Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
File: _vkYxakzDbvm7uF8uaHWL7yFW94.mft (raw, json)
Hash identifier: mrsusoPn6CCXXEtT7v3kPFbnvICtbQjVK1LQfyd8R8U=
Subject key identifier: CD:75:75:F6:4A:D5:9E:C5:FC:A1:03:2D:C9:2B:AE:C9:7B:0C:35:F0
Authority key identifier: FE:F9:18:C5:A9:33:0D:BB:E6:EE:E1:7C:B9:A1:D6:2F:BC:85:5B:DE
Certificate issuer: /CN=fef918c5a9330dbbe6eee17cb9a1d62fbc855bde
Certificate serial: 0197526B7F0DAF13A745334FF6CCE7792889
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
Manifest number: 08A6
Signing time: Mon 09 Jun 2025 02:01:05 +0000
Manifest this update: Mon 09 Jun 2025 02:01:05 +0000
Manifest next update: Tue 10 Jun 2025 02:01:05 +0000
Files and hashes: 1: SMgRC4CuBXV__0uh7hMZJPp526I.roa (hash: q90cjV8xUyFwL4y2m0KAQvnLqB0y5wCNss55Rkz0PM0=)
2: _vkYxakzDbvm7uF8uaHWL7yFW94.crl (hash: 6Iw6QNvzqYm+JqKL40lPo6GGUpZW/iIt0jYG2hfwnww=)
3: nhbcHBf3KyDRfxTTz6M2nv3FDrc.roa (hash: Zxdw2e4bDTlf7LQ65Hz/8o5/IiJ9rQjv2vVBLW/NpXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:6b:7f:0d:af:13:a7:45:33:4f:f6:cc:e7:79:28:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fef918c5a9330dbbe6eee17cb9a1d62fbc855bde
Validity
Not Before: Jun 9 02:01:05 2025 GMT
Not After : Jun 10 02:01:05 2025 GMT
Subject: CN=cd7575f64ad59ec5fca1032dc92baec97b0c35f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b3:f1:1d:f2:e1:6e:cf:dd:04:48:ce:19:fa:
e5:b8:95:01:3b:67:9e:a8:36:04:80:c8:95:b0:e5:
61:2a:85:52:2c:44:69:cb:41:ec:4e:1c:30:88:4e:
73:05:fd:5e:e4:17:7a:2a:12:60:fd:70:09:9e:44:
b1:3e:ad:3e:34:fe:cb:28:01:c7:53:da:b9:85:5e:
4f:3b:ae:fa:3d:f0:54:5a:8d:99:6a:1d:a4:d5:47:
54:d5:0f:b1:25:b3:0b:11:d7:f9:b0:4f:59:ea:03:
95:44:be:48:31:cf:33:06:4e:e6:38:e9:2f:82:96:
12:db:83:3a:80:23:e9:cb:4d:0a:49:cf:d9:0e:eb:
eb:1f:09:a8:3a:86:79:a9:c7:aa:a8:1c:4b:8d:64:
b3:b5:b6:9e:81:d6:e7:50:11:c3:4b:36:7b:7d:eb:
57:36:8d:f2:0a:5e:89:b9:b0:91:ac:ad:11:be:d1:
e9:9c:50:be:2e:0e:d8:60:00:57:61:48:13:11:c0:
17:2e:cc:e7:bd:ff:7f:3d:32:7a:26:66:63:fe:9c:
07:f4:42:6e:eb:e7:9d:00:43:d2:fb:57:06:a2:01:
37:bc:6a:d1:e9:e7:b2:62:94:51:8e:30:29:b1:43:
08:09:43:f7:12:7a:3f:01:45:88:15:f3:f3:30:b1:
b1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:75:75:F6:4A:D5:9E:C5:FC:A1:03:2D:C9:2B:AE:C9:7B:0C:35:F0
X509v3 Authority Key Identifier:
keyid:FE:F9:18:C5:A9:33:0D:BB:E6:EE:E1:7C:B9:A1:D6:2F:BC:85:5B:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:18:5f:23:27:9f:84:e8:63:8f:ff:97:f1:a3:2f:bb:05:e7:
26:3f:69:98:02:2e:36:45:76:18:bb:e4:97:05:92:72:94:5e:
17:5a:f5:1b:cb:5d:4b:20:98:0b:2c:04:68:83:66:a1:ae:f3:
f4:be:3c:be:0e:16:9c:0b:ed:a3:ca:61:b6:22:dc:12:4d:12:
b6:b1:4c:5d:e7:fc:ba:0b:b3:39:0f:56:9f:4b:8d:c0:a3:ee:
5a:62:66:9a:b9:5b:48:7e:b3:4f:24:0c:54:45:1d:c6:3b:45:
40:0d:ff:fd:5e:d4:79:de:ec:db:89:0e:6e:0b:d7:9c:e9:4b:
73:d4:21:91:8d:0b:6f:2a:38:46:c5:e8:26:7b:fc:a7:c2:0f:
72:b4:36:fd:c1:24:16:85:0b:bd:9f:2a:d4:dc:03:3e:7e:fd:
e4:58:e7:d4:87:52:23:ef:98:81:78:ae:eb:6e:73:e3:7d:88:
5f:37:98:f9:82:99:57:39:51:64:7b:d5:9a:a0:cd:c7:67:23:
67:df:57:7b:ca:e9:74:2d:fa:3c:ca:c9:b3:a1:a3:f7:9a:90:
9c:e6:5a:a2:fc:d1:71:84:68:de:06:6e:b8:b5:f0:17:a3:21:
2d:a7:c4:11:95:b2:62:05:9e:76:9a:14:70:70:cc:cf:b5:ff:
7a:c1:d4:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 03:46:13 2025 by rpki-client