Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3cd45f-0b79-43b7-a9e6-c0bcedb34274/1/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.mft
File: vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.mft (raw, json)
Hash identifier: 9n6kRP/Mqdu4ByzNpWKqfUaCewKGOdPgDAuoNORczCE=
Subject key identifier: 89:7A:42:92:0C:0E:DB:16:D7:62:87:63:0C:25:C9:2A:B4:98:B8:8D
Authority key identifier: BD:A1:E5:5F:74:4E:14:12:BD:75:3F:D2:77:B7:74:08:DC:DF:8C:B4
Certificate issuer: /CN=bda1e55f744e1412bd753fd277b77408dcdf8cb4
Certificate serial: 01974779FC8FEEC9947B8FAB7C4C357535C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3cd45f-0b79-43b7-a9e6-c0bcedb34274/1/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.mft
Manifest number: 0F66
Signing time: Fri 06 Jun 2025 23:01:06 +0000
Manifest this update: Fri 06 Jun 2025 23:01:06 +0000
Manifest next update: Sat 07 Jun 2025 23:01:06 +0000
Files and hashes: 1: A6rb1dzlDcV8JbvloxjZ9srng9Y.roa (hash: p6jxR8xYwMN0t2VYMZkdONNHxcFxVga3IwawawK72KQ=)
2: vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.crl (hash: RgzuMytdosAAYqqhgnsjxfcWUlru+q6Kb+vJfSV74OU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3cd45f-0b79-43b7-a9e6-c0bcedb34274/1/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/3cd45f-0b79-43b7-a9e6-c0bcedb34274/1/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 23:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:fc:8f:ee:c9:94:7b:8f:ab:7c:4c:35:75:35:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bda1e55f744e1412bd753fd277b77408dcdf8cb4
Validity
Not Before: Jun 6 23:01:06 2025 GMT
Not After : Jun 7 23:01:06 2025 GMT
Subject: CN=897a42920c0edb16d76287630c25c92ab498b88d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:42:08:85:7b:00:32:84:f9:02:1a:e2:76:42:
6b:30:f4:24:11:88:87:34:96:f0:6b:59:90:66:96:
f4:48:5e:61:b1:a9:e2:3f:4f:f5:4d:22:63:d3:50:
0a:6a:d9:a5:e8:36:cd:02:54:2a:37:4a:1f:9e:13:
a3:83:9a:70:fe:2a:69:52:db:2d:75:5d:6f:10:33:
be:12:81:a7:7b:a2:a7:52:38:8e:a1:22:9a:76:8e:
18:9a:de:88:1b:55:0b:3b:7f:04:bd:21:cb:be:bf:
0a:56:93:84:d0:79:12:32:d1:4b:c3:78:ed:b3:c6:
ce:71:4f:e8:62:19:4a:60:55:5c:d3:33:d9:ca:5d:
29:f8:93:5b:52:a8:09:d4:33:88:d9:83:67:78:03:
57:ee:2d:43:2c:c6:6f:db:e1:32:a9:95:6a:dd:67:
25:f0:e4:f0:f7:de:70:05:7f:8c:87:60:cc:8f:f6:
f5:7b:d3:0f:62:03:f7:92:54:f6:06:af:bf:95:83:
62:b4:f3:fc:18:71:67:96:8f:6f:0b:88:6d:b4:38:
02:c1:53:97:1b:aa:e9:73:ef:25:04:ce:b0:36:36:
3f:4f:29:89:06:22:61:66:c3:1a:93:2f:ba:55:c2:
dd:01:ad:b2:d5:6d:93:79:58:69:66:47:bb:77:76:
85:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:7A:42:92:0C:0E:DB:16:D7:62:87:63:0C:25:C9:2A:B4:98:B8:8D
X509v3 Authority Key Identifier:
keyid:BD:A1:E5:5F:74:4E:14:12:BD:75:3F:D2:77:B7:74:08:DC:DF:8C:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3cd45f-0b79-43b7-a9e6-c0bcedb34274/1/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3cd45f-0b79-43b7-a9e6-c0bcedb34274/1/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:37:8d:3f:ad:bc:9e:44:cd:dd:56:e2:71:cc:07:56:20:15:
a2:37:17:1a:9b:4a:2a:de:37:22:3c:b7:c0:11:45:12:96:2d:
0a:bf:af:32:50:af:4f:27:fa:8c:4d:0e:98:0f:6d:46:50:d6:
a0:40:e3:77:69:7f:59:d1:59:c6:e4:b8:51:f5:e9:69:76:83:
c2:d7:09:4c:8f:2c:3c:76:94:29:ff:46:53:fc:01:3e:2a:ed:
03:6e:65:30:52:71:5e:81:12:59:22:18:fb:f9:26:89:83:35:
af:15:cf:2b:33:22:92:0e:b8:1a:b4:bf:13:c6:08:0d:a4:06:
bb:8d:ab:10:70:d3:94:91:c9:2b:41:bf:d0:73:a4:b2:95:69:
d7:bd:d4:42:c8:fc:8d:31:9f:26:36:c5:cb:ea:98:02:3d:de:
54:f6:a4:ea:e5:5d:43:6c:a8:96:d9:05:01:0c:a3:36:b3:c2:
8e:4c:a4:69:d3:00:5d:65:89:da:7e:ca:39:19:a0:de:fc:e2:
51:f3:4f:84:b8:7c:fe:47:7d:81:d1:67:3b:cb:6d:9f:28:75:
cd:de:95:07:37:8b:13:cf:94:62:b3:cd:29:ac:af:d9:20:2d:
05:57:5d:f7:39:6d:c2:fc:a9:0c:ac:c1:08:f1:34:09:ab:41:
56:11:bc:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:31:52 2025 by rpki-client