Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/f2cd5e-fd1c-4b47-aa65-5e861165884c/1/vJjaCfCkWkCPW38brm2R4zM9VzI.mft
File: vJjaCfCkWkCPW38brm2R4zM9VzI.mft (raw, json)
Hash identifier: qUoK0qP2r9ilPzO8D3e6epENoriADlCl8FuyzzK5OLI=
Subject key identifier: CC:F0:76:A4:64:32:32:6B:4E:0E:C9:66:14:5E:E2:71:67:70:CC:DA
Authority key identifier: BC:98:DA:09:F0:A4:5A:40:8F:5B:7F:1B:AE:6D:91:E3:33:3D:57:32
Certificate issuer: /CN=bc98da09f0a45a408f5b7f1bae6d91e3333d5732
Certificate serial: 0197470C2A3E7E1E374FEE3D781061E6355E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJjaCfCkWkCPW38brm2R4zM9VzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/f2cd5e-fd1c-4b47-aa65-5e861165884c/1/vJjaCfCkWkCPW38brm2R4zM9VzI.mft
Manifest number: 157A
Signing time: Fri 06 Jun 2025 21:01:08 +0000
Manifest this update: Fri 06 Jun 2025 21:01:08 +0000
Manifest next update: Sat 07 Jun 2025 21:01:08 +0000
Files and hashes: 1: fxhyywtkkeQkBb1LWBBLmBYmdhw.roa (hash: JEDR1+B65jcWiXG9Txje4CaMRNTaWS3SE4CY6nIrNeE=)
2: vJjaCfCkWkCPW38brm2R4zM9VzI.crl (hash: 9RQ1hg262VoUyfbDNxnAaOXAeQJ3/mnTwxvHcOMAoPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/f2cd5e-fd1c-4b47-aa65-5e861165884c/1/vJjaCfCkWkCPW38brm2R4zM9VzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/f2cd5e-fd1c-4b47-aa65-5e861165884c/1/vJjaCfCkWkCPW38brm2R4zM9VzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJjaCfCkWkCPW38brm2R4zM9VzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0c:2a:3e:7e:1e:37:4f:ee:3d:78:10:61:e6:35:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc98da09f0a45a408f5b7f1bae6d91e3333d5732
Validity
Not Before: Jun 6 21:01:08 2025 GMT
Not After : Jun 7 21:01:08 2025 GMT
Subject: CN=ccf076a46432326b4e0ec966145ee2716770ccda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a1:df:b2:d1:e2:fc:d9:af:a0:ae:aa:33:09:
9c:c0:90:de:ef:b5:95:69:0e:0b:13:81:77:fb:19:
01:2d:09:46:42:76:b9:a0:3d:ad:a4:68:b2:63:29:
ec:25:7f:ae:67:8d:dc:c2:b7:07:ea:d6:76:bd:6f:
b3:6e:09:b6:56:7d:6e:98:8d:60:c8:0a:60:98:45:
10:d8:fc:d9:a8:94:1c:b7:14:4e:15:c7:f8:9c:34:
9e:45:44:31:33:f6:db:1a:70:b2:37:0a:0b:1d:01:
c9:f6:cf:6f:86:2d:44:1e:44:25:13:b1:b6:0b:10:
8d:8a:d4:f3:30:99:9c:a2:9f:aa:0e:18:d7:1a:62:
cf:f6:14:33:4a:8c:a0:2e:c3:15:5b:77:1d:ea:b2:
e9:7c:eb:c6:b6:9a:e3:1a:d7:03:d2:cf:dc:ff:59:
a1:c9:19:3f:8d:7c:64:73:b2:75:4b:03:cf:90:61:
2a:99:88:9f:9e:aa:f9:60:e6:ed:fe:38:c2:62:c3:
33:1f:45:37:ad:13:b0:c0:0d:20:2d:01:29:79:c6:
e9:bf:f6:97:81:36:d6:6b:f0:c8:ea:ae:bd:25:95:
4e:55:94:c7:49:40:0e:f8:59:a9:89:63:2f:ac:20:
b8:26:c8:4e:bd:ba:a9:e6:c7:78:16:e6:27:e0:72:
21:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F0:76:A4:64:32:32:6B:4E:0E:C9:66:14:5E:E2:71:67:70:CC:DA
X509v3 Authority Key Identifier:
keyid:BC:98:DA:09:F0:A4:5A:40:8F:5B:7F:1B:AE:6D:91:E3:33:3D:57:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJjaCfCkWkCPW38brm2R4zM9VzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f2cd5e-fd1c-4b47-aa65-5e861165884c/1/vJjaCfCkWkCPW38brm2R4zM9VzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f2cd5e-fd1c-4b47-aa65-5e861165884c/1/vJjaCfCkWkCPW38brm2R4zM9VzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:cd:01:5e:af:0e:d5:8c:b3:8d:4a:80:22:fe:c6:1f:f2:a8:
02:8f:ce:f3:77:35:e7:97:30:37:8b:40:71:09:43:21:e1:ec:
4d:ef:90:a8:4f:fb:91:fc:e2:bf:ef:07:00:a4:f5:ee:91:0b:
8b:67:c6:ae:6e:6f:0b:59:55:c0:4c:89:ca:db:f4:b7:5c:26:
83:c6:44:79:f9:64:4e:ad:5e:60:3c:85:4e:7e:ef:87:d7:5a:
d8:34:20:ea:83:75:87:7e:0d:d4:b7:11:8b:db:3a:41:6a:1a:
d3:59:88:0d:66:f4:72:e4:02:cd:e8:06:99:a2:74:9f:44:5e:
57:14:cd:68:07:f9:4f:22:bb:d4:e1:eb:33:dc:b4:a4:a6:c8:
40:c9:d2:c5:e6:c4:1e:05:2d:06:9e:e8:e6:98:19:4c:2c:d8:
d4:7a:77:26:79:08:f4:75:6a:c9:5e:fb:a7:1e:bb:79:fa:27:
be:29:cf:f3:75:e8:b1:72:f8:52:be:33:a3:af:1f:25:f3:a7:
b3:e4:3f:d3:ae:3b:59:69:12:aa:c9:cd:e1:db:b3:6c:d1:be:
a6:1e:c1:cc:f3:20:fb:e2:ef:b0:9c:8d:4c:9d:8f:40:87:40:
01:0c:b4:a6:a5:49:c9:a7:b8:4b:b6:66:a0:19:19:64:b2:bc:
6e:97:82:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:56:58 2025 by rpki-client