Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.mft
File: vE4hsn1vhOvdiIxo55zlVchG2ss.mft (raw, json)
Hash identifier: YnJLkEhux1In1pYKR/fcC9p2BxPy6vUmL/dC9dpTOiw=
Subject key identifier: 33:8F:20:06:76:30:A4:D1:83:74:15:4D:2A:74:93:29:8B:D7:56:27
Authority key identifier: BC:4E:21:B2:7D:6F:84:EB:DD:88:8C:68:E7:9C:E5:55:C8:46:DA:CB
Certificate issuer: /CN=bc4e21b27d6f84ebdd888c68e79ce555c846dacb
Certificate serial: 01974968315AB7EB06791506A98573DA7D91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vE4hsn1vhOvdiIxo55zlVchG2ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 08:00:54 +0000
Manifest this update: Sat 07 Jun 2025 08:00:54 +0000
Manifest next update: Sun 08 Jun 2025 08:00:54 +0000
Files and hashes: 1: F3kOmnX-kEtjSilXO2Pe0L_37Jo.roa (hash: lIJ2C488mP6Ma0OF6csW3I8GzUd4jiMp8CCjsO6b5Eg=)
2: Po0728QWErCTmXCeFPKP0UlTEug.roa (hash: IpBaviswNtBt65qOWaQEl9AqBmhUCEIpYlrqfl+L76A=)
3: vE4hsn1vhOvdiIxo55zlVchG2ss.crl (hash: MmDqwW776gD4T5v6FsgXKFsj3QiPzOWb59phSiVAueg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/vE4hsn1vhOvdiIxo55zlVchG2ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:31:5a:b7:eb:06:79:15:06:a9:85:73:da:7d:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc4e21b27d6f84ebdd888c68e79ce555c846dacb
Validity
Not Before: Jun 7 08:00:54 2025 GMT
Not After : Jun 8 08:00:54 2025 GMT
Subject: CN=338f20067630a4d18374154d2a7493298bd75627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:79:d8:20:c1:bc:fc:34:be:53:e1:d5:5e:91:
76:7d:c8:c5:19:f5:67:39:0e:bd:96:3d:66:33:a3:
15:c3:d4:2a:24:eb:f4:ab:c5:e7:94:35:49:c2:0c:
af:1b:76:fa:53:d5:9c:0c:45:04:22:0b:a4:aa:17:
d3:c2:3c:02:d0:53:89:ee:69:dc:ac:15:d6:d9:bb:
59:79:bf:04:15:e4:33:8c:1e:e1:37:51:a8:f7:e2:
54:14:b9:02:c7:a1:31:c6:29:a7:98:34:ce:f7:8b:
54:2a:6e:30:5d:48:ed:f5:75:11:ab:c1:08:01:ec:
87:66:f7:53:50:bd:36:b8:fa:60:0c:d2:a1:df:73:
51:43:28:c4:9c:84:a5:21:62:f7:b9:b9:61:00:f9:
e9:d0:14:7e:c5:07:e3:6e:ac:d9:03:60:f6:6e:90:
38:3a:86:12:3d:2e:5d:cd:53:72:36:07:5f:ef:34:
de:bb:d3:57:d0:29:59:23:9b:9b:8c:63:8d:2e:28:
b7:19:db:42:f8:e2:83:e4:e3:1a:32:c2:7b:1b:53:
db:8a:d8:30:03:6f:aa:4e:30:ef:60:e9:92:81:9a:
89:60:cb:2a:9b:98:78:2a:d6:15:ab:c7:34:a8:2c:
c5:9e:e0:1e:d9:fc:70:c0:f6:48:5f:50:d7:37:4e:
f5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:8F:20:06:76:30:A4:D1:83:74:15:4D:2A:74:93:29:8B:D7:56:27
X509v3 Authority Key Identifier:
keyid:BC:4E:21:B2:7D:6F:84:EB:DD:88:8C:68:E7:9C:E5:55:C8:46:DA:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vE4hsn1vhOvdiIxo55zlVchG2ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:cf:58:53:a4:f4:2a:39:1e:8f:33:a9:f2:e5:87:eb:de:7c:
85:f1:f6:f1:20:0b:56:2b:46:b3:b6:28:a4:b1:99:28:a6:ec:
5c:e9:38:46:f2:5d:aa:b1:f3:f0:fd:76:7e:8c:43:17:8b:91:
ca:72:53:cb:c4:40:49:dc:de:ce:c2:66:d8:4a:02:2d:98:62:
ae:b1:e9:df:0f:e2:a4:05:fc:88:b3:3a:2b:a1:7b:b2:65:de:
73:08:61:5a:72:fc:d9:17:a4:6e:2f:b4:93:8a:5a:66:2f:91:
e3:b3:95:90:25:7a:3c:1d:b5:5b:91:88:a1:2f:b7:86:88:12:
1a:b6:16:a1:02:13:90:e6:61:e5:a3:48:8e:c1:a4:db:9c:25:
60:15:82:4b:22:b7:46:ac:d8:2a:d1:d4:0c:4e:aa:9a:24:54:
3f:0b:db:27:d6:1e:48:81:13:f3:fb:5d:30:84:d9:5a:fa:18:
9e:d0:86:4a:02:0a:dd:93:5c:ad:86:1e:de:a1:ac:3e:6d:cf:
33:f0:41:83:50:5c:d0:ef:68:ab:d8:71:d8:17:af:32:a2:7d:
e0:96:8c:9b:1a:5c:aa:f5:59:fd:4f:45:b8:dc:f5:31:ae:ab:
9a:9b:91:f3:23:33:a2:86:9a:b6:2f:af:3a:00:e5:7a:56:f3:
36:c6:57:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:10:51 2025 by rpki-client