Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.mft
File: vi8szxuqOQM-x2pYb4RqNiGPIJ0.mft (raw, json)
Hash identifier: mjyk6HJM8FV7cnwnPSLA9FIQffROGs7OxokYAud6fU0=
Subject key identifier: 25:44:5B:E3:B8:70:8C:CB:AF:AB:AA:5D:68:2E:AD:B3:F6:D4:C9:9D
Authority key identifier: BE:2F:2C:CF:1B:AA:39:03:3E:C7:6A:58:6F:84:6A:36:21:8F:20:9D
Certificate issuer: /CN=be2f2ccf1baa39033ec76a586f846a36218f209d
Certificate serial: 019751FD86EC66E8215C82FA037EA21856A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vi8szxuqOQM-x2pYb4RqNiGPIJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.mft
Manifest number: 10C3
Signing time: Mon 09 Jun 2025 00:00:59 +0000
Manifest this update: Mon 09 Jun 2025 00:00:59 +0000
Manifest next update: Tue 10 Jun 2025 00:00:59 +0000
Files and hashes: 1: JAdnsONCtTfLbO2OfLFXkq3UEe0.roa (hash: uH25J1sXmVYdKjAjZcQtubKyV6gnVwOjCbWyLNaZ4r4=)
2: vi8szxuqOQM-x2pYb4RqNiGPIJ0.crl (hash: xdGB7mT93PJ5MkCD4n0Tu1QZ3v1ulq6HaxrBZn7HlfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vi8szxuqOQM-x2pYb4RqNiGPIJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 00:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:fd:86:ec:66:e8:21:5c:82:fa:03:7e:a2:18:56:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be2f2ccf1baa39033ec76a586f846a36218f209d
Validity
Not Before: Jun 9 00:00:59 2025 GMT
Not After : Jun 10 00:00:59 2025 GMT
Subject: CN=25445be3b8708ccbafabaa5d682eadb3f6d4c99d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:78:e8:9d:39:81:f1:e0:c5:19:2a:fe:90:07:
4c:cf:47:cc:60:ff:1f:b7:9e:60:81:67:c2:af:2c:
ed:de:66:ee:87:e1:d5:eb:79:de:2c:ef:0f:f9:93:
fb:b1:20:64:22:22:95:55:d8:1e:37:70:61:47:27:
58:82:aa:81:d6:95:00:d8:47:e1:e9:68:c5:0f:8d:
9d:65:ad:30:04:79:57:a5:89:df:0a:90:85:84:fd:
48:71:09:bf:af:e2:14:cc:52:98:fb:73:c0:b0:f8:
52:f8:1b:af:02:79:39:ce:fe:3c:d5:54:8d:84:02:
5d:fc:26:de:5d:f4:9b:49:e3:88:dd:83:fe:80:0c:
08:e1:1b:34:c5:a0:1a:52:d0:f5:2f:a2:89:96:e4:
ad:34:da:29:87:78:5e:c3:25:bf:13:54:39:89:4b:
dd:96:fb:ae:56:a2:53:aa:97:82:90:57:8a:7c:37:
db:36:a6:cd:c0:a7:89:31:d0:23:81:32:ab:78:0f:
83:50:e6:d3:e4:19:5f:16:8c:fa:24:d3:e3:c3:9e:
de:43:5a:ac:63:1c:41:56:15:5c:32:59:50:a6:97:
38:f7:2a:df:7e:27:24:bd:4c:b1:d4:fb:3d:8d:31:
22:df:c0:78:c4:ad:c2:3d:5e:f6:74:d8:c2:a9:d0:
8a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:44:5B:E3:B8:70:8C:CB:AF:AB:AA:5D:68:2E:AD:B3:F6:D4:C9:9D
X509v3 Authority Key Identifier:
keyid:BE:2F:2C:CF:1B:AA:39:03:3E:C7:6A:58:6F:84:6A:36:21:8F:20:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vi8szxuqOQM-x2pYb4RqNiGPIJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:44:ee:8d:1d:d0:b8:8c:c8:cc:84:d7:c4:17:89:76:e5:e6:
7a:82:f8:9b:be:9c:61:ba:63:0c:47:52:a2:11:8e:94:24:84:
06:35:3f:60:81:68:66:53:25:ae:09:39:7e:a4:d4:8f:21:d4:
a7:52:66:c4:d9:f0:99:1b:15:66:a6:f7:1a:88:01:21:4e:ac:
5e:ae:b1:77:58:a3:8a:14:08:95:6e:1c:45:aa:7d:d7:47:08:
7f:66:c4:3d:1a:eb:4a:c8:e3:62:1b:9b:f2:da:8e:ad:9a:53:
b0:b2:32:cf:41:1c:9e:4e:17:89:51:a5:b1:66:a9:ae:c8:4a:
41:2d:39:38:43:fd:23:b5:7f:cf:8e:fb:d5:8e:52:91:20:16:
99:20:7d:82:b2:cf:1e:7b:56:ec:76:e9:60:e3:d2:53:ba:84:
94:9c:eb:3f:25:19:20:f8:a9:7f:6b:37:29:3d:4b:f9:f6:12:
19:7f:fc:79:50:e1:98:76:cd:5d:cf:7d:c5:93:d4:06:b9:b3:
33:eb:6c:e6:65:3f:8a:b3:b3:ba:c6:ca:48:18:47:f1:ae:27:
c3:54:b6:aa:67:1c:08:79:9c:e2:3f:75:36:0b:f6:f0:f8:ae:
0a:c3:b0:be:a1:55:c2:1a:ed:bd:86:2a:80:67:f6:9a:26:84:
a2:ca:2b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 09:27:35 2025 by rpki-client