Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft
File: vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft (raw, json)
Hash identifier: g1mfUBFPvpnMZ0jFzQJBieRDLFE/4Z0LJpPRhFsQkKU=
Subject key identifier: 94:EF:0B:B4:AA:BF:69:9C:6F:1C:FA:51:C3:BE:84:ED:C4:1B:B6:04
Authority key identifier: BE:96:6D:BE:B6:41:38:2A:15:F4:67:F5:A0:3E:9A:96:FA:1D:C1:94
Certificate issuer: /CN=be966dbeb641382a15f467f5a03e9a96fa1dc194
Certificate serial: 019762BA2482921262765A9195BADCAFE0DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vpZtvrZBOCoV9Gf1oD6alvodwZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft
Manifest number: 158B
Signing time: Thu 12 Jun 2025 06:00:55 +0000
Manifest this update: Thu 12 Jun 2025 06:00:55 +0000
Manifest next update: Fri 13 Jun 2025 06:00:55 +0000
Files and hashes: 1: SReOpAhCLmuOcAyk55_tk_b6gzU.roa (hash: HeVQ3nZoCRM6Iyc21jnOVqYiR72eDfZp5jwY3EJ/nAk=)
2: vpZtvrZBOCoV9Gf1oD6alvodwZQ.crl (hash: M7PZGPVsx9SYTmguz6DhN5WJC3MmRuTb15joT148TnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vpZtvrZBOCoV9Gf1oD6alvodwZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:62:ba:24:82:92:12:62:76:5a:91:95:ba:dc:af:e0:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be966dbeb641382a15f467f5a03e9a96fa1dc194
Validity
Not Before: Jun 12 06:00:55 2025 GMT
Not After : Jun 13 06:00:55 2025 GMT
Subject: CN=94ef0bb4aabf699c6f1cfa51c3be84edc41bb604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e0:5f:56:33:5a:9b:26:36:66:8a:24:11:70:
67:64:d7:41:79:cc:3f:b2:2e:09:62:9d:90:82:c4:
9a:b1:ae:a8:df:9b:82:73:f6:e7:fd:ad:12:9d:50:
17:99:aa:fa:f9:e3:85:0c:55:04:8c:e1:eb:b7:93:
f1:8d:c1:11:28:39:52:a0:b6:fe:30:7d:ab:31:e7:
b5:e0:c2:ad:2f:58:e5:2e:b2:5e:f3:a6:fc:21:da:
89:20:8d:fb:11:3f:96:0c:dd:47:78:56:68:9c:32:
46:d2:45:27:41:ea:54:a4:1d:40:8c:51:fe:7c:e5:
d7:ca:94:fc:f7:ff:4d:9d:fa:40:a2:50:67:3a:9e:
d1:d0:25:b2:50:f7:ea:8c:18:d4:66:a0:9a:1b:ee:
31:47:af:10:b5:95:40:34:b1:94:c6:4e:e0:ef:c2:
7d:39:dc:42:a5:76:cd:9a:cf:ff:f6:0e:1c:43:fa:
6e:f2:14:39:ab:46:33:66:7b:b5:5d:96:e7:f4:8e:
d6:70:c9:57:22:a8:e3:45:a1:4f:10:3c:0f:5d:04:
0a:85:80:44:ee:67:ff:f3:0d:8c:b4:c2:97:e4:80:
a3:35:d5:c2:af:29:dc:63:18:30:e7:cc:fd:29:03:
c6:7a:9f:ef:aa:68:38:a3:49:15:bb:df:42:cd:aa:
d6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:EF:0B:B4:AA:BF:69:9C:6F:1C:FA:51:C3:BE:84:ED:C4:1B:B6:04
X509v3 Authority Key Identifier:
keyid:BE:96:6D:BE:B6:41:38:2A:15:F4:67:F5:A0:3E:9A:96:FA:1D:C1:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vpZtvrZBOCoV9Gf1oD6alvodwZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:7e:fe:eb:0b:4c:b3:e2:d5:75:b1:74:ee:38:ea:6c:52:e3:
9e:c9:50:ab:32:c1:83:01:55:85:51:08:b1:7a:3e:a3:a7:2e:
63:21:5f:b1:8c:c3:c7:27:7b:df:c9:fd:cc:e8:1c:e4:13:d7:
3b:5c:8b:47:b3:79:f0:d1:3c:02:f0:3e:b6:37:bd:5c:86:94:
ba:80:d9:9a:be:b9:36:27:d9:83:ca:06:18:80:07:0b:b0:95:
cb:8b:59:80:c7:62:f0:c9:68:da:06:7e:07:37:94:90:95:5c:
66:59:b7:ea:07:ba:85:77:ee:88:3e:72:ab:67:e7:e8:e2:a3:
4d:7b:02:6c:ac:93:84:6c:57:a1:56:cd:66:36:ff:39:cc:b9:
0d:54:af:57:eb:98:c9:0e:23:ba:18:41:3b:92:bb:a0:6f:67:
88:bc:11:2a:b4:31:e1:0f:22:fc:03:f7:fe:e5:4b:18:c5:ff:
61:26:06:71:be:9f:c8:b8:6d:7b:f4:1d:88:0e:53:38:38:de:
ea:fb:07:28:be:39:98:fb:d6:63:22:4c:51:3c:2d:5b:95:2f:
02:a5:05:42:c9:9c:77:1f:91:9f:5a:ae:ec:1c:09:c1:b5:c4:
43:f0:d4:69:32:30:ee:d1:86:40:25:1e:3b:57:ef:e4:ab:23:
be:88:6c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 09:13:52 2025 by rpki-client