Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/dc1c50-650d-43c4-9e76-ccd4fad950ed/1/vr8Jwvj_-X74rsL4FzV40KOnTIE.mft
File: vr8Jwvj_-X74rsL4FzV40KOnTIE.mft (raw, json)
Hash identifier: /dMmB1kS4XobNzjHkI+cdr8J/De5ktjPqXrp6Nbu2Bk=
Subject key identifier: CD:7E:6B:E3:13:BE:9C:B9:C1:A6:60:8A:54:ED:A0:3C:9F:C0:28:85
Authority key identifier: BE:BF:09:C2:F8:FF:F9:7E:F8:AE:C2:F8:17:35:78:D0:A3:A7:4C:81
Certificate issuer: /CN=bebf09c2f8fff97ef8aec2f8173578d0a3a74c81
Certificate serial: 01975C4A8B04911024A47482A4A356805B49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vr8Jwvj_-X74rsL4FzV40KOnTIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/dc1c50-650d-43c4-9e76-ccd4fad950ed/1/vr8Jwvj_-X74rsL4FzV40KOnTIE.mft
Manifest number: 1294
Signing time: Wed 11 Jun 2025 00:01:18 +0000
Manifest this update: Wed 11 Jun 2025 00:01:18 +0000
Manifest next update: Thu 12 Jun 2025 00:01:18 +0000
Files and hashes: 1: cn8udPBTEEt-C91LbDNfkmvEIY8.roa (hash: qd0d0GALCyhOr1vz+5VbFHCBAqP5I2yIxXIsY00d+3A=)
2: vr8Jwvj_-X74rsL4FzV40KOnTIE.crl (hash: KAbdv7cGwnokszdNhuugy/TM3RtGsMzHM/7v7y+GJ4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/dc1c50-650d-43c4-9e76-ccd4fad950ed/1/vr8Jwvj_-X74rsL4FzV40KOnTIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/dc1c50-650d-43c4-9e76-ccd4fad950ed/1/vr8Jwvj_-X74rsL4FzV40KOnTIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vr8Jwvj_-X74rsL4FzV40KOnTIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 20:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:4a:8b:04:91:10:24:a4:74:82:a4:a3:56:80:5b:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bebf09c2f8fff97ef8aec2f8173578d0a3a74c81
Validity
Not Before: Jun 11 00:01:18 2025 GMT
Not After : Jun 12 00:01:18 2025 GMT
Subject: CN=cd7e6be313be9cb9c1a6608a54eda03c9fc02885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:eb:f7:e7:a2:41:23:0a:bc:af:29:97:44:77:
36:4a:67:28:82:5b:7f:17:fe:68:69:d2:d6:d4:5a:
cd:bd:73:9a:1a:81:18:9f:6b:06:b8:05:c2:2d:4d:
8f:0e:69:fa:9c:7f:be:75:95:fd:be:c8:87:e3:64:
eb:1f:5c:cc:e2:ae:51:5c:eb:a8:69:09:90:a5:b3:
cb:17:57:c8:ea:47:52:f6:b1:bd:e4:89:98:23:3e:
56:40:6c:d6:a8:21:f2:bf:f8:3f:0f:bd:cc:88:4b:
ac:60:a5:8b:a9:30:83:b5:d5:97:5e:78:86:74:f6:
9c:95:b0:d9:9f:48:45:04:69:13:e1:5f:e8:b3:16:
c6:2e:ca:e0:c1:76:59:1c:68:1c:a9:67:d7:6f:a4:
51:77:03:d6:99:c9:1b:05:b6:2f:36:b2:a9:59:d6:
fc:f1:0c:c2:f3:03:7b:87:57:4e:5d:be:d1:b7:f6:
3a:91:41:25:7c:3f:18:82:72:54:4f:c9:36:ce:4f:
e9:23:1c:98:12:e1:7c:c5:a2:ef:3c:20:23:ec:fe:
72:30:f5:90:af:70:65:a6:3b:d4:c7:4d:ec:80:b2:
c9:a4:23:02:73:59:20:cd:ad:b9:be:98:bc:c6:05:
c4:10:9c:14:f2:ad:46:00:89:9e:57:95:99:ed:c5:
91:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:7E:6B:E3:13:BE:9C:B9:C1:A6:60:8A:54:ED:A0:3C:9F:C0:28:85
X509v3 Authority Key Identifier:
keyid:BE:BF:09:C2:F8:FF:F9:7E:F8:AE:C2:F8:17:35:78:D0:A3:A7:4C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vr8Jwvj_-X74rsL4FzV40KOnTIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/dc1c50-650d-43c4-9e76-ccd4fad950ed/1/vr8Jwvj_-X74rsL4FzV40KOnTIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/dc1c50-650d-43c4-9e76-ccd4fad950ed/1/vr8Jwvj_-X74rsL4FzV40KOnTIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:8e:df:aa:8f:c0:49:97:69:a6:1d:45:9b:ab:1e:57:2f:a8:
9f:d2:5e:55:59:fc:7a:5e:8d:09:32:11:e2:46:94:3c:97:57:
80:df:2c:94:61:2b:15:0e:3b:85:7f:98:d6:2c:40:f7:00:79:
71:46:b1:1e:54:e3:64:25:0b:a2:3d:5e:58:01:d4:25:ba:4d:
e1:ec:63:95:22:72:23:cb:79:28:b0:62:28:42:01:91:a6:49:
63:64:09:3a:22:05:ac:72:90:e2:35:2f:5a:cc:71:b8:07:23:
b1:ef:cb:bd:c2:48:f1:bc:7a:56:ef:87:f5:db:01:1b:45:ee:
b0:df:2c:41:68:4b:7d:48:e1:ef:92:f6:65:19:3f:54:dc:a6:
56:36:2e:99:23:f4:1a:01:89:6b:7b:a4:1f:f6:ec:13:03:77:
d4:d3:53:2c:fa:74:4c:5b:ab:54:be:71:bc:6d:24:e4:17:8b:
d7:f5:c5:53:cd:23:50:46:dd:6e:5a:55:86:82:28:47:c5:41:
3d:a4:c8:db:d9:5e:2b:85:13:9a:36:d5:27:c1:c6:86:6c:59:
85:14:ef:ba:03:a2:fc:10:13:18:e6:32:12:3c:b9:18:13:8b:
e1:b5:ad:4d:4e:1e:83:50:01:8a:a5:0d:21:f4:a8:9a:46:a1:
c3:0c:f4:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 07:05:26 2025 by rpki-client