Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
File: vDEkfzWabUktyZQ64PAPyL4hbHg.mft (raw, json)
Hash identifier: 0ogAKjuM/MxV7mC/TLog2z91GehFWzCH3QBK5l3tKTE=
Subject key identifier: 6E:28:3F:21:E2:D1:E7:B6:4C:D8:0F:F9:52:C7:3F:4D:EE:7C:33:24
Authority key identifier: BC:31:24:7F:35:9A:6D:49:2D:C9:94:3A:E0:F0:0F:C8:BE:21:6C:78
Certificate issuer: /CN=bc31247f359a6d492dc9943ae0f00fc8be216c78
Certificate serial: 019748FA0C9F907390908435AD581A5F9D1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 06:00:36 +0000
Manifest this update: Sat 07 Jun 2025 06:00:36 +0000
Manifest next update: Sun 08 Jun 2025 06:00:36 +0000
Files and hashes: 1: OTqu6ofFTyzK0xc5jrx6KgXbQ7M.roa (hash: McteydyUGW+LpPCexm+O1QefOp1oYc2XsREa8UjCVIA=)
2: dKgonROO4xpKslqbxO1osnY3m3M.roa (hash: Hl3GLighJnfdP7Jed7jsC0ysJmCVrDY4pvlKDvOdEYc=)
3: vDEkfzWabUktyZQ64PAPyL4hbHg.crl (hash: g/qaXCbWX4K+qMXNGmsX/J7A/TiXxwRyB9wW5adzcQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:0c:9f:90:73:90:90:84:35:ad:58:1a:5f:9d:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc31247f359a6d492dc9943ae0f00fc8be216c78
Validity
Not Before: Jun 7 06:00:36 2025 GMT
Not After : Jun 8 06:00:36 2025 GMT
Subject: CN=6e283f21e2d1e7b64cd80ff952c73f4dee7c3324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:bb:c7:a4:8d:84:a3:5c:a2:c5:6e:4b:de:f7:
ec:08:bb:19:94:65:b2:b1:af:13:b8:b1:5c:c9:43:
01:d2:a3:1a:07:23:1b:16:74:8e:ce:5d:a9:c0:de:
57:23:2a:7a:4a:cc:0a:9c:a4:1e:00:c5:fb:67:3a:
ae:28:1c:72:77:a6:8e:cb:9d:9b:b7:d7:c8:d0:21:
93:28:5e:4b:49:68:97:21:94:cc:c5:4c:9b:a6:34:
e5:2d:28:7f:d7:78:c2:26:33:5b:80:87:df:db:d0:
7e:20:b6:43:de:87:92:2a:e1:64:b7:3a:b0:f5:78:
83:5e:ff:e2:44:c6:f7:2d:44:74:94:1c:4f:e5:e3:
aa:99:f4:7a:6a:c8:53:6b:46:ba:47:8d:1d:ca:79:
6a:94:23:e7:d0:5a:0f:22:b9:19:1c:c5:38:cb:f8:
91:20:bc:de:a8:81:c7:0c:e5:bd:cb:7b:6d:49:54:
d7:48:e1:d2:58:92:c3:49:f1:e6:27:69:d9:36:8d:
50:b5:57:bd:8b:1b:da:4f:99:e7:29:41:f7:01:0c:
1e:4e:f0:f3:29:61:ca:df:e3:09:64:e5:81:5d:3c:
77:9f:b5:a4:95:9f:a2:45:96:47:8e:4a:38:7d:73:
b7:fb:df:df:01:35:fc:68:df:64:84:3b:8a:ff:1b:
ff:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:28:3F:21:E2:D1:E7:B6:4C:D8:0F:F9:52:C7:3F:4D:EE:7C:33:24
X509v3 Authority Key Identifier:
keyid:BC:31:24:7F:35:9A:6D:49:2D:C9:94:3A:E0:F0:0F:C8:BE:21:6C:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:92:5f:e6:b2:b0:1a:bb:20:cd:58:1f:cf:f8:a1:dc:94:7c:
7f:ab:7a:fc:bc:e5:a4:96:d4:dc:69:f1:25:96:db:4c:13:8d:
d0:79:e0:07:03:48:82:d0:5d:d8:c7:0b:38:2f:cf:c5:da:df:
48:0b:17:d1:df:f1:70:ce:12:2b:c2:4f:ba:d5:4c:9b:21:3c:
5f:e9:e4:95:ea:8d:a1:96:42:c6:be:ec:0f:4b:1f:bc:99:b6:
ef:11:e3:f2:7e:fa:d9:6c:88:49:b9:40:29:b6:41:cd:c0:3f:
c9:a0:9a:a3:8a:e9:e5:6e:e8:c9:9e:68:86:8e:24:f0:fb:b4:
e8:9c:84:4e:41:f5:c9:b3:52:9b:e9:45:39:ae:03:75:ef:8c:
03:21:4e:51:5d:ac:e9:3c:ef:64:55:1f:65:97:2e:60:ba:13:
b9:be:56:68:51:a4:bc:24:d3:a9:42:ca:f2:60:16:5d:0c:73:
f4:bc:fc:b7:da:fb:3c:f5:d3:a5:14:d1:cd:18:2c:2e:eb:1a:
df:b0:25:93:35:29:c6:6d:fb:0f:fc:e6:bf:90:fa:5d:94:c7:
bd:fe:fb:4b:2b:f6:1f:f6:26:a5:75:fc:b3:c3:47:8a:80:1b:
ae:94:67:0a:fc:8a:d3:f5:94:1b:aa:94:a5:ab:12:b1:c5:e5:
c4:a8:d2:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:26:40 2025 by rpki-client