Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.mft
File: vGY2Z5cyOLGE2e79NrvzgQukttk.mft (raw, json)
Hash identifier: jA/daqm49wpJILc1qwsJC4vRoHtqbuKa1LsNdb9JTGU=
Subject key identifier: 7E:14:DC:0B:B2:88:CD:A5:1F:96:CF:00:A7:24:EC:74:14:9E:35:E8
Authority key identifier: BC:66:36:67:97:32:38:B1:84:D9:EE:FD:36:BB:F3:81:0B:A4:B6:D9
Certificate issuer: /CN=bc663667973238b184d9eefd36bbf3810ba4b6d9
Certificate serial: 01974779A13F9AF54527A7D5F9A7F5A345F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGY2Z5cyOLGE2e79NrvzgQukttk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.mft
Manifest number: 1083
Signing time: Fri 06 Jun 2025 23:00:42 +0000
Manifest this update: Fri 06 Jun 2025 23:00:42 +0000
Manifest next update: Sat 07 Jun 2025 23:00:42 +0000
Files and hashes: 1: ig3YUnf06jRQJy2W3dYiO6rsejs.roa (hash: iYGiR2ToZxGUekv5mS+Li0t2IVpNRi9TVFKQBK+2Rl8=)
2: vGY2Z5cyOLGE2e79NrvzgQukttk.crl (hash: DrFWpzQMwDNGvCOcfnNhmeALUv0N+2Bw7FYnHnuQadE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vGY2Z5cyOLGE2e79NrvzgQukttk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:a1:3f:9a:f5:45:27:a7:d5:f9:a7:f5:a3:45:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc663667973238b184d9eefd36bbf3810ba4b6d9
Validity
Not Before: Jun 6 23:00:42 2025 GMT
Not After : Jun 7 23:00:42 2025 GMT
Subject: CN=7e14dc0bb288cda51f96cf00a724ec74149e35e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b9:ba:9e:47:d7:19:48:7d:1a:0b:37:19:08:
39:3f:6c:11:e1:d8:ff:50:40:39:e9:09:70:e0:c0:
49:f4:25:a5:3d:72:31:d7:ac:f2:fa:ec:39:49:76:
f3:f0:1c:8d:6d:23:61:1a:73:6f:25:41:d9:d8:2c:
38:8c:9b:61:61:17:fb:30:3d:46:26:47:45:3b:9c:
63:c1:bf:a1:5b:fc:ce:ad:13:3c:d5:a5:c7:ce:1d:
fb:05:45:ac:8b:4d:91:78:ce:fe:54:90:ab:3b:fb:
e0:21:95:3a:df:a0:98:f3:ca:b8:f4:7c:da:d9:fe:
9a:3b:96:99:61:36:cd:d9:3b:f1:fb:5e:98:46:e6:
9c:78:22:80:e8:6d:2a:90:ff:ca:ee:fa:d1:ad:7c:
c2:16:6e:77:6a:9b:cc:f3:af:bf:a1:a7:b3:76:4d:
5a:90:46:1d:ff:ad:d8:30:c9:49:c1:82:d5:c8:55:
f0:4a:84:e0:d4:a3:1a:ae:b7:84:07:36:d9:28:e0:
c0:0c:84:23:8c:57:12:dc:39:5f:3e:8e:3f:85:92:
4f:1b:49:b3:4f:59:fe:2b:28:9f:4e:ba:ea:d2:27:
47:65:e2:a3:41:03:98:ab:03:39:7b:73:f1:f3:bf:
41:62:7f:1e:a8:44:8e:b7:ed:2b:92:05:45:38:a7:
ab:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:14:DC:0B:B2:88:CD:A5:1F:96:CF:00:A7:24:EC:74:14:9E:35:E8
X509v3 Authority Key Identifier:
keyid:BC:66:36:67:97:32:38:B1:84:D9:EE:FD:36:BB:F3:81:0B:A4:B6:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGY2Z5cyOLGE2e79NrvzgQukttk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:04:27:5a:70:71:f0:4a:71:26:51:f9:b1:ba:e3:66:2e:39:
da:81:42:6b:be:42:df:a6:fb:d7:50:80:70:15:5d:e1:45:34:
4c:5a:37:a4:e3:a9:7a:23:8a:22:24:a7:34:e7:b6:95:5a:21:
e4:e5:9f:04:22:1a:38:2b:a2:4a:a6:4c:fc:c2:bb:fa:ea:cc:
71:d8:44:c5:26:d2:e1:c4:cc:d1:e6:ef:37:75:51:d5:d9:4a:
4d:55:ca:e2:aa:b0:a3:9e:f4:00:87:04:e0:48:9f:33:6b:35:
3f:95:f7:2e:55:18:ec:66:fb:14:da:c7:31:ba:f2:41:c5:60:
d5:09:d3:2b:17:f5:a7:46:66:d9:f9:77:a5:4f:d9:87:f3:ac:
e3:af:f9:37:6b:a2:e2:be:e3:fc:4b:91:cb:fb:37:e8:ec:a1:
18:0d:22:48:29:ee:b4:94:e3:c8:ae:a2:5f:f0:a0:b4:d7:81:
2d:73:b8:28:a8:26:59:c0:ae:1e:47:42:79:74:10:c5:8a:29:
92:d7:2f:02:00:2f:47:db:8c:16:40:4a:d5:00:f4:59:3b:f5:
e9:e9:df:d8:14:99:e0:46:c5:e2:cf:9c:41:be:74:5e:ef:10:
12:c0:ba:5c:58:77:db:81:4b:bb:ed:67:ee:27:f1:e2:82:53:
84:b6:59:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:03:57 2025 by rpki-client