Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft
File: vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft (raw, json)
Hash identifier: E5goZLLBk5kpbGZhF1NxOBEn6yzK2DBNNwf4ZbqZAqE=
Subject key identifier: 26:6B:3F:1E:AC:10:E5:4F:8E:14:2D:07:5A:FB:26:BD:68:23:5C:E2
Authority key identifier: BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78
Certificate issuer: /CN=bdd244214d76468d3fb72abad1892ef23dede978
Certificate serial: 01974EFC5FF71AF8A3769A854B20CF510F56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft
Manifest number: 15D7
Signing time: Sun 08 Jun 2025 10:00:51 +0000
Manifest this update: Sun 08 Jun 2025 10:00:51 +0000
Manifest next update: Mon 09 Jun 2025 10:00:51 +0000
Files and hashes: 1: t5Yp-bEvVhd8kagDYHZEMYfnZHQ.roa (hash: T/qafktV9KBjPJSNOInyquhT37yKqAM6MoTNGf3u/X4=)
2: vdJEIU12Ro0_tyq60Yku8j3t6Xg.crl (hash: 1OjHYZXojmGfCn5L5cYkJKoj+R4YHFrmNmBIXDJJVh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 10:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:fc:5f:f7:1a:f8:a3:76:9a:85:4b:20:cf:51:0f:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdd244214d76468d3fb72abad1892ef23dede978
Validity
Not Before: Jun 8 10:00:51 2025 GMT
Not After : Jun 9 10:00:51 2025 GMT
Subject: CN=266b3f1eac10e54f8e142d075afb26bd68235ce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fc:4e:35:ee:75:9b:9b:a7:4c:01:65:e6:df:
d0:f3:07:52:96:6c:18:00:37:f8:83:4e:d7:d7:16:
62:d7:2d:24:9b:f6:30:7d:0b:dd:89:64:dc:31:b3:
e3:51:71:f2:60:a3:db:ca:b2:dc:16:30:3d:ff:8d:
bf:be:53:88:73:24:e1:26:00:96:8e:75:f4:7a:ff:
ca:1b:0a:e8:7e:bc:b7:55:83:42:3b:44:14:b9:71:
40:73:4a:20:fd:13:bf:72:3e:60:6a:80:f0:53:16:
75:67:ec:8c:ca:96:b8:a7:e7:be:4e:83:09:54:00:
4c:98:4b:c7:5b:8f:c4:4a:7d:c5:96:c2:a9:d8:42:
13:b6:b4:3f:0d:cc:a0:2f:5d:a6:f2:38:4c:52:a5:
8f:4d:6f:87:2b:d2:f9:2e:8b:07:5b:9a:9b:f7:71:
06:92:f1:4c:5f:ef:2d:bd:75:d7:ac:72:6e:93:9d:
27:32:35:76:39:22:7e:20:08:80:bd:02:46:1d:ff:
b4:50:32:b8:fb:73:bd:8b:4b:1a:64:8a:4f:a9:c4:
06:3f:39:5b:01:8b:12:f1:df:1f:18:b6:c9:bb:59:
d7:5e:16:58:3f:cf:33:a0:63:55:30:a2:9b:e7:c5:
24:8e:b2:aa:76:95:e5:78:5b:fe:a7:11:92:fd:db:
ea:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:6B:3F:1E:AC:10:E5:4F:8E:14:2D:07:5A:FB:26:BD:68:23:5C:E2
X509v3 Authority Key Identifier:
keyid:BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:5f:fb:17:b5:dc:9d:a7:29:1e:8f:a1:af:b6:e7:e0:0f:a5:
1f:bb:63:bc:c4:f7:d1:74:73:b0:96:d8:f6:3d:06:9f:de:5e:
41:a1:de:f6:a6:b6:93:d0:8b:2f:2b:07:cf:09:60:7b:94:d4:
96:2d:47:cc:63:a5:80:55:1f:04:79:d7:9e:78:52:98:aa:3d:
0f:de:2c:df:c3:fc:83:bb:27:46:74:34:5c:23:e2:8f:4d:5d:
05:8a:05:fe:51:8a:5a:e6:33:c8:7f:25:e5:65:74:17:24:fa:
51:fa:20:8e:62:e4:ea:24:b7:69:86:ea:d0:68:7a:b7:ca:b8:
f3:2f:f1:b3:d1:64:a6:3f:83:79:26:40:45:2c:e4:04:77:ee:
96:8c:ad:5b:10:75:9b:ef:4e:17:15:ae:45:e6:59:9d:d7:0c:
a6:d0:d5:fc:e9:0a:55:96:50:23:5c:8b:d5:a9:c1:63:41:29:
43:a7:15:8d:6b:87:cd:37:ae:1a:f9:45:08:fc:7f:cb:a5:c9:
e6:9e:4d:e2:f0:fd:41:7a:3c:7b:e0:73:80:f6:87:11:24:2e:
8e:20:6f:62:05:80:5c:79:4b:da:f6:6d:fc:1e:6a:43:b1:21:
42:5f:3f:5c:8a:e2:01:09:6b:76:7c:54:c4:f3:fa:dd:c8:3b:
83:3d:93:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:43:47 2025 by rpki-client