Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
File: vJxAOtAH4qJCprCQYaPBo2CmTVo.mft (raw, json)
Hash identifier: nIT3t9ulwvjqbyISfucoBtoqrWXFqQxJhimOezReNJc=
Subject key identifier: CA:06:BF:77:AB:BD:00:A0:2D:01:88:4E:3F:CD:67:36:DB:9C:CE:38
Authority key identifier: BC:9C:40:3A:D0:07:E2:A2:42:A6:B0:90:61:A3:C1:A3:60:A6:4D:5A
Certificate issuer: /CN=bc9c403ad007e2a242a6b09061a3c1a360a64d5a
Certificate serial: 01974CD739529D0C02201A0743AF64C70BBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
Manifest number: 07C6
Signing time: Sun 08 Jun 2025 00:01:02 +0000
Manifest this update: Sun 08 Jun 2025 00:01:02 +0000
Manifest next update: Mon 09 Jun 2025 00:01:02 +0000
Files and hashes: 1: c4jk7gKONHNQDGzC6dsv2q8s7vI.roa (hash: a6L74Wo+bnsgWub76o3PYF/fgomhfzvN3TtRHLCaboU=)
2: tPkC9g1rh0B-WDtzyBxNorqbjqo.roa (hash: 3UTyjNkmps78kxWwCRVUmx8qZWeL7ho0lCKlGDqKCwQ=)
3: vJxAOtAH4qJCprCQYaPBo2CmTVo.crl (hash: BExHVK5qYTCExQ1Ku/EotcKahY9mpetJk5NZoivDdOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 00:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d7:39:52:9d:0c:02:20:1a:07:43:af:64:c7:0b:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9c403ad007e2a242a6b09061a3c1a360a64d5a
Validity
Not Before: Jun 8 00:01:02 2025 GMT
Not After : Jun 9 00:01:02 2025 GMT
Subject: CN=ca06bf77abbd00a02d01884e3fcd6736db9cce38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a1:be:62:a4:b0:d4:38:4b:55:16:02:dc:58:
b3:f9:cc:5d:2c:15:98:8b:93:a0:41:db:dc:b5:89:
b7:0f:3f:c9:c5:cc:81:a6:b8:f9:7d:9c:17:5b:37:
4e:53:8e:88:a1:da:9d:41:41:3f:aa:00:37:13:b1:
c7:6f:ba:0c:20:6d:d0:84:c2:76:13:42:da:d3:18:
be:14:df:f1:c5:96:54:6e:4f:75:ec:7c:bd:42:aa:
ba:56:9a:15:7d:7e:c6:eb:c6:e6:cc:59:aa:23:30:
81:ea:93:24:68:4d:8e:01:74:91:90:cf:c3:07:0a:
0e:7e:ab:12:ba:af:39:58:24:f2:7f:18:92:86:ea:
87:60:d5:47:72:6e:29:79:40:87:07:56:10:cf:85:
43:41:c7:6d:f2:70:b5:bb:f5:14:94:b7:9f:e8:c2:
e8:fa:91:f3:9a:48:7a:ee:de:05:4e:dc:5f:80:24:
d6:e9:7d:68:16:f2:33:db:3d:21:6f:0f:8f:2d:41:
37:05:45:53:0a:f8:bc:c2:ef:58:0d:3b:ba:4a:ed:
51:d6:3b:98:11:5b:5c:ca:00:3b:2a:58:c7:28:ea:
39:8e:a0:c5:b2:53:18:f4:d6:37:25:2f:8c:d5:90:
2a:92:7f:47:c2:22:72:46:3a:f2:e6:fb:d0:7b:0c:
4b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:06:BF:77:AB:BD:00:A0:2D:01:88:4E:3F:CD:67:36:DB:9C:CE:38
X509v3 Authority Key Identifier:
keyid:BC:9C:40:3A:D0:07:E2:A2:42:A6:B0:90:61:A3:C1:A3:60:A6:4D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:42:65:16:0a:78:78:b2:0f:29:aa:79:62:1a:f4:2a:9a:cd:
61:8f:b5:63:e5:4a:5b:44:b3:32:4a:7c:08:e6:13:dc:49:7a:
dd:9c:d5:55:80:80:bc:66:a2:ab:55:8c:c6:b8:cf:6c:12:1d:
fb:f1:25:4a:c1:02:6a:ab:bf:24:54:32:a4:56:5b:ca:af:6c:
91:96:1f:d0:27:89:9a:7d:03:ec:7e:c7:cb:44:52:e2:9c:bb:
be:45:4b:60:c0:98:5d:86:bc:7c:a3:92:eb:92:02:03:eb:32:
aa:e1:6e:78:5e:55:83:24:87:cb:62:38:13:9d:93:8c:0b:de:
11:e6:50:64:87:bd:25:e6:50:a4:df:7b:16:c4:f6:94:0f:60:
6f:97:94:98:db:ed:7b:98:eb:c5:67:91:74:08:ff:df:3c:65:
70:38:38:67:74:94:d9:04:02:20:8e:cb:da:ca:8d:bc:ed:b1:
d3:93:ff:1b:26:4d:03:63:6d:60:8b:4b:1c:6a:f3:e5:69:d4:
26:8d:61:89:ed:c9:1e:6f:56:69:5b:0c:41:ab:4c:2c:03:a1:
54:ed:e7:eb:f3:7f:55:70:d8:21:51:d5:08:3c:41:41:a4:a2:
38:30:74:a3:7e:05:33:d6:d8:b6:7c:5f:b9:58:67:90:77:fa:
b5:68:d4:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:06:22 2025 by rpki-client