
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.mft
File: vJ8LmsHVZS89yh7xYjv5mrKWR98.mft (raw, json)
Hash identifier: E7oD4qLsh45lOdFvbAX+JefJ9h/9KFO8FrmLQsmgZ1M=
Subject key identifier: E9:11:0F:08:4D:DF:C5:C9:B7:43:61:D8:B7:35:4C:07:DA:10:57:A0
Authority key identifier: BC:9F:0B:9A:C1:D5:65:2F:3D:CA:1E:F1:62:3B:F9:9A:B2:96:47:DF
Certificate issuer: /CN=bc9f0b9ac1d5652f3dca1ef1623bf99ab29647df
Certificate serial: 01976C61F1FC436CDCF25396EF57D914672B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJ8LmsHVZS89yh7xYjv5mrKWR98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 03:00:47 +0000
Manifest this update: Sat 14 Jun 2025 03:00:47 +0000
Manifest next update: Sun 15 Jun 2025 03:00:47 +0000
Files and hashes: 1: FrLoQw9Tk2q53G3qePuE3CPqiJw.roa (hash: w3xxWOqtTqCnhtgzBMiz0Hnx9M0t8vYZOEOxsv+EFns=)
2: XuWyQ_h13oHMYelX1eEehMBE4QM.roa (hash: 55GFOmkogCsmTmcypUyvrH3xFalGu40zdpw3o3u8qPY=)
3: vJ8LmsHVZS89yh7xYjv5mrKWR98.crl (hash: 91Ne6+3b/KmK3wHw6JotCg1IkQA+iceAwoWbyIyc9nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJ8LmsHVZS89yh7xYjv5mrKWR98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:61:f1:fc:43:6c:dc:f2:53:96:ef:57:d9:14:67:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9f0b9ac1d5652f3dca1ef1623bf99ab29647df
Validity
Not Before: Jun 14 03:00:47 2025 GMT
Not After : Jun 15 03:00:47 2025 GMT
Subject: CN=e9110f084ddfc5c9b74361d8b7354c07da1057a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f7:06:ed:f4:e8:6e:1f:4c:50:d5:eb:47:66:
21:9e:d9:87:c5:42:ca:9a:62:50:f6:49:64:60:ba:
9f:aa:e1:02:fb:f4:ff:0f:da:5c:58:10:30:95:7d:
21:93:e6:6b:bc:f2:6b:0e:00:e3:5b:cc:8c:49:2d:
22:4f:ad:54:cd:da:02:3c:19:27:7f:e9:b8:8a:92:
cb:2a:88:7a:78:b8:a1:70:b5:5b:ba:36:fb:7f:e9:
10:fa:2e:84:12:a1:b1:28:f6:e5:6d:6b:ca:26:3a:
79:e6:0d:44:39:eb:39:2a:8c:ca:22:e0:40:11:7f:
1f:a2:00:de:e4:7e:08:02:5a:09:6a:a8:29:78:18:
84:83:28:23:c2:23:e4:a2:d9:01:f9:dc:a1:ca:34:
99:84:9a:33:5f:41:03:16:7d:13:65:c3:4e:8e:8a:
da:1b:d6:10:4c:f1:78:2d:18:66:f9:bf:b3:ca:8d:
a2:ef:6c:8a:2d:ed:8c:ef:24:30:2f:6e:5c:a6:84:
2f:e9:1d:5d:c9:ac:af:f2:02:fa:21:fc:46:a5:46:
f9:48:a4:2d:1e:58:40:30:5d:0c:57:44:75:9f:7c:
da:c0:c3:c4:0d:b7:99:41:b6:43:ea:a9:d8:92:fb:
f0:88:40:50:2d:1e:29:11:9d:03:a8:39:ac:a3:b9:
9a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:11:0F:08:4D:DF:C5:C9:B7:43:61:D8:B7:35:4C:07:DA:10:57:A0
X509v3 Authority Key Identifier:
keyid:BC:9F:0B:9A:C1:D5:65:2F:3D:CA:1E:F1:62:3B:F9:9A:B2:96:47:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJ8LmsHVZS89yh7xYjv5mrKWR98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:11:74:5c:81:2e:48:0e:4e:99:e3:03:19:cf:60:a0:e5:5d:
28:aa:58:36:7f:4e:e7:77:22:4e:bd:7a:17:88:d0:19:d6:bd:
f4:d9:22:a9:b9:8d:3b:ec:9c:6a:cd:29:60:08:32:22:cd:f5:
48:32:91:3b:ec:55:17:7e:86:05:f3:c3:2f:43:c3:47:8c:57:
f3:cd:6a:1c:08:bb:dc:5e:3a:70:d3:ff:57:2d:b6:e1:df:0c:
9e:1b:2d:eb:af:6d:9a:24:03:e5:a2:97:75:52:27:4c:79:4f:
60:48:00:83:1d:a4:0a:57:f5:4f:fe:ab:ac:73:bb:aa:06:9d:
0a:25:9a:3d:42:83:8e:fc:71:25:77:cc:f4:70:50:26:89:91:
be:e8:66:51:03:9d:25:a4:d5:2a:65:b0:ec:b7:9b:66:3b:c1:
a7:6a:02:ee:43:d9:af:22:30:14:e1:ac:c7:fd:23:92:44:a6:
6a:6b:55:66:e8:fd:50:29:3a:96:17:10:48:4f:2e:bf:e2:f1:
45:83:a6:fa:80:46:32:eb:39:32:7e:46:7d:83:cf:3f:f8:04:
ff:4d:0b:0f:67:3e:61:d5:c9:7a:02:57:68:9e:e6:35:bc:84:
7f:ee:a9:d4:ba:a7:37:f3:90:3b:3f:fe:70:c7:85:0d:42:93:
09:fd:91:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:29:39 2025 by rpki-client