Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.mft
File: vKDsWVZDJCN0INUGubSY11LuIWg.mft (raw, json)
Hash identifier: 9DRSMKw2t/W1tK7573IrPE4UKhwp260ER5zW7LSrKlI=
Subject key identifier: 0D:52:39:DB:0F:6C:73:1F:F3:DD:FE:36:07:0B:35:96:02:A9:5F:98
Authority key identifier: BC:A0:EC:59:56:43:24:23:74:20:D5:06:B9:B4:98:D7:52:EE:21:68
Certificate issuer: /CN=bca0ec59564324237420d506b9b498d752ee2168
Certificate serial: 0197493139647DAB345C72C21195E4B40617
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vKDsWVZDJCN0INUGubSY11LuIWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.mft
Manifest number: 1583
Signing time: Sat 07 Jun 2025 07:00:51 +0000
Manifest this update: Sat 07 Jun 2025 07:00:51 +0000
Manifest next update: Sun 08 Jun 2025 07:00:51 +0000
Files and hashes: 1: 4Yqz6mzAxsTp7LTA9pLRdzvqp7A.roa (hash: Ow3YpmTpRMl6qMkXjave/Z2C+8qskJo+DojTdIc7TV4=)
2: angMmzMX4gcbPlkGiqliyl-4RsY.roa (hash: EA5h2yHtnaMB3WqoR9kfvdgGUE89WgrdN7IrWKjGg8w=)
3: quctJA6JvCwqA-qZHXeVYB1FfY8.roa (hash: ktXd2zEikg+b61S+QwkN+l6BxFbDccaraJMDVmopSSI=)
4: vKDsWVZDJCN0INUGubSY11LuIWg.crl (hash: OlpoK8meypXcy8sjKKBw/UBr1sn6I9jmjwIsb2033UI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vKDsWVZDJCN0INUGubSY11LuIWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:39:64:7d:ab:34:5c:72:c2:11:95:e4:b4:06:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bca0ec59564324237420d506b9b498d752ee2168
Validity
Not Before: Jun 7 07:00:51 2025 GMT
Not After : Jun 8 07:00:51 2025 GMT
Subject: CN=0d5239db0f6c731ff3ddfe36070b359602a95f98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b6:95:f1:2c:b1:96:42:8c:85:2f:18:16:65:
79:88:9d:4a:9f:a1:5d:3b:b1:21:cd:5f:b8:04:e6:
1d:a0:b9:03:cb:fe:a6:e2:29:17:cd:6c:d5:7c:2a:
6d:c9:b9:a3:7c:2a:92:14:ff:76:c0:b5:fd:63:8c:
33:4f:e9:50:4b:fa:c8:82:8e:2e:70:b4:6a:48:ff:
4f:81:16:43:0c:e8:c9:15:90:99:1f:38:7a:aa:bd:
bb:16:f1:17:62:81:1d:86:da:9b:35:ea:3e:c1:8e:
1b:43:b5:9f:05:2c:8d:ea:c1:4a:b2:f3:f8:55:2a:
c9:47:d8:92:e7:43:e3:35:f1:5a:5c:20:f5:87:68:
15:fa:63:90:10:97:7f:82:4d:69:6a:9f:94:f2:31:
6b:56:5a:fc:b0:32:1a:c3:80:af:4f:a3:80:db:ac:
a5:46:4a:64:83:ea:e0:a8:3a:54:9f:03:32:c9:84:
a4:37:f4:5a:f4:ae:98:e1:1c:b0:80:b3:b3:bd:62:
7a:15:c9:40:76:8f:0f:25:5d:59:ae:90:8f:04:13:
82:b0:27:c8:5d:5e:18:50:f0:e7:8a:f9:35:58:27:
5f:fb:79:5c:b6:b5:ab:bb:cc:a2:86:cf:9b:a7:62:
c7:f8:ba:8c:37:79:36:09:8f:3c:25:d7:e4:63:c8:
c8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:52:39:DB:0F:6C:73:1F:F3:DD:FE:36:07:0B:35:96:02:A9:5F:98
X509v3 Authority Key Identifier:
keyid:BC:A0:EC:59:56:43:24:23:74:20:D5:06:B9:B4:98:D7:52:EE:21:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vKDsWVZDJCN0INUGubSY11LuIWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:27:46:d0:af:30:60:e6:af:f9:b9:72:f2:55:da:6b:a0:cc:
ff:83:fa:7f:04:a3:ad:e0:da:f1:60:bc:96:5d:83:90:5f:4a:
23:89:17:3f:20:1a:89:cc:cb:d1:d7:43:7d:33:5a:eb:5a:a7:
a9:d6:d1:77:3a:be:b4:5a:9e:2f:c4:57:fe:8c:8e:9b:e9:8a:
9e:ec:9a:86:c3:d0:fc:a6:00:c7:0c:94:17:40:5a:95:94:09:
fd:c3:c1:a6:8d:d7:96:38:c3:48:46:f1:16:33:d1:8a:f3:71:
95:3d:cc:d8:58:3b:12:7c:4a:50:ac:97:95:82:86:76:39:c0:
33:3b:ed:8b:86:bd:ea:ca:c4:72:51:c1:73:85:e1:61:53:c0:
77:a4:38:3c:6e:5b:d4:bc:7e:6a:b2:1c:15:7b:31:fc:b6:99:
5b:5f:4a:f7:61:a4:e7:df:0e:eb:6e:7e:f5:54:09:3b:e7:b4:
ac:4c:3b:4a:2b:1e:22:e1:9d:a9:5c:f2:01:37:b6:d0:e6:d1:
ba:92:81:e7:f9:72:94:63:fc:39:c8:f3:d2:7c:43:46:25:97:
fb:cb:be:c3:03:15:26:33:76:fa:41:6b:8f:1b:96:d7:47:b6:
07:fb:c3:a3:9b:09:ee:fe:7c:51:ae:c4:4c:03:37:7a:db:dc:
26:fc:8d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:52:09 2025 by rpki-client