Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.mft
File: vatssugHrs69fgOoCAj6sj2cRxY.mft (raw, json)
Hash identifier: JykS7HwrRTNdoERDECj3HtMdFkE1Lp5dcrBaayN82M4=
Subject key identifier: 7B:51:3D:98:9E:46:C3:5F:20:D0:E6:3E:37:8B:3C:67:9B:BB:B7:D4
Authority key identifier: BD:AB:6C:B2:E8:07:AE:CE:BD:7E:03:A8:08:08:FA:B2:3D:9C:47:16
Certificate issuer: /CN=bdab6cb2e807aecebd7e03a80808fab23d9c4716
Certificate serial: 01974AB1C718A3EF281ED359659E41714ED8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vatssugHrs69fgOoCAj6sj2cRxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.mft
Manifest number: 0872
Signing time: Sat 07 Jun 2025 14:00:54 +0000
Manifest this update: Sat 07 Jun 2025 14:00:54 +0000
Manifest next update: Sun 08 Jun 2025 14:00:54 +0000
Files and hashes: 1: FiQ6326ULjytbcRmbnTQT53B6qI.roa (hash: oVfk3zFCZV+aJ9BHrRH3g14/uV9d1uVQ7Jx5xhv/0d8=)
2: P26iBMzDxpvH-LQZESUQTHncYxo.roa (hash: 3+DbSLlopFDVY7Piu2/Wt1KhQBxlA0+iBBO7seLQMiE=)
3: vatssugHrs69fgOoCAj6sj2cRxY.crl (hash: NTPHKn2Q4MpNtTm08UtM2we5P+WmUNsVBeznnSv65uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/vatssugHrs69fgOoCAj6sj2cRxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:c7:18:a3:ef:28:1e:d3:59:65:9e:41:71:4e:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdab6cb2e807aecebd7e03a80808fab23d9c4716
Validity
Not Before: Jun 7 14:00:54 2025 GMT
Not After : Jun 8 14:00:54 2025 GMT
Subject: CN=7b513d989e46c35f20d0e63e378b3c679bbbb7d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:79:cd:f7:c7:22:a3:1a:48:54:ec:42:c8:fc:
a8:c8:26:fc:4c:8a:87:51:94:db:e3:c8:4a:af:89:
98:55:da:4d:c0:45:26:f0:4f:30:43:39:d2:2c:4d:
b7:be:39:07:f8:5b:75:97:3b:9b:7a:21:4a:09:51:
69:3a:01:81:ce:5b:ba:a5:3b:68:d4:88:2a:eb:aa:
60:f8:08:8a:51:f8:c1:7d:47:c0:0f:41:0b:57:4e:
5b:94:da:90:03:48:54:ff:e3:a9:6b:bb:50:74:87:
4c:dd:db:97:7d:8c:3c:24:05:10:f6:00:60:9d:14:
d4:f8:50:d4:0d:ca:87:de:1c:52:92:a1:30:e9:8e:
ce:a7:6d:49:53:fb:be:22:3f:5e:c9:5c:e6:21:1a:
91:d8:e8:fc:7e:ad:9c:8f:d0:e9:a2:19:d9:09:f1:
4b:d1:3b:9b:38:c5:94:b3:fd:4f:bf:33:a0:bf:9b:
09:c8:7f:83:52:d9:2c:1b:e4:a4:1d:7d:ae:b0:f9:
57:02:cc:ff:60:cc:38:e5:e4:bc:f4:ad:dd:0a:d2:
d3:f5:a3:d6:63:ce:b0:c1:0d:84:de:ee:8d:f4:a4:
3e:a0:0a:2e:df:02:8c:7a:12:3c:7c:48:4e:0e:40:
13:cf:89:02:ab:03:42:33:d5:13:7c:d3:94:48:8d:
ad:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:51:3D:98:9E:46:C3:5F:20:D0:E6:3E:37:8B:3C:67:9B:BB:B7:D4
X509v3 Authority Key Identifier:
keyid:BD:AB:6C:B2:E8:07:AE:CE:BD:7E:03:A8:08:08:FA:B2:3D:9C:47:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vatssugHrs69fgOoCAj6sj2cRxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:22:a9:e3:e8:d8:60:5a:99:59:7a:23:24:05:3d:98:af:f7:
1b:93:6a:27:d7:35:48:19:cb:83:9e:bc:ee:57:ee:6c:8f:7b:
9e:30:b9:a5:39:07:22:38:ed:6e:85:9d:04:e6:3b:48:33:a3:
4f:79:ed:c5:41:71:ab:47:64:8a:bd:5d:54:19:bf:16:eb:c1:
24:8b:ce:4d:a0:9d:9b:66:36:29:3a:13:1b:26:b6:b6:36:e0:
71:2c:c6:9a:63:6f:83:2f:a3:f4:0b:ba:be:2e:4d:8c:a4:2f:
ea:5b:33:63:3f:ac:67:46:9a:94:f2:b0:81:1f:70:ac:a8:f8:
1b:bd:2f:13:b2:c6:f3:67:51:67:ec:3b:b4:c1:78:94:d8:50:
3b:46:f3:85:27:36:e6:9f:f0:7b:10:f1:9b:2c:fa:3f:3a:f3:
07:23:fa:a7:a8:d4:e5:37:d0:b0:af:08:57:fe:bb:f5:0c:d9:
d8:74:54:6f:fe:e2:73:d8:8f:01:a2:d3:5e:66:74:39:a9:6d:
bc:d2:48:b1:04:0b:19:02:0e:7f:d1:57:0f:cf:cf:e2:46:e8:
f2:9b:60:62:5e:85:37:e3:d1:3e:2f:c4:8b:a9:3c:ae:ec:75:
eb:c2:df:93:99:56:27:eb:4d:70:f3:66:64:53:b5:9c:30:5f:
b2:f2:87:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:17:25 2025 by rpki-client