Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
File: vjfHDxxn7KF3WnCckjXWovVVFrg.mft (raw, json)
Hash identifier: aZsjHCoDKPS7HHUMXnyW9sawoVU0L8s3RbDB2SgIFJc=
Subject key identifier: EE:32:89:36:1B:7F:11:66:35:B9:28:C1:4D:BF:B2:04:EC:8A:B8:E6
Authority key identifier: BE:37:C7:0F:1C:67:EC:A1:77:5A:70:9C:92:35:D6:A2:F5:55:16:B8
Certificate issuer: /CN=be37c70f1c67eca1775a709c9235d6a2f55516b8
Certificate serial: 01976170864DA514B498D762A1C199D39D2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
Manifest number: 098A
Signing time: Thu 12 Jun 2025 00:00:53 +0000
Manifest this update: Thu 12 Jun 2025 00:00:53 +0000
Manifest next update: Fri 13 Jun 2025 00:00:53 +0000
Files and hashes: 1: ct0pyOPI6fIxvI90voKvQ2P09kc.roa (hash: HL+IQFJP+wo1WUNFcjpb/00F+VP2TuCmZyFITiHM4E4=)
2: gW5vsz1XHWHAiEv2XrHiZAPT2LM.roa (hash: /LPDMtSPu0KMCf6GqHsTiZ0o1jWTrz0r+OipJeljVUk=)
3: smZrnk_Yoz0MEPZqDKnYUoP-Opw.roa (hash: 24G5yjs0ZUoqUy4OoFHxczQzhAIkELffXisqhuw+2DI=)
4: vjfHDxxn7KF3WnCckjXWovVVFrg.crl (hash: hELdGehsHFZRkZc6pGiok6f7RMKZy+lesAjzWHARhVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 21:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:61:70:86:4d:a5:14:b4:98:d7:62:a1:c1:99:d3:9d:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be37c70f1c67eca1775a709c9235d6a2f55516b8
Validity
Not Before: Jun 12 00:00:53 2025 GMT
Not After : Jun 13 00:00:53 2025 GMT
Subject: CN=ee3289361b7f116635b928c14dbfb204ec8ab8e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:83:a0:4c:19:f1:7c:82:46:5e:ad:0a:35:68:
3e:61:10:49:a8:74:a5:73:99:86:42:9f:64:45:e4:
cd:a2:2c:55:8f:8f:a9:5f:c0:3a:09:71:b5:12:f8:
30:a7:88:0e:0a:b4:91:36:79:21:6a:0f:2a:b0:bc:
03:4b:40:4c:98:76:40:c8:c8:2b:5f:79:9b:02:07:
fb:a5:ea:0c:ed:2f:07:7d:57:32:85:be:08:44:f4:
f5:c6:e9:29:a0:31:34:45:5d:58:81:78:a0:bc:31:
1d:10:60:d6:f0:27:9d:1b:e3:f7:28:a0:2c:28:20:
13:9a:f3:de:88:7f:76:0b:6f:9e:35:81:20:04:42:
84:72:40:d1:66:ed:65:f4:9d:b7:ce:31:54:d1:d9:
78:0d:21:0e:0d:01:c6:cf:16:1a:f4:52:20:4f:d9:
06:42:5b:62:c0:c5:68:a5:45:b3:06:1e:df:90:fe:
37:4f:56:06:15:a3:b0:77:1a:1b:d8:dd:11:e3:f6:
b6:2c:66:78:0e:d6:72:71:94:cc:db:ea:ae:ac:23:
e2:51:b2:b7:ae:d0:14:52:9c:9b:f7:25:5e:21:65:
9d:17:90:46:d0:2c:7f:fd:9f:d0:32:87:63:16:47:
b0:6b:96:f5:84:98:98:b1:cc:4d:ce:53:09:d1:6e:
1b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:32:89:36:1B:7F:11:66:35:B9:28:C1:4D:BF:B2:04:EC:8A:B8:E6
X509v3 Authority Key Identifier:
keyid:BE:37:C7:0F:1C:67:EC:A1:77:5A:70:9C:92:35:D6:A2:F5:55:16:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:d6:88:21:ea:83:f4:69:94:ec:f3:0d:29:60:ee:0c:09:81:
34:2f:df:85:82:64:0a:58:40:8b:ff:01:ee:22:6f:ee:7b:d6:
47:1d:5a:09:b0:10:14:2a:37:9e:11:a1:d1:3e:9c:a4:37:cf:
2f:0e:ee:c3:60:f1:a5:2a:fc:aa:99:ec:e9:ad:93:c5:2c:28:
c6:50:6e:d4:de:a2:2f:42:7e:af:23:96:9b:fb:fe:d1:7c:be:
d5:91:d7:4f:16:f6:ed:d0:95:4d:29:c1:13:6b:9d:44:c7:2f:
c6:2a:9f:89:27:51:50:d0:85:89:e0:6e:0e:e5:2f:18:bd:fb:
71:77:32:71:42:de:33:fd:81:52:ed:6b:7d:5e:f1:a5:f0:b5:
45:dc:0a:0e:a6:6c:5f:cb:98:b4:b2:2f:12:d3:27:fe:29:52:
5b:cc:43:f8:22:5c:3a:79:39:15:02:c3:21:bb:99:24:0a:03:
0b:e7:05:68:d3:2e:19:ad:f6:35:b8:96:ef:86:bb:3e:71:ad:
cb:ac:8c:15:50:aa:19:22:b9:fd:d4:9e:ec:fc:b7:ba:79:10:
11:83:01:da:8e:b2:f3:c2:0a:19:b5:fb:c3:0d:86:4f:e7:4e:
98:77:42:1b:23:b6:f6:7c:b3:93:88:d1:ca:f9:30:ec:db:b3:
63:04:4c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 04:00:51 2025 by rpki-client