Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.mft
File: Vek8w-Yc8zSxYRHK40rpkoxPw_o.mft (raw, json)
Hash identifier: 6SmlD6WPDKT1llEHcxjXp9MAGPW9Uxk7+7YtGWh2KTY=
Subject key identifier: 28:7D:BC:E6:3E:FB:7B:90:62:6E:5C:03:16:6B:79:0A:7C:1E:99:5F
Authority key identifier: 55:E9:3C:C3:E6:1C:F3:34:B1:61:11:CA:E3:4A:E9:92:8C:4F:C3:FA
Certificate issuer: /CN=55e93cc3e61cf334b16111cae34ae9928c4fc3fa
Certificate serial: 019756B574D5E0452FCA23FC73535D8EDBBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vek8w-Yc8zSxYRHK40rpkoxPw_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.mft
Manifest number: 1015
Signing time: Mon 09 Jun 2025 22:00:21 +0000
Manifest this update: Mon 09 Jun 2025 22:00:21 +0000
Manifest next update: Tue 10 Jun 2025 22:00:21 +0000
Files and hashes: 1: 8WKeNRHKfnPMtDPrJe2tbs0peW8.roa (hash: p24Kg0o2ZZFpnMMb7fnMgorqDU4JrcszVsb7S2USX88=)
2: Vek8w-Yc8zSxYRHK40rpkoxPw_o.crl (hash: V2qePxd9WItilaLd2d+oGoTz0rwOGXEHOOPknwG/ZM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vek8w-Yc8zSxYRHK40rpkoxPw_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:56:b5:74:d5:e0:45:2f:ca:23:fc:73:53:5d:8e:db:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55e93cc3e61cf334b16111cae34ae9928c4fc3fa
Validity
Not Before: Jun 9 22:00:21 2025 GMT
Not After : Jun 10 22:00:21 2025 GMT
Subject: CN=287dbce63efb7b90626e5c03166b790a7c1e995f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4d:b3:79:f5:36:f8:ad:5e:0b:d6:20:7c:44:
16:4c:95:65:05:bf:14:f1:4f:14:6e:64:8d:9c:44:
8e:12:23:75:7b:b1:8e:84:6c:80:eb:aa:43:b6:02:
8d:cb:cc:45:99:d2:47:1e:f2:db:98:47:c0:c9:84:
ab:2b:ff:51:8c:63:fa:52:8a:db:31:e0:5a:f9:30:
27:bd:8b:a8:31:ec:f3:17:45:9c:08:64:ea:52:e1:
b6:f0:7a:b4:4a:4f:0f:bb:16:a1:c7:0f:64:6a:8f:
5d:3e:7d:ab:64:ca:bc:76:af:17:ea:ca:b3:d9:9c:
e4:93:11:da:25:a4:fc:03:3f:73:4d:8b:ad:30:22:
64:0e:f9:89:1d:90:ee:56:74:30:c1:dd:60:58:d0:
c3:33:91:8c:25:ea:8b:5d:24:d4:a8:da:b0:7a:a8:
de:a7:52:bc:c3:84:20:56:cd:c1:2d:79:d0:a8:c4:
e3:c4:64:f5:2f:dc:e1:f5:a9:a3:e2:9b:82:97:84:
d8:d8:f0:57:6b:a2:a5:04:53:7e:39:1a:6a:76:0e:
7d:f8:b9:29:41:cc:d3:1f:95:da:1e:14:0a:3d:87:
e8:4e:fe:a4:7c:27:5f:8f:08:e4:a1:17:45:d8:7b:
f1:b7:0a:b8:45:45:88:0c:e2:fe:2a:31:83:95:69:
fe:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:7D:BC:E6:3E:FB:7B:90:62:6E:5C:03:16:6B:79:0A:7C:1E:99:5F
X509v3 Authority Key Identifier:
keyid:55:E9:3C:C3:E6:1C:F3:34:B1:61:11:CA:E3:4A:E9:92:8C:4F:C3:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vek8w-Yc8zSxYRHK40rpkoxPw_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:60:78:d0:a7:b8:9f:6e:5a:b6:aa:72:f2:aa:fb:d5:45:56:
86:bc:f0:ae:8d:4c:76:90:17:76:a8:95:da:7b:33:86:12:47:
17:a4:19:40:86:5c:29:11:59:fd:35:35:42:35:40:31:06:1b:
96:1d:59:9f:ee:1b:81:3b:5c:59:9a:49:ad:3e:e9:62:d1:f8:
44:73:28:2a:b0:78:16:1a:1e:6d:75:20:01:54:9a:1e:99:8d:
4f:77:59:32:af:49:23:cc:cf:05:63:a8:ee:c5:33:ae:2c:0c:
52:06:0e:c0:29:5f:ce:a7:54:7b:e5:33:67:c3:b7:bc:73:e7:
d9:12:0c:9c:28:b9:86:61:f3:02:40:1a:29:0c:14:ef:72:44:
07:f4:82:73:a0:18:0f:4d:71:0e:98:00:ad:18:ba:19:77:83:
6a:c6:b6:8c:82:62:c0:9c:e0:90:62:c4:97:c1:9b:9b:5c:ff:
fb:e6:41:cc:fb:4a:45:cf:ae:9b:40:15:be:ec:2d:43:da:11:
5e:23:1f:87:db:86:af:d9:a9:9c:80:90:c0:ac:57:33:66:f7:
5e:16:8b:6d:6f:94:4f:cd:f6:8e:b7:c5:75:d7:85:a7:2c:99:
bd:47:61:af:ce:6f:c8:bf:cd:b0:07:71:6e:9a:31:2d:88:e6:
6e:bb:c0:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 23:52:56 2025 by rpki-client