Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.mft
File: runVCGNpB2p412FjizKoqbjvcOc.mft (raw, json)
Hash identifier: nrvw1HFhr7eyX8ys+qS3VEr+5+liy5litepsbWDAN9A=
Subject key identifier: DA:FC:E3:CE:1D:EE:1D:63:CE:B5:FB:5D:15:0A:DF:4C:1F:FD:C9:A4
Authority key identifier: AE:E9:D5:08:63:69:07:6A:78:D7:61:63:8B:32:A8:A9:B8:EF:70:E7
Certificate issuer: /CN=aee9d5086369076a78d761638b32a8a9b8ef70e7
Certificate serial: 019749D61232A2CF3C536E7E2108A94F2CCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/runVCGNpB2p412FjizKoqbjvcOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 10:00:55 +0000
Manifest this update: Sat 07 Jun 2025 10:00:55 +0000
Manifest next update: Sun 08 Jun 2025 10:00:55 +0000
Files and hashes: 1: TI9bfzfYT_e9UXoNSSRvZ0SIvco.roa (hash: ysZXRJJDaCEwr01HXDnbPPBij8sh3z42AGc9cvU+Xhg=)
2: runVCGNpB2p412FjizKoqbjvcOc.crl (hash: evS7Vl7vt5tRdP5uRndN29XVtLrl1a/Mcsgr9gacLVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/runVCGNpB2p412FjizKoqbjvcOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d6:12:32:a2:cf:3c:53:6e:7e:21:08:a9:4f:2c:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aee9d5086369076a78d761638b32a8a9b8ef70e7
Validity
Not Before: Jun 7 10:00:55 2025 GMT
Not After : Jun 8 10:00:55 2025 GMT
Subject: CN=dafce3ce1dee1d63ceb5fb5d150adf4c1ffdc9a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:97:7f:e8:da:c9:e5:4d:96:0b:0b:77:b9:ab:
75:f7:3c:25:e7:89:c0:4c:8e:fb:d9:05:aa:c0:cf:
15:0f:23:f8:b9:3c:75:cf:71:6d:89:ef:e8:ca:36:
e8:17:86:b9:d6:c4:5a:89:69:3b:40:23:ab:6b:ea:
ea:d4:8d:91:40:55:91:70:04:e9:77:13:8a:e9:3a:
9f:99:c8:21:f7:7c:f7:1a:99:1c:a5:bb:85:32:e8:
43:be:2e:d7:0c:dd:d7:89:20:2a:bc:76:00:d7:b3:
7a:b6:45:ac:30:e0:2a:78:91:b4:66:5c:19:76:e3:
a6:ca:67:92:dd:cf:b7:45:7b:59:f7:ed:17:aa:dd:
f7:0e:57:c6:3e:48:f0:76:cb:6f:07:86:cf:24:b7:
f5:d4:b0:d5:c3:44:f1:e8:e6:d0:28:8c:c5:00:a2:
9f:e5:f4:77:50:3e:3f:99:c4:bf:23:5e:ac:aa:4a:
67:ce:4b:70:2c:0e:95:f8:a5:fe:c4:88:d1:fa:3d:
c7:e8:f9:55:80:ac:70:64:0e:ad:f0:51:d5:da:33:
7e:8b:4b:75:93:bb:35:5b:91:28:76:1d:37:5c:7d:
5e:ee:ba:d8:c3:cb:ad:aa:a0:9b:f6:d6:5f:f9:c9:
2e:5f:6f:2b:f5:bd:e3:08:4d:cd:25:7e:a1:9f:12:
c4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:FC:E3:CE:1D:EE:1D:63:CE:B5:FB:5D:15:0A:DF:4C:1F:FD:C9:A4
X509v3 Authority Key Identifier:
keyid:AE:E9:D5:08:63:69:07:6A:78:D7:61:63:8B:32:A8:A9:B8:EF:70:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/runVCGNpB2p412FjizKoqbjvcOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:a2:71:88:ec:cd:bd:54:a0:5a:cf:a4:61:48:f0:8f:82:c1:
8b:c2:5e:8d:84:20:85:bb:8d:72:55:72:1f:8f:32:68:50:cd:
87:36:d8:03:84:0f:b5:b5:2a:16:e4:8a:50:9c:b8:a6:6a:cd:
9b:c1:dc:ec:6d:15:4a:7d:05:ab:b0:e2:79:02:cf:eb:2a:ac:
85:fd:3b:f8:ff:60:c0:79:54:22:fc:85:24:aa:61:09:f7:6f:
e8:43:da:cb:36:f6:17:94:63:22:16:16:4f:f1:f5:77:f3:7f:
a0:28:b4:d0:c3:15:43:bc:85:1a:43:f5:75:b2:14:ea:71:72:
4b:39:5e:35:7a:06:a5:4d:73:13:c6:f1:da:f8:1c:4d:80:1c:
57:5d:d4:17:f0:87:6f:43:92:3a:3d:43:ee:b9:db:72:ee:fc:
dc:4e:09:c2:a6:4e:b7:8f:9f:a2:5b:bc:f0:9c:ea:b9:74:c3:
0a:10:ff:5b:84:70:9e:c8:d9:77:c1:cd:36:06:6d:a3:ef:df:
3c:81:18:1f:09:29:ec:b4:7a:69:cd:5c:0d:46:9e:76:d8:b8:
1f:74:df:ca:a4:cc:73:30:24:65:a4:25:2d:0c:ce:60:60:99:
7c:a5:8f:11:af:3b:57:b3:d2:44:dd:91:bd:1d:b8:2b:cd:60:
67:e2:68:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:25:14 2025 by rpki-client