Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.mft
File: 1-vcGbaCaViJCYORuom3Jyx26jjc.mft (raw, json)
Hash identifier: 2Ww5qpwRJThr/wuJk7MRhdePNqAO7J55wuu2YgDCOPA=
Subject key identifier: 73:DF:5D:95:39:46:EF:B9:6A:04:D7:16:43:7F:9F:CA:36:64:50:CA
Authority key identifier: FA:F7:06:6D:A0:9A:56:22:42:60:E4:6E:A2:6D:C9:CB:1D:BA:8E:37
Certificate issuer: /CN=faf7066da09a56224260e46ea26dc9cb1dba8e37
Certificate serial: 01974CD6A66356060BF1ABCD9AF1F50AB3E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vcGbaCaViJCYORuom3Jyx26jjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.mft
Manifest number: 10C2
Signing time: Sun 08 Jun 2025 00:00:25 +0000
Manifest this update: Sun 08 Jun 2025 00:00:25 +0000
Manifest next update: Mon 09 Jun 2025 00:00:25 +0000
Files and hashes: 1: 0npgtCw2cniYZRSczr6L1wq2NDE.roa (hash: 7qLMTW4Hb0+zjkcR3VjQ/z+HhWTfAgpVarVUL4CErX4=)
2: 1-vcGbaCaViJCYORuom3Jyx26jjc.crl (hash: iMI4FxPzSjSIUDvo5KrP+Y9qjUYuQGU1zDaQlbN42jA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-vcGbaCaViJCYORuom3Jyx26jjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d6:a6:63:56:06:0b:f1:ab:cd:9a:f1:f5:0a:b3:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf7066da09a56224260e46ea26dc9cb1dba8e37
Validity
Not Before: Jun 8 00:00:25 2025 GMT
Not After : Jun 9 00:00:25 2025 GMT
Subject: CN=73df5d953946efb96a04d716437f9fca366450ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:55:e3:38:be:cc:10:1c:8d:81:c4:8c:e0:9a:
c9:86:04:1e:6c:0e:df:04:32:14:ba:19:80:86:11:
89:9b:e5:20:0a:79:33:2e:14:6d:2c:e5:3d:3e:d5:
5b:9c:80:76:e1:05:d6:2d:4f:26:b4:bd:f4:8d:c4:
38:7d:91:74:cf:3d:89:01:47:85:89:00:c8:13:51:
b2:0b:dd:94:c8:c2:5d:9d:02:d4:be:59:94:a7:10:
9a:65:b7:ce:b8:b6:57:d3:76:2d:a2:41:81:ab:22:
e5:56:61:48:a7:66:18:6c:9d:dd:c9:fa:ee:e1:16:
35:da:4a:19:db:88:6d:3d:18:43:2e:8d:b9:ba:50:
ee:c0:ab:f4:43:08:70:fe:2d:b3:05:b4:9d:0d:e8:
b9:39:a1:4a:fa:52:a3:12:31:b2:43:06:ca:42:5f:
8b:2a:e4:93:2b:8f:dd:b3:e6:0e:99:dc:22:e6:88:
71:8f:3c:0e:7c:c8:9f:c3:0d:bd:36:f4:7f:d5:b5:
27:01:18:7d:05:c9:86:ad:91:93:bf:6c:cc:09:df:
bf:3c:82:94:95:8f:06:76:7f:f3:4d:48:ce:34:16:
3a:b4:82:b7:d6:f3:be:71:48:93:26:16:03:95:43:
a8:b7:70:93:44:58:bf:9a:f7:57:3e:34:50:d1:ba:
55:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:DF:5D:95:39:46:EF:B9:6A:04:D7:16:43:7F:9F:CA:36:64:50:CA
X509v3 Authority Key Identifier:
keyid:FA:F7:06:6D:A0:9A:56:22:42:60:E4:6E:A2:6D:C9:CB:1D:BA:8E:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vcGbaCaViJCYORuom3Jyx26jjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:8b:58:6d:01:d5:8b:5d:23:9c:a3:e5:85:01:39:ef:f1:52:
08:23:85:47:1a:3c:93:ed:d0:5b:39:9d:cd:49:4e:19:8e:74:
5b:c0:9b:76:80:19:88:23:6b:8d:f1:ff:21:23:8b:60:13:ce:
ec:c3:f6:2d:4f:e3:f7:4a:45:c4:cd:5f:36:61:8c:83:0f:1a:
0c:17:66:32:35:15:c3:72:55:35:ff:03:56:bd:15:a2:1f:03:
07:63:b0:24:7a:53:49:7e:14:53:ae:01:43:75:88:7d:56:84:
9b:a7:7d:31:93:09:08:2c:bf:60:9a:c8:4a:b3:f6:52:28:b1:
16:11:93:cf:23:31:eb:4f:b3:58:23:42:ef:1b:e4:64:f3:e2:
3b:4f:0e:d9:95:0a:02:1c:c7:a6:a6:d7:fe:5b:ed:bc:e4:b8:
5c:7c:aa:23:0e:f9:0a:3c:14:28:5a:03:b8:12:3d:0f:24:59:
d0:10:f6:87:69:42:8b:8d:53:8a:f3:0c:ef:bd:f3:a9:88:4e:
b1:62:ab:2d:d0:ea:08:97:27:c4:dd:9d:7c:a0:6b:44:70:89:
58:7b:7b:7f:88:16:16:12:27:e2:23:28:37:3e:36:a2:74:41:
c4:1b:74:de:3c:bc:80:d3:e1:b0:63:24:78:9c:1c:28:8c:51:
8f:93:e4:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 02:55:46 2025 by rpki-client