Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft
File: vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft (raw, json)
Hash identifier: CW2NiNN5u8+vellfXg8x+y/AI0na/QMND6Z+FE05IB0=
Subject key identifier: F1:24:E5:82:66:56:7D:74:18:3F:7F:4A:F8:95:B6:F2:40:9B:70:09
Authority key identifier: BD:73:74:7F:78:BD:32:8D:0A:E1:C8:91:71:B3:81:AA:19:01:1A:CE
Certificate issuer: /CN=bd73747f78bd328d0ae1c89171b381aa19011ace
Certificate serial: 01975346F465729B13F6E230A248C0C872CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft
Manifest number: 16
Signing time: Mon 09 Jun 2025 06:00:48 +0000
Manifest this update: Mon 09 Jun 2025 06:00:48 +0000
Manifest next update: Tue 10 Jun 2025 06:00:48 +0000
Files and hashes: 1: D98Ck1_qKOXalzx0pMS_FarSGM8.roa (hash: u49BF5lQyjsLl1bn3ULD3SUQ9N/pcixaCTatnIvy4v0=)
2: tCV34_eFEm-bBTr3p-Dum9J6ZzA.roa (hash: lJs/8jun541iQ5FmJ+SShA8Wi27D6ss5N6YmTLmASl4=)
3: vXN0f3i9Mo0K4ciRcbOBqhkBGs4.crl (hash: z/mtbygfP/g/xvb413l6IZmvaWc5kRs5zTUwHxgH+ng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:46:f4:65:72:9b:13:f6:e2:30:a2:48:c0:c8:72:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd73747f78bd328d0ae1c89171b381aa19011ace
Validity
Not Before: Jun 9 06:00:48 2025 GMT
Not After : Jun 10 06:00:48 2025 GMT
Subject: CN=f124e58266567d74183f7f4af895b6f2409b7009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0d:3c:a9:89:92:b5:29:4f:40:35:ec:c0:48:
2d:0e:0d:13:4f:65:c5:2f:0d:cb:31:58:ee:8d:c3:
6d:4a:9c:f0:eb:ec:ab:9c:a5:8c:ed:ee:a6:b1:d9:
f7:66:d7:cc:97:41:45:73:ea:db:7e:45:ab:b3:9b:
08:d9:98:0c:32:43:97:b7:3e:a3:ac:a9:e1:ef:b1:
fe:4a:90:5b:4f:93:99:b1:51:9b:6d:65:82:75:df:
0f:8e:a2:17:48:f3:54:e9:2e:86:74:a8:b6:c5:28:
8a:30:b5:75:75:53:11:1a:66:43:27:2b:40:41:d6:
2d:3b:ad:32:5b:0d:dc:4d:ca:b2:ae:6a:e7:d6:0e:
06:33:6b:93:26:66:96:35:99:e5:9b:e8:b9:17:e1:
b9:b8:b1:21:59:34:f5:5d:68:75:10:ad:b4:3e:20:
dc:eb:37:3b:d6:3f:ef:72:3c:60:5b:c7:ea:46:93:
0d:7b:6d:ee:6e:be:e8:32:55:b4:07:59:fb:c2:ad:
b4:cc:39:3f:4c:13:41:79:5f:0b:48:c7:00:81:e9:
dc:bc:2e:12:86:a7:77:29:81:e5:75:51:fa:2f:a1:
28:0c:6b:57:64:67:e4:2b:ac:97:b8:59:d6:9f:a1:
b7:02:90:bd:ca:51:8d:97:21:46:2e:a5:7b:3e:6b:
ba:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:24:E5:82:66:56:7D:74:18:3F:7F:4A:F8:95:B6:F2:40:9B:70:09
X509v3 Authority Key Identifier:
keyid:BD:73:74:7F:78:BD:32:8D:0A:E1:C8:91:71:B3:81:AA:19:01:1A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:57:0a:cb:02:1d:89:74:ed:73:50:a7:51:a2:25:30:df:06:
c6:7c:39:9f:d5:83:1f:67:f5:b9:0f:d8:47:ca:bf:3a:7b:9a:
34:c0:11:44:a1:6f:c8:90:99:67:79:da:08:77:9f:9a:b5:59:
03:e3:0e:3d:d9:55:26:e1:99:df:ae:e6:b8:2d:14:b7:9f:ff:
61:c3:59:3b:72:25:2b:2d:02:c4:54:96:41:b7:2e:a6:a9:42:
83:28:25:85:64:2a:33:54:c6:82:88:e1:e7:5e:74:26:48:7d:
51:78:c5:6b:25:9f:14:16:11:65:8f:5b:f6:18:cc:79:fd:0b:
0e:1c:4d:a0:a6:bf:38:b8:04:b8:8e:4a:4e:53:79:55:6d:cf:
26:a5:90:30:8a:c9:36:e1:1d:f3:f8:93:37:a0:14:df:2d:65:
95:cf:ef:b9:a8:be:8c:6c:e7:4a:2b:ed:45:74:47:ab:ee:46:
a3:a4:cd:ad:ff:87:50:6a:9f:86:78:d6:c2:e0:ad:1a:d5:08:
e7:86:85:41:aa:3c:4e:d4:9c:31:c8:04:8a:72:a7:3e:19:d0:
f8:9e:64:f2:75:f8:be:74:22:0e:3a:19:c7:81:d7:71:e6:04:
a8:e1:92:cf:9d:e8:3d:66:de:79:87:9a:c0:e5:60:1a:14:90:
33:d4:60:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 09:35:11 2025 by rpki-client