:c7:c2:4a:99:
2e:a2:b2:22:29:6f:27:af:98:b2:06:43:3a:3c:29:
fd:4e:66:fb:64:a6:4b:a7:8b:ec:f5:89:7e:2a:c3:
9a:ea:bb:31:5d:6a:33:3a:ae:69:bd:6a:c0:83:3e:
49:79:2b:62:fe:30:7e:bb:be:15:f2:3b:35:6f:c4:
43:66:0d:c5:91:16:bd:41:c2:df:35:50:ce:6a:2d:
27:38:38:d1:31:03:0c:c0:c2:55:f5:0f:33:c9:a9:
db:ab:7e:91:54:bf:e9:e6:a5:45:c4:ee:7e:9c:be:
0c:38:1e:91:99:96:0f:9a:a8:b4:2b:4f:54:66:07:
af:e0:5d:88:b1:61:62:3b:75:c3:12:55:13:23:96:
b7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:ED:9B:4C:CA:F9:C4:79:69:C3:63:0A:C9:32:EE:AD:B8:F7:70:56
X509v3 Authority Key Identifier:
keyid:BD:FF:3D:96:E8:AA:14:1D:22:C4:24:2A:EF:F7:8A:F7:1E:F8:B2:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vf89luiqFB0ixCQq7_eK9x74skQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:6a:91:b8:38:5a:85:b5:78:a8:5b:f7:60:8e:91:94:e4:a4:
4c:69:82:f0:f3:86:50:1b:a9:cc:1f:dc:ab:92:26:32:36:6e:
26:ee:df:19:38:03:a1:4d:e2:d5:7e:8d:f0:fc:e4:ff:24:9e:
a9:c3:72:c8:20:db:ba:b2:37:ed:8e:85:47:33:21:5d:7f:b3:
38:7d:fe:61:13:c3:5c:95:b8:9e:c4:d5:4d:3b:4b:2e:d7:04:
0b:d9:75:7a:d7:08:be:48:d0:81:ec:36:48:92:82:b2:50:b4:
7d:7f:58:6d:00:ef:70:54:03:17:2f:09:b9:8a:b6:fb:03:c4:
99:6b:ae:1b:0d:e8:5b:34:18:ca:59:da:31:ef:fb:e6:0a:8f:
de:b9:ef:09:4a:f1:0d:0d:83:7b:a9:45:ed:2a:b7:49:81:4c:
5e:a6:84:44:1f:20:37:b6:ed:c4:9b:ef:ea:61:ab:60:8f:08:
32:f5:58:39:78:8e:11:5a:62:ff:11:b4:ff:70:b5:09:65:14:
b2:cd:e1:10:a4:f9:1a:f8:52:69:09:ec:1a:d5:fc:6b:c0:ef:
46:a8:cd:7a:19:ce:05:f3:56:52:81:e4:f1:52:0f:57:9f:cf:
49:fd:4a:4a:f5:e9:cd:6e:5a:48:2d:02:52:b3:0d:29:25:ee:
1f:8e:bb:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:51:26 2025 by rpki-client