Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
File: vjfHDxxn7KF3WnCckjXWovVVFrg.mft (raw, json)
Hash identifier: rlmkgWBqaj+qdmilv34nAXXE/ENBo1ZhykvdtRRH1gc=
Subject key identifier: B6:4B:E4:D8:6D:43:0C:8B:3D:0A:94:FB:39:FB:33:78:F9:77:A9:01
Authority key identifier: BE:37:C7:0F:1C:67:EC:A1:77:5A:70:9C:92:35:D6:A2:F5:55:16:B8
Certificate issuer: /CN=be37c70f1c67eca1775a709c9235d6a2f55516b8
Certificate serial: 0197635EF4D3905A7DB5A67D9C0E58B45F6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
Manifest number: 098B
Signing time: Thu 12 Jun 2025 09:00:56 +0000
Manifest this update: Thu 12 Jun 2025 09:00:56 +0000
Manifest next update: Fri 13 Jun 2025 09:00:56 +0000
Files and hashes: 1: ct0pyOPI6fIxvI90voKvQ2P09kc.roa (hash: HL+IQFJP+wo1WUNFcjpb/00F+VP2TuCmZyFITiHM4E4=)
2: gW5vsz1XHWHAiEv2XrHiZAPT2LM.roa (hash: /LPDMtSPu0KMCf6GqHsTiZ0o1jWTrz0r+OipJeljVUk=)
3: smZrnk_Yoz0MEPZqDKnYUoP-Opw.roa (hash: 24G5yjs0ZUoqUy4OoFHxczQzhAIkELffXisqhuw+2DI=)
4: vjfHDxxn7KF3WnCckjXWovVVFrg.crl (hash: 4F/c0D+MnG7xoBHRyISwgx5AqpSvEaMHpwOQlY5mHnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:5e:f4:d3:90:5a:7d:b5:a6:7d:9c:0e:58:b4:5f:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be37c70f1c67eca1775a709c9235d6a2f55516b8
Validity
Not Before: Jun 12 09:00:56 2025 GMT
Not After : Jun 13 09:00:56 2025 GMT
Subject: CN=b64be4d86d430c8b3d0a94fb39fb3378f977a901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a9:0e:d1:42:a3:f5:b0:38:82:03:cd:31:2e:
95:6a:85:b3:cc:a1:2b:ca:23:6c:9d:96:e0:79:52:
73:b9:e5:3c:71:1a:fa:95:49:99:af:68:d1:1b:14:
9d:ab:b7:e0:0b:f3:ec:e4:7a:cf:de:ed:7f:14:98:
60:0a:39:45:52:22:eb:24:cc:c7:f9:46:f7:5b:f2:
af:00:0a:8c:9c:43:af:93:24:3d:27:84:38:fb:f1:
78:5c:26:75:0e:39:6f:6e:a9:a3:00:73:97:a4:fe:
f2:00:13:44:28:cd:6c:6c:85:5e:92:7e:e9:1a:97:
5c:de:4b:a0:32:2b:43:f4:a9:1b:f2:37:38:43:37:
11:1f:53:f0:01:81:7d:7c:ec:4c:78:71:f6:48:6d:
62:48:15:ea:a2:f7:11:05:40:f0:29:75:c2:5b:76:
6b:b6:d9:35:dd:04:8f:85:56:87:db:97:92:a4:d2:
9e:93:e2:f7:32:42:c6:a1:b6:e7:90:7d:c7:1b:ef:
72:bc:91:98:20:e6:78:f3:09:6a:6d:a1:5f:0f:26:
b9:30:89:44:28:26:3c:14:11:89:35:19:16:b7:fd:
ce:52:ad:42:e7:95:94:2c:35:16:61:10:ab:e8:42:
35:23:93:63:86:2e:96:46:c9:64:b1:c6:08:76:9a:
f4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:4B:E4:D8:6D:43:0C:8B:3D:0A:94:FB:39:FB:33:78:F9:77:A9:01
X509v3 Authority Key Identifier:
keyid:BE:37:C7:0F:1C:67:EC:A1:77:5A:70:9C:92:35:D6:A2:F5:55:16:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:ed:8f:36:24:8d:69:e8:68:75:cc:ce:c4:1d:52:87:45:0b:
f4:45:61:ff:28:38:33:a6:fb:4e:12:21:9c:94:78:a6:47:5b:
8a:9d:f5:9d:de:a4:ec:ff:56:b1:8a:ff:9d:c9:2d:d2:63:8b:
6c:14:7c:32:6d:50:5f:e9:4e:f6:7e:40:21:65:53:5a:94:e0:
64:83:24:ab:9e:93:7c:0a:4b:45:37:4e:0e:6a:94:0c:8a:15:
d5:f6:9b:7c:5e:97:bb:02:be:5c:80:c5:73:2c:fa:60:5a:54:
2b:74:3f:64:c9:5f:30:51:b6:4e:3d:cc:e4:ff:d7:c3:07:50:
53:f4:de:8f:63:bc:4a:3b:cf:b6:a1:63:2e:40:7b:f6:97:10:
a8:47:a7:2f:ee:8c:63:7b:2c:43:4f:0f:64:b4:70:82:d5:c3:
22:c2:89:c6:32:32:e4:0b:6f:b8:f4:34:81:db:8f:67:e2:64:
45:03:91:7d:bc:c4:af:f7:e0:c2:5c:d7:b1:fb:e8:3f:06:37:
dc:2e:6a:a6:fa:f6:1f:4c:2e:5e:e6:f7:83:19:81:cf:19:b1:
6f:6e:5e:62:07:cd:a7:27:b7:3a:a1:1c:0c:19:43:96:a4:e1:
0e:41:71:ff:58:f2:7f:46:ea:f5:d8:57:e2:35:d7:5e:a4:30:
41:2f:ae:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 13:53:49 2025 by rpki-client