Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft
File: vZoDUhhk_eVxr63vAfMpdZg9H2I.mft (raw, json)
Hash identifier: E4ygyznewLGieuoIJdMq/4ybVmJHhuTycEeeXTz7Gho=
Subject key identifier: 86:1D:17:15:62:31:14:CD:F3:CF:65:81:B3:13:EF:DE:56:70:78:A5
Authority key identifier: BD:9A:03:52:18:64:FD:E5:71:AF:AD:EF:01:F3:29:75:98:3D:1F:62
Certificate issuer: /CN=bd9a03521864fde571afadef01f32975983d1f62
Certificate serial: 019751FCFB3A2EFD1B4400C86B0D3D52AD72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZoDUhhk_eVxr63vAfMpdZg9H2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft
Manifest number: 66
Signing time: Mon 09 Jun 2025 00:00:23 +0000
Manifest this update: Mon 09 Jun 2025 00:00:23 +0000
Manifest next update: Tue 10 Jun 2025 00:00:23 +0000
Files and hashes: 1: RJNuysFIW66Gw4c0piXvnXkEo9o.roa (hash: /TsRrqxKejX5cWBdLvn7sFDNt5iNj6A7iHaePoLLWJk=)
2: vZoDUhhk_eVxr63vAfMpdZg9H2I.crl (hash: vPrtKRtdZ0v7uitO0MVZfw8z435tp4QNAK40Jnog4Ic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZoDUhhk_eVxr63vAfMpdZg9H2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:fc:fb:3a:2e:fd:1b:44:00:c8:6b:0d:3d:52:ad:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd9a03521864fde571afadef01f32975983d1f62
Validity
Not Before: Jun 9 00:00:23 2025 GMT
Not After : Jun 10 00:00:23 2025 GMT
Subject: CN=861d1715623114cdf3cf6581b313efde567078a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:84:f5:e3:31:1b:6d:b0:46:f8:d1:d2:7e:67:
8c:9b:c1:8e:21:26:57:b6:2d:86:38:23:d0:62:75:
d9:06:42:f3:24:fd:1e:36:8b:7d:49:99:80:7c:d7:
b2:5e:6f:dd:83:7a:15:b0:50:89:8d:81:f0:29:4e:
f6:09:30:f5:f4:04:04:02:a7:5e:6f:36:98:1f:db:
06:fd:3f:20:7f:33:ea:f9:a4:af:e9:45:ca:ed:88:
fb:09:9a:22:5f:0e:aa:c5:24:0b:37:95:ea:80:06:
84:66:76:4c:b7:18:30:89:15:a9:83:be:7f:74:da:
a7:2b:bf:83:e4:56:45:f2:59:02:3c:13:90:65:15:
c2:df:ea:2d:d0:32:88:e5:ec:3b:3a:dd:b1:a2:c1:
3f:3b:9e:fd:ad:8d:d3:4f:1f:98:0b:16:e1:f2:44:
d4:ba:78:e1:0c:d5:e7:08:28:23:e0:52:2e:b7:26:
69:29:0f:3a:f9:96:71:7f:12:85:7c:a6:64:4d:75:
fc:0b:3c:a4:54:1a:14:52:20:4d:2f:c5:67:b2:10:
92:b5:12:5a:ac:ef:11:49:b2:55:7c:c4:22:17:b9:
4f:2a:03:27:0e:15:bb:9a:ec:1d:b7:31:fe:81:fa:
57:26:df:9d:31:b2:72:99:f3:bf:5b:89:d5:8b:24:
cd:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:1D:17:15:62:31:14:CD:F3:CF:65:81:B3:13:EF:DE:56:70:78:A5
X509v3 Authority Key Identifier:
keyid:BD:9A:03:52:18:64:FD:E5:71:AF:AD:EF:01:F3:29:75:98:3D:1F:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZoDUhhk_eVxr63vAfMpdZg9H2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:02:0e:f5:4c:55:dc:ad:15:b9:19:3a:37:12:68:98:6e:5c:
54:3e:59:4e:77:e9:52:9c:5d:34:ef:41:46:e0:d6:13:40:c6:
60:81:4c:9e:38:8f:ae:fd:54:26:7f:6e:ea:34:19:c9:37:e4:
da:3e:4e:bf:9f:e1:e9:e4:b7:a7:fd:2c:76:ed:9a:18:65:6e:
44:67:ce:b9:7e:14:83:90:c0:37:5c:c0:89:79:7d:48:85:69:
a7:ac:3e:0a:30:30:1f:fa:47:f7:dd:16:14:bc:0e:a5:40:39:
73:be:aa:9e:39:fa:9d:6c:77:67:f1:80:4a:f2:ca:3b:10:6d:
21:c1:25:1e:84:9d:ff:8b:4b:74:08:b1:26:7f:05:a7:b8:da:
9e:1b:a8:bb:1c:c5:b2:9f:5b:6f:26:b5:e3:6a:a6:9e:26:d9:
9f:ac:80:e8:ec:07:23:64:0c:23:c4:ec:e4:0b:bd:61:d8:18:
94:91:7a:f2:20:23:b4:33:14:56:38:f1:ee:11:99:55:13:70:
4c:49:10:11:7a:68:cb:f5:9f:b1:55:7b:29:f7:b5:13:11:8a:
25:ea:e2:02:f1:c0:9f:a0:89:4c:f9:e0:82:fb:02:e5:20:a8:
6e:7c:cd:a2:3d:d6:48:4b:3b:78:3f:01:9d:18:5e:67:65:ef:
bd:f1:25:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:49:24 2025 by rpki-client