Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
File: vkOZUom2pcqXLEuHteMUnDLLRDA.mft (raw, json)
Hash identifier: Ee93BKcmMtWc8uTK2rpRNF/WDtiwiXeGYdRVY32XI2E=
Subject key identifier: 4A:E0:65:9E:39:B3:35:E5:01:71:14:67:7D:31:9A:61:A3:58:DF:5D
Authority key identifier: BE:43:99:52:89:B6:A5:CA:97:2C:4B:87:B5:E3:14:9C:32:CB:44:30
Certificate issuer: /CN=be43995289b6a5ca972c4b87b5e3149c32cb4430
Certificate serial: 019747795986B164E52CCD784F47206AB2D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
Manifest number: 1342
Signing time: Fri 06 Jun 2025 23:00:24 +0000
Manifest this update: Fri 06 Jun 2025 23:00:24 +0000
Manifest next update: Sat 07 Jun 2025 23:00:24 +0000
Files and hashes: 1: 8fMw7PIEmcuZ4SQ2ToyoBpDjoJU.roa (hash: lfgDrB7NQSrt5KaQ0P2PrRAn8atRZykuTXvKRd7fgJo=)
2: e0TEu5beAVWeSmXxkW6X6x2gBHA.roa (hash: bCc+ujeebjVb3R0AjVp+lBJExzxOGb5apQpq8yxW908=)
3: vkOZUom2pcqXLEuHteMUnDLLRDA.crl (hash: SVlDmK3YxoFoJBaNYF5YAb/hHbyJE7aMl7OngP+pzLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:59:86:b1:64:e5:2c:cd:78:4f:47:20:6a:b2:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be43995289b6a5ca972c4b87b5e3149c32cb4430
Validity
Not Before: Jun 6 23:00:24 2025 GMT
Not After : Jun 7 23:00:24 2025 GMT
Subject: CN=4ae0659e39b335e5017114677d319a61a358df5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1e:68:62:60:86:c8:a9:c3:b3:c4:a3:14:8e:
28:4f:ee:63:4b:94:c6:cb:85:58:51:4b:22:9d:fb:
90:7f:b4:5e:40:76:0c:95:f2:bd:24:d6:94:ea:6d:
7d:e5:b5:77:0d:14:8f:be:a2:4a:bd:b2:f0:dc:aa:
8e:52:84:25:bd:10:71:30:b5:bb:23:ed:e3:b0:0e:
86:7c:56:bc:aa:36:67:90:29:49:f6:ce:16:b4:1f:
79:dc:76:5c:0e:a2:bc:e5:c6:14:5d:87:ab:8a:7e:
a6:13:53:b4:03:94:6d:60:9a:ea:b2:22:61:35:0f:
1d:6d:bd:77:51:6b:01:34:56:b9:f2:d0:f0:5c:a6:
c0:7e:a6:75:17:08:9b:cd:4e:93:67:44:b9:3f:8a:
31:12:93:f4:47:fb:0b:aa:97:a9:35:f5:2e:b1:c1:
77:95:1b:d4:b1:45:f1:38:9f:41:4f:6d:b7:54:8b:
cf:47:50:be:a3:b9:a6:c5:16:d5:c5:6e:b7:ed:eb:
49:7d:5a:a9:1b:f9:fe:44:e3:eb:d8:41:38:20:2a:
cf:83:45:e8:db:e6:8d:0c:55:68:2d:5d:6b:61:91:
24:b1:92:cd:3a:ca:19:51:1f:9a:73:a5:d5:eb:16:
a7:6c:ff:11:7c:f1:50:11:f9:07:13:b4:b8:2c:f4:
fc:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E0:65:9E:39:B3:35:E5:01:71:14:67:7D:31:9A:61:A3:58:DF:5D
X509v3 Authority Key Identifier:
keyid:BE:43:99:52:89:B6:A5:CA:97:2C:4B:87:B5:E3:14:9C:32:CB:44:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:09:38:f1:57:83:43:d9:92:d8:59:9e:0a:3a:8d:e3:60:3a:
23:a1:d8:db:90:48:2e:b0:22:08:45:c6:d2:ea:ad:fe:a7:4f:
b2:0d:c6:58:25:60:3e:bb:e9:8d:ad:27:28:62:ca:5f:75:9e:
20:af:a3:53:02:d0:1a:ff:80:a6:9f:d4:c2:6c:ce:29:2e:12:
c0:c7:8f:fe:75:7f:9a:a3:fd:24:96:22:ef:f2:20:bd:d5:12:
4d:d5:85:99:0d:a4:0b:78:ee:e1:bb:e5:ee:11:6e:fd:7c:b7:
b3:1b:ca:4c:e8:38:56:d7:89:81:6f:03:dd:a5:04:80:80:ac:
1f:ef:8d:75:5c:4b:f3:c2:d3:40:77:cd:27:6f:7e:80:9d:cc:
cb:78:fd:ae:d6:12:11:d9:d9:f9:cf:92:db:bb:19:af:aa:95:
50:4b:a0:75:2d:f9:f5:7b:17:d2:6d:99:df:94:4b:22:26:02:
0f:67:6c:ee:e4:4c:19:90:fb:17:bf:4d:e2:8a:f8:6a:c1:cc:
6f:05:c5:71:dc:f3:b0:ef:6f:a4:05:e8:17:ee:28:8d:55:af:
d9:81:e1:6d:3b:b8:0a:d1:ef:23:a4:79:fe:76:9a:b7:cc:d9:
25:88:84:4d:09:f0:05:92:e2:6c:cd:d3:fa:d3:df:a2:62:12:
38:4d:af:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:14:32 2025 by rpki-client