Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/833aa2-af04-4f10-a167-6acd86686e85/1/vyk4WQ4NABlyVmLUtK5Myew6c00.mft
File: vyk4WQ4NABlyVmLUtK5Myew6c00.mft (raw, json)
Hash identifier: icl9mM42DKicK+RU/kXiKlaGPzCADpLHkinARp/Y4Sk=
Subject key identifier: 59:C5:03:3E:6D:57:9F:E8:CE:C2:CD:FC:D5:7A:B6:6A:76:E3:A0:3D
Authority key identifier: BF:29:38:59:0E:0D:00:19:72:56:62:D4:B4:AE:4C:C9:EC:3A:73:4D
Certificate issuer: /CN=bf2938590e0d0019725662d4b4ae4cc9ec3a734d
Certificate serial: 019746D49098CC76CA830FBAAADC7C414AEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vyk4WQ4NABlyVmLUtK5Myew6c00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/833aa2-af04-4f10-a167-6acd86686e85/1/vyk4WQ4NABlyVmLUtK5Myew6c00.mft
Manifest number: 081A
Signing time: Fri 06 Jun 2025 20:00:25 +0000
Manifest this update: Fri 06 Jun 2025 20:00:25 +0000
Manifest next update: Sat 07 Jun 2025 20:00:25 +0000
Files and hashes: 1: vQtF-L-9ooOZxF-UCZufP97_4Tk.roa (hash: uZu5EdE4zrTNj+JjaQISrCgWGaWpGkfUNjvMVUEKljA=)
2: vyk4WQ4NABlyVmLUtK5Myew6c00.crl (hash: HN2r9vTTThbD+2fbZ8z5A1Bwro+zxq1KcTkXOoGmdrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/833aa2-af04-4f10-a167-6acd86686e85/1/vyk4WQ4NABlyVmLUtK5Myew6c00.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/833aa2-af04-4f10-a167-6acd86686e85/1/vyk4WQ4NABlyVmLUtK5Myew6c00.mft
rsync://rpki.ripe.net/repository/DEFAULT/vyk4WQ4NABlyVmLUtK5Myew6c00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:d4:90:98:cc:76:ca:83:0f:ba:aa:dc:7c:41:4a:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf2938590e0d0019725662d4b4ae4cc9ec3a734d
Validity
Not Before: Jun 6 20:00:25 2025 GMT
Not After : Jun 7 20:00:25 2025 GMT
Subject: CN=59c5033e6d579fe8cec2cdfcd57ab66a76e3a03d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a0:d3:a7:54:5c:80:b0:8d:f3:19:6b:84:78:
85:ed:4a:18:91:f8:ea:90:86:64:1a:cc:df:d7:8a:
41:02:a0:33:8d:4e:9d:4a:66:82:8b:4b:d0:cd:a8:
8e:06:75:31:48:ed:49:ab:59:74:40:bc:76:5c:b9:
ee:28:e7:1e:c0:2e:75:35:7c:5a:4d:52:78:35:2e:
06:76:ad:3d:32:86:32:6c:8a:16:dc:0d:5b:35:35:
79:3b:ba:c0:8a:3a:0b:33:65:e2:99:3b:4d:5c:78:
7b:c5:9e:fc:9f:6a:35:a8:88:a0:d0:f8:e4:f1:35:
d4:b6:4b:73:59:34:24:97:9a:a7:80:c8:50:7c:ea:
a1:76:9a:24:5a:12:8f:84:8b:04:99:27:ac:7f:3c:
66:d4:15:8d:79:b5:93:6b:39:59:73:72:b8:49:42:
6d:85:d0:c8:3b:f8:60:f5:22:c0:5f:18:19:e9:73:
8b:12:d5:98:ed:95:df:c7:26:86:7d:a2:a7:df:9e:
b5:ba:09:62:8a:37:01:90:eb:0d:8a:18:85:bc:91:
5e:72:c5:23:a1:22:2c:bf:c4:ec:83:78:c6:f3:32:
d2:fa:0f:f4:36:89:07:ab:03:ad:77:88:19:53:de:
62:f2:3e:fe:df:b2:cd:cc:33:28:9a:9c:af:79:d7:
48:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:C5:03:3E:6D:57:9F:E8:CE:C2:CD:FC:D5:7A:B6:6A:76:E3:A0:3D
X509v3 Authority Key Identifier:
keyid:BF:29:38:59:0E:0D:00:19:72:56:62:D4:B4:AE:4C:C9:EC:3A:73:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vyk4WQ4NABlyVmLUtK5Myew6c00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/833aa2-af04-4f10-a167-6acd86686e85/1/vyk4WQ4NABlyVmLUtK5Myew6c00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/833aa2-af04-4f10-a167-6acd86686e85/1/vyk4WQ4NABlyVmLUtK5Myew6c00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:d8:53:15:ab:5c:72:f7:77:d1:b3:49:9b:c8:73:79:88:0a:
8c:e0:ff:f6:7b:6e:74:60:96:50:36:89:f0:80:e2:6a:62:57:
de:2d:c9:78:1a:3e:9c:c3:cd:9f:3d:08:13:ab:8f:4c:7c:90:
b8:12:70:b3:b7:d9:f9:89:bf:3f:91:e7:25:ae:84:ad:e3:73:
e3:a1:f6:8e:a6:ee:01:90:d9:26:32:03:4e:8b:29:7c:5b:3d:
8d:49:5b:7a:9d:65:e1:ce:09:ee:3d:15:06:ba:29:38:ee:cb:
e6:1a:47:e4:93:6e:4d:82:97:73:21:ce:f5:d8:4a:95:c2:dd:
ad:fb:58:6f:b8:54:b1:ce:69:ad:dc:2d:92:e9:48:a7:c0:cc:
e0:a0:87:d7:4a:9b:7c:71:fe:e8:8a:92:cf:bf:d7:76:94:7a:
56:84:db:ce:35:9e:57:e9:32:32:c2:a5:0b:f3:de:fd:21:3e:
03:4a:e0:9d:fc:28:62:56:02:f1:ac:77:c6:98:c9:1f:0d:d1:
17:02:50:9a:90:5f:14:51:b6:a2:fb:25:86:59:4c:62:de:39:
6a:13:98:a0:1c:6a:76:c4:37:8e:14:9d:5c:97:e4:75:b7:11:
77:eb:a1:df:52:6a:7b:06:34:de:42:42:f2:ca:6f:0e:e9:28:
e4:42:70:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:14:39 2025 by rpki-client