Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
File: i542u2_vkyj1GOSxBfwhLBUqjGg.mft (raw, json)
Hash identifier: OqdfhmLfoL6xPjBfthDi1t3woghPwAop+LOolie84fY=
Subject key identifier: 70:92:E0:8C:B4:F6:71:79:9A:41:29:63:B6:13:55:B0:B0:4F:FD:B4
Authority key identifier: 8B:9E:36:BB:6F:EF:93:28:F5:18:E4:B1:05:FC:21:2C:15:2A:8C:68
Certificate issuer: /CN=8b9e36bb6fef9328f518e4b105fc212c152a8c68
Certificate serial: 01974C692A6CD1BD335AE81173437E3CCFA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
Manifest number: 1580
Signing time: Sat 07 Jun 2025 22:00:49 +0000
Manifest this update: Sat 07 Jun 2025 22:00:49 +0000
Manifest next update: Sun 08 Jun 2025 22:00:49 +0000
Files and hashes: 1: I1KraudGgIPbGqrokKSi33-L_jY.roa (hash: L9033CVRp8ri3N0mtJw6UMfr2TqSPrf8oAPr6Y4O13o=)
2: i542u2_vkyj1GOSxBfwhLBUqjGg.crl (hash: Z/gKi5Lw9zz4nQbA/7Fb7QWSHaWpVtlDABYrWHXn0rI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:69:2a:6c:d1:bd:33:5a:e8:11:73:43:7e:3c:cf:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9e36bb6fef9328f518e4b105fc212c152a8c68
Validity
Not Before: Jun 7 22:00:49 2025 GMT
Not After : Jun 8 22:00:49 2025 GMT
Subject: CN=7092e08cb4f671799a412963b61355b0b04ffdb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:42:28:19:87:3d:b4:bf:d4:5d:d2:fd:05:fa:
13:21:c1:1b:6f:00:dd:dc:38:07:9f:9c:c7:fe:5d:
d1:5a:f6:c1:06:58:a6:03:20:29:8a:d3:fc:af:50:
ee:3d:14:3d:1c:af:3e:3e:e1:85:af:c2:c1:1a:6b:
90:24:77:38:e1:bb:60:05:08:b1:06:54:63:46:4a:
33:f2:c4:8c:a3:ef:50:9e:5c:b1:38:8e:a6:d0:de:
a9:d9:22:9f:2f:43:0b:5f:a7:cc:2f:75:03:e0:aa:
a0:fc:bf:3d:59:27:23:9f:34:97:2c:c1:6e:76:cf:
17:3f:9a:0f:92:5f:92:bd:91:bf:9b:38:a6:fd:86:
7e:b3:b3:81:98:8d:b3:23:54:65:01:25:14:e0:dd:
c3:70:25:71:b8:bc:c5:6c:bc:e1:9f:74:09:14:9d:
f6:18:0d:21:e0:ee:06:36:0e:26:6b:5e:d9:d7:9d:
a7:f6:b0:1e:f3:e0:7e:48:24:83:d3:00:53:af:a6:
7e:cf:59:64:36:bd:2c:3a:34:b3:da:dc:c7:f9:e4:
c3:13:69:5b:bf:7d:21:21:30:7b:ae:6e:26:59:73:
9d:dc:f5:e8:43:e6:f8:1b:b2:89:fb:31:c0:0e:83:
f0:6a:1c:8d:d3:9b:a0:bf:b5:b0:f3:64:f3:c7:1b:
81:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:92:E0:8C:B4:F6:71:79:9A:41:29:63:B6:13:55:B0:B0:4F:FD:B4
X509v3 Authority Key Identifier:
keyid:8B:9E:36:BB:6F:EF:93:28:F5:18:E4:B1:05:FC:21:2C:15:2A:8C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:cd:78:bd:7e:7a:a1:22:b8:38:ee:41:3d:12:cb:76:8b:c7:
69:1e:02:38:db:cf:9a:be:4b:cf:e9:53:66:95:72:ae:45:50:
ed:3b:1c:2d:ba:18:1e:90:6f:5a:f6:31:45:13:79:78:d0:92:
70:d2:40:05:10:2e:63:6a:74:30:28:97:d1:4c:b7:dc:d9:c4:
31:a7:b9:0a:00:c5:ea:3a:79:1c:75:fa:3b:d5:2b:43:7f:9d:
7f:5a:af:97:c3:47:10:6a:78:ea:fd:31:c5:2e:5a:10:87:77:
0a:9a:e2:13:0d:ab:74:60:34:7f:b3:97:57:02:b7:c8:fd:f1:
f2:f3:45:39:e4:04:57:93:db:70:79:37:c2:7e:bc:23:28:9d:
b7:5e:3b:17:a2:d4:15:f3:80:1a:86:2b:a0:16:8a:8f:4f:d0:
8b:82:4b:70:df:65:0c:2f:d6:2a:37:4a:35:30:b2:8e:ec:51:
94:de:52:28:db:9b:e9:c0:70:c0:45:ed:cb:67:89:3a:27:b9:
b2:63:79:f5:7d:bd:4f:11:35:e6:17:52:88:e5:6e:0d:a7:80:
e2:86:bb:06:5b:6e:93:61:a2:31:4e:d8:94:ec:a2:90:39:a4:
a0:42:9a:c7:a9:4b:cc:a0:0e:83:8b:39:74:8b:3d:cf:a1:73:
e5:69:81:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:10:58 2025 by rpki-client