Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/8f2093-0318-476c-9e9c-53fc4905629b/1/vedQeWGGkbrh9HvL7VIxRJaWOJE.mft
File: vedQeWGGkbrh9HvL7VIxRJaWOJE.mft (raw, json)
Hash identifier: m80Wqq1YHx5nMvLMhHNtV2aEvinso8fzjCx9HUi6nlU=
Subject key identifier: 46:2C:D4:3B:E7:A9:8A:FA:CD:E4:16:E1:6B:51:28:67:17:D9:83:B9
Authority key identifier: BD:E7:50:79:61:86:91:BA:E1:F4:7B:CB:ED:52:31:44:96:96:38:91
Certificate issuer: /CN=bde75079618691bae1f47bcbed52314496963891
Certificate serial: 01974EFC40DDE81D4AE2084B65298449A544
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vedQeWGGkbrh9HvL7VIxRJaWOJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/8f2093-0318-476c-9e9c-53fc4905629b/1/vedQeWGGkbrh9HvL7VIxRJaWOJE.mft
Manifest number: 1161
Signing time: Sun 08 Jun 2025 10:00:43 +0000
Manifest this update: Sun 08 Jun 2025 10:00:43 +0000
Manifest next update: Mon 09 Jun 2025 10:00:43 +0000
Files and hashes: 1: dN-uhf4yHU1KWIuxr4O44km4Ib0.roa (hash: erjr+nwKgTpJdhI7Z4IWA4jUyQt8GWT0g5Kuu0xltYE=)
2: djt1wnEeMWCGixI9JNMPiTXrt7U.roa (hash: fvje1Lm8IIK5mAd7uOyfo0YMgHNd5fDXDiGQLx1jFzE=)
3: n806vQCKJO6E1y-xgzc_uqP7AsI.roa (hash: N130woa+XpJIXwfcoDYXVXM648PPasYWXY1QC+kU7WQ=)
4: vedQeWGGkbrh9HvL7VIxRJaWOJE.crl (hash: Qt4jIjGdDAbgzv+rvOnaaZtTjnu7D2S5gy5QyWIi0Xk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/8f2093-0318-476c-9e9c-53fc4905629b/1/vedQeWGGkbrh9HvL7VIxRJaWOJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/8f2093-0318-476c-9e9c-53fc4905629b/1/vedQeWGGkbrh9HvL7VIxRJaWOJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vedQeWGGkbrh9HvL7VIxRJaWOJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:fc:40:dd:e8:1d:4a:e2:08:4b:65:29:84:49:a5:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde75079618691bae1f47bcbed52314496963891
Validity
Not Before: Jun 8 10:00:43 2025 GMT
Not After : Jun 9 10:00:43 2025 GMT
Subject: CN=462cd43be7a98afacde416e16b51286717d983b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b3:b4:ac:8d:4a:18:d0:7b:7b:00:34:a7:45:
ba:a5:a7:14:50:95:ca:1e:72:7a:2c:64:2d:c6:d7:
f2:30:86:a3:a0:a8:9a:19:c7:53:20:25:1f:d3:99:
a0:79:dc:41:3c:aa:82:c7:36:f0:4c:3e:a6:36:5b:
4b:35:74:cd:50:9c:5a:4d:e7:f4:e6:b1:a0:bf:d3:
27:03:00:4a:e9:90:45:ba:03:ee:eb:12:c4:be:62:
66:96:9b:49:d8:22:57:06:b5:38:47:8b:32:10:0c:
31:e1:d0:45:16:35:09:f8:54:fd:04:7e:df:34:45:
6f:f2:90:ac:e5:c7:a4:dd:ae:be:9b:e8:fa:e3:e5:
0a:c7:c5:22:ef:81:1c:b7:96:4e:64:c2:12:2d:20:
59:54:87:af:c5:0a:63:6a:5a:b4:f9:bf:c6:fb:44:
fa:a7:53:e8:a1:8c:d9:89:79:8a:c4:ee:58:e7:b2:
2f:ae:f9:bf:ca:9a:73:cb:33:b1:04:e9:92:a1:18:
55:0e:14:49:0b:e7:c5:43:73:48:a3:de:98:54:a5:
ae:dc:db:a2:97:c4:35:bd:26:e4:8f:e7:49:b8:40:
70:1d:c1:8f:f6:b5:61:51:18:2d:bf:15:fe:2d:19:
50:92:e3:03:09:5b:90:91:e4:40:24:92:9d:66:c4:
d1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:2C:D4:3B:E7:A9:8A:FA:CD:E4:16:E1:6B:51:28:67:17:D9:83:B9
X509v3 Authority Key Identifier:
keyid:BD:E7:50:79:61:86:91:BA:E1:F4:7B:CB:ED:52:31:44:96:96:38:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vedQeWGGkbrh9HvL7VIxRJaWOJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/8f2093-0318-476c-9e9c-53fc4905629b/1/vedQeWGGkbrh9HvL7VIxRJaWOJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/8f2093-0318-476c-9e9c-53fc4905629b/1/vedQeWGGkbrh9HvL7VIxRJaWOJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:8c:eb:3f:df:97:86:5c:0b:18:fc:b7:9d:bc:5d:87:6f:f7:
e4:e9:f1:7d:e2:10:09:ce:bd:03:b9:ec:90:56:aa:72:40:02:
e8:e1:78:20:a4:44:c9:45:d2:7c:77:9f:de:4d:95:69:62:03:
59:26:c6:b6:94:bc:0d:99:72:f0:d1:4b:00:09:e5:c7:27:97:
d7:eb:f5:e3:4d:e3:31:5a:f0:15:5c:a9:90:d2:27:bc:e0:ee:
77:9f:9c:f0:60:de:0c:de:e7:11:6f:45:28:2f:f4:a0:cc:48:
18:92:57:34:18:91:3e:01:72:27:7d:07:55:a8:29:10:c0:97:
3e:ba:d0:7c:10:9e:28:52:29:24:1c:73:55:20:a1:38:41:03:
a5:ca:cf:56:7b:1b:ca:7a:21:45:3a:0a:9c:23:f3:b4:c2:19:
fb:d2:98:d6:f7:0e:bb:ea:03:87:e5:6c:27:90:38:18:9e:32:
eb:9f:ca:05:01:3f:81:9d:58:50:91:67:a4:ba:0d:20:ac:c9:
04:97:d8:9a:68:7e:29:d1:ee:ac:6d:2d:44:6e:b2:2a:6e:97:
b3:90:89:02:54:a9:0a:ca:65:f4:29:b7:9c:91:11:00:33:1f:
fa:b1:3a:71:1d:04:6f:ee:75:e8:5e:71:e6:38:27:d5:aa:6a:
9d:0e:0f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:29:50 2025 by rpki-client