Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.mft
File: vAB4on8QAyY8TFYbAlB2by9Sbn0.mft (raw, json)
Hash identifier: dIonrUWcvGQYoGyZ2/kzwvJW5NRVfNu1Y18Sy/vkwQE=
Subject key identifier: 72:40:B4:03:FA:6D:F1:58:80:30:52:45:2E:1F:FA:CF:9C:11:74:7F
Authority key identifier: BC:00:78:A2:7F:10:03:26:3C:4C:56:1B:02:50:76:6F:2F:52:6E:7D
Certificate issuer: /CN=bc0078a27f1003263c4c561b0250766f2f526e7d
Certificate serial: 019745C27FE1ADC2282F0F0481EE048512C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vAB4on8QAyY8TFYbAlB2by9Sbn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.mft
Manifest number: 0319
Signing time: Fri 06 Jun 2025 15:01:03 +0000
Manifest this update: Fri 06 Jun 2025 15:01:03 +0000
Manifest next update: Sat 07 Jun 2025 15:01:03 +0000
Files and hashes: 1: U8RX6_Xhgd2rniYJPgiw5XhDM14.roa (hash: 2r/ZPIhIP4vgQHcp4lEFNmYb4WZmbuMJWG8eyE6HlfQ=)
2: vAB4on8QAyY8TFYbAlB2by9Sbn0.crl (hash: 0KopVLvfnk38Ui7cFh9dASilx7NTHb+f2KrfwGJ56cA=)
3: vAZxSJwcgiBcI_82IoG7w0HDsHY.roa (hash: p3exCfpQFtu6+djLck5m9Ak9SIsL/faxVMijWb66KP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vAB4on8QAyY8TFYbAlB2by9Sbn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:c2:7f:e1:ad:c2:28:2f:0f:04:81:ee:04:85:12:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc0078a27f1003263c4c561b0250766f2f526e7d
Validity
Not Before: Jun 6 15:01:03 2025 GMT
Not After : Jun 7 15:01:03 2025 GMT
Subject: CN=7240b403fa6df158803052452e1ffacf9c11747f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:7f:1b:6d:62:dd:53:26:e4:bb:0f:19:0e:e7:
e6:09:bd:d6:fd:98:51:84:52:41:4f:16:08:0a:77:
f3:20:a6:f0:b5:29:2d:36:f7:3f:f7:23:d7:e7:ba:
2c:80:81:57:92:0f:3b:58:96:13:7e:36:79:2f:2a:
6d:dd:33:1f:95:7a:06:9c:a0:23:ff:48:c2:78:e5:
c3:88:d8:dc:df:b3:bc:87:73:66:f4:8c:b1:c9:2d:
97:a0:61:c6:b0:64:a7:cc:95:f1:34:e2:ac:07:12:
ff:e4:f3:3a:7c:94:8b:6a:83:81:59:47:d1:31:1a:
79:e5:fa:78:32:d6:61:8c:8d:21:32:3f:43:b5:07:
56:ba:c9:c9:59:a8:c3:d5:7f:42:69:b8:07:96:a7:
db:53:c8:5f:fc:61:d3:fe:5a:a4:e5:dd:55:98:4b:
81:dd:e6:96:19:04:79:96:18:c3:0a:9a:cd:ac:17:
c8:1a:51:0a:38:b4:20:b0:ab:fd:38:2d:4d:c8:5d:
a9:27:bd:fc:b5:4c:76:9e:66:2c:49:85:9b:6b:4c:
62:29:3f:7e:84:13:2f:28:89:ef:9d:e9:33:0d:4e:
74:5d:4a:49:0b:5c:ea:1c:2d:c6:1f:09:9d:9c:7e:
cf:4c:a9:4d:21:05:a7:af:16:d1:9a:e7:2a:c8:90:
d8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:40:B4:03:FA:6D:F1:58:80:30:52:45:2E:1F:FA:CF:9C:11:74:7F
X509v3 Authority Key Identifier:
keyid:BC:00:78:A2:7F:10:03:26:3C:4C:56:1B:02:50:76:6F:2F:52:6E:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vAB4on8QAyY8TFYbAlB2by9Sbn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:b1:72:84:8b:45:ae:ab:cd:5f:80:f8:0f:c1:28:f8:5e:45:
28:00:59:15:ed:18:34:8d:4a:fe:9f:49:0b:4e:ae:1c:cc:5e:
9a:5b:5d:f7:16:08:08:48:97:16:9e:1c:23:c6:6f:ed:3a:51:
1e:02:4d:a0:1f:d4:a7:4e:bb:60:7e:4b:47:6c:e7:35:9e:eb:
d6:8b:31:06:60:de:df:eb:35:97:cf:96:68:83:02:67:1b:90:
bd:5a:d7:ef:52:ad:8d:94:57:07:6a:bf:ce:0c:1b:e1:e5:18:
2c:60:9f:62:74:58:79:5a:57:47:b0:b7:00:17:a2:83:dd:23:
3c:ed:e3:7e:e4:9b:c0:50:cb:00:b5:4b:fa:b7:36:3f:3e:ee:
f9:30:69:b1:71:88:9f:e7:64:26:6b:a9:49:6e:8d:7e:2c:0f:
80:ba:73:05:d0:b8:94:11:e7:57:fa:b3:a3:8a:e8:2b:54:83:
7a:d2:6c:59:07:81:b8:6f:ac:53:e7:35:b1:51:f1:94:ff:87:
9c:3d:ff:d5:36:f5:93:ef:85:b8:8d:11:5c:59:c5:ea:2d:5d:
2a:d1:66:73:95:e6:f5:be:07:d3:db:72:f0:ca:a3:98:97:03:
e5:4c:2a:0d:7c:27:65:5e:83:a0:53:e0:30:d2:46:b7:ab:75:
d0:6f:18:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:02:03 2025 by rpki-client