Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft
File: vQY9lEu4H8McuhFJndAG607OliQ.mft (raw, json)
Hash identifier: i8fYuJ8hj5ym0P0nVySIXQ0vnvsWtlHMm/ruWWrL4qQ=
Subject key identifier: 7D:F7:F8:3F:9D:5C:54:98:DC:B4:D4:C1:4D:52:8F:3E:E2:6C:DB:5D
Authority key identifier: BD:06:3D:94:4B:B8:1F:C3:1C:BA:11:49:9D:D0:06:EB:4E:CE:96:24
Certificate issuer: /CN=bd063d944bb81fc31cba11499dd006eb4ece9624
Certificate serial: 01974E8E27D2B576A7F83FC0212500BC6EC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vQY9lEu4H8McuhFJndAG607OliQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft
Manifest number: 03B5
Signing time: Sun 08 Jun 2025 08:00:28 +0000
Manifest this update: Sun 08 Jun 2025 08:00:28 +0000
Manifest next update: Mon 09 Jun 2025 08:00:28 +0000
Files and hashes: 1: Nq1isTWXGFgDMfQsWjLkSFAz9YU.roa (hash: cOanxi0n0S0i8MlV6jtoZzMtSVudeCiiZSom6UuFfg0=)
2: vQY9lEu4H8McuhFJndAG607OliQ.crl (hash: KP553dbId4iwzYfzenbdgP+mLnxjkM9tOJOSOsihGkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vQY9lEu4H8McuhFJndAG607OliQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:8e:27:d2:b5:76:a7:f8:3f:c0:21:25:00:bc:6e:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd063d944bb81fc31cba11499dd006eb4ece9624
Validity
Not Before: Jun 8 08:00:28 2025 GMT
Not After : Jun 9 08:00:28 2025 GMT
Subject: CN=7df7f83f9d5c5498dcb4d4c14d528f3ee26cdb5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:33:46:6c:ab:68:75:0d:f8:de:4b:07:e5:64:
00:ad:b6:1d:9a:35:1e:7c:18:1f:31:f8:8d:24:42:
84:cc:0d:77:a0:53:30:f3:82:4f:f0:af:13:5b:d4:
e0:ab:e4:22:86:01:3d:bc:f8:59:42:65:c8:03:13:
15:43:5b:7a:98:46:99:3f:8b:7a:d9:5c:e0:63:a4:
ab:7d:b7:03:00:5a:5a:de:ac:a4:7b:f0:68:0f:1f:
66:fb:30:c4:3a:48:5e:34:7f:97:25:00:9d:34:c7:
6e:fc:44:86:bb:01:a2:5c:57:29:47:9f:a3:d0:24:
a9:d8:2c:ec:d1:fa:af:e0:60:94:6f:e5:83:3e:05:
2e:58:4e:d0:99:d2:50:34:fa:dc:06:06:bd:be:78:
64:e1:ce:68:ed:f3:c3:c9:79:00:54:b4:00:cf:78:
b4:dc:1e:49:86:46:93:e3:04:8c:86:bb:3b:7b:ea:
63:6e:a3:f7:a8:90:62:42:83:4b:44:e5:63:f0:90:
0b:04:9f:9a:a2:a5:dc:70:b2:b2:a3:bd:1f:05:09:
11:ad:78:10:63:49:ce:df:f3:cd:26:74:81:77:88:
1f:56:1c:4c:04:cf:bb:c4:78:10:6c:b6:8c:b2:70:
0f:db:df:53:a5:6a:dc:31:2d:08:2c:ca:ca:6c:7b:
71:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:F7:F8:3F:9D:5C:54:98:DC:B4:D4:C1:4D:52:8F:3E:E2:6C:DB:5D
X509v3 Authority Key Identifier:
keyid:BD:06:3D:94:4B:B8:1F:C3:1C:BA:11:49:9D:D0:06:EB:4E:CE:96:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQY9lEu4H8McuhFJndAG607OliQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:a8:48:f0:47:19:4c:52:ce:48:22:d4:03:58:9c:b9:aa:fe:
6a:11:bf:41:91:08:b4:0b:d3:f0:d5:06:74:8d:fb:4e:b6:27:
e4:24:e1:ae:0e:53:ed:bf:7c:2a:34:1c:6c:57:7b:28:e4:43:
bc:d1:e9:04:a2:25:04:31:47:47:7a:dc:f2:5a:a7:61:4b:bd:
ad:e9:e0:c5:64:c5:fe:88:be:dc:1b:f4:a8:5d:35:96:73:0b:
3e:be:79:0d:73:9c:cb:72:63:6f:e3:e3:cb:0a:08:93:c1:0e:
96:e6:f1:29:22:10:d9:d1:d2:69:ed:a7:d5:06:21:9a:b3:f6:
be:43:9d:f8:6b:ee:19:16:8e:a3:e8:6f:5c:b1:7c:8a:41:14:
21:05:1b:af:4e:6b:89:8a:e9:e5:4c:6b:6d:c7:62:5f:93:3b:
f6:81:54:61:db:82:7a:5f:bd:88:5c:94:7c:4d:e2:3a:46:09:
14:ae:88:49:1d:51:23:6c:29:9a:c7:9e:50:cf:d4:93:f8:25:
b6:aa:1d:6f:99:cb:b9:1e:82:2a:38:bc:fb:98:24:65:08:57:
d6:c2:8d:ef:12:16:97:b4:de:28:59:15:b6:88:5f:59:e7:89:
fa:b9:38:46:77:81:19:e2:8f:83:9a:82:e7:63:0a:89:f2:ce:
8a:6f:b3:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:20:44 2025 by rpki-client