Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.mft
File: vJ7I21lyYHXuKfXvyQth5zwH968.mft (raw, json)
Hash identifier: bUtWMaPML0w8B/eGXeoz+IagUVVEXH0tXBnSi4LUcy0=
Subject key identifier: C1:06:C4:85:96:A6:5B:64:49:AD:2D:24:1E:3B:54:56:ED:13:79:01
Authority key identifier: BC:9E:C8:DB:59:72:60:75:EE:29:F5:EF:C9:0B:61:E7:3C:07:F7:AF
Certificate issuer: /CN=bc9ec8db59726075ee29f5efc90b61e73c07f7af
Certificate serial: 019769979564E2D3338BEAD66C10DC8BACE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJ7I21lyYHXuKfXvyQth5zwH968.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.mft
Manifest number: 0AD9
Signing time: Fri 13 Jun 2025 14:00:31 +0000
Manifest this update: Fri 13 Jun 2025 14:00:31 +0000
Manifest next update: Sat 14 Jun 2025 14:00:31 +0000
Files and hashes: 1: vJ7I21lyYHXuKfXvyQth5zwH968.crl (hash: qcACv775JeFhwIPkmvp1XDhvaI0+SiKJ0gHSaCcEi4A=)
2: vsYS1yNC27K4go1u55pkiDiNTso.roa (hash: VwZn+ljb2itH/kH3n3gJQ8cRZDUKa5y/b7TBam8fThU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJ7I21lyYHXuKfXvyQth5zwH968.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:97:95:64:e2:d3:33:8b:ea:d6:6c:10:dc:8b:ac:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9ec8db59726075ee29f5efc90b61e73c07f7af
Validity
Not Before: Jun 13 14:00:31 2025 GMT
Not After : Jun 14 14:00:31 2025 GMT
Subject: CN=c106c48596a65b6449ad2d241e3b5456ed137901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5a:c0:c4:e2:f8:96:4f:65:38:7b:72:e2:f6:
c6:8a:08:54:5d:72:b8:fa:1b:19:88:f4:b9:17:13:
0b:44:63:cc:24:f2:91:5f:c9:cd:d1:e9:d4:b1:b2:
aa:b1:50:74:0c:32:9a:c5:6d:43:17:5f:e6:67:66:
24:1e:12:a4:1c:bc:23:53:6e:4a:12:18:12:23:fe:
67:54:2d:92:1f:24:00:24:d0:9c:e7:ef:09:d5:e0:
ab:54:a5:34:64:1f:5e:df:eb:84:4b:43:c4:3e:af:
17:75:ee:21:59:02:99:ae:86:1d:dd:d9:41:34:dc:
e5:dc:38:ab:3b:75:b9:b6:3f:63:12:fc:f0:ea:ff:
56:2d:3d:b4:a3:97:27:16:54:b3:ff:aa:ca:0d:8b:
c0:41:0b:e4:10:ba:b5:7d:6c:34:53:2e:1d:e6:40:
00:b2:67:bb:2c:0e:9c:3e:f7:96:f0:8e:e3:2c:0e:
0b:f1:7e:30:6b:7c:e4:a5:bb:ea:56:e8:b6:de:f8:
29:16:88:8f:fe:96:ad:46:8d:32:62:00:db:49:e6:
36:4e:05:c3:d4:00:40:ed:61:31:ea:00:2c:d5:39:
18:f9:dc:46:72:69:22:89:ae:c9:be:3f:11:12:e9:
f7:f4:e7:63:8a:8b:1d:27:10:f5:75:bd:9b:79:cb:
48:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:06:C4:85:96:A6:5B:64:49:AD:2D:24:1E:3B:54:56:ED:13:79:01
X509v3 Authority Key Identifier:
keyid:BC:9E:C8:DB:59:72:60:75:EE:29:F5:EF:C9:0B:61:E7:3C:07:F7:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJ7I21lyYHXuKfXvyQth5zwH968.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:df:32:ed:74:10:0b:f4:76:81:7a:d1:29:80:b1:6b:1a:97:
38:0a:7e:bb:f7:6f:d2:d5:da:57:dd:fe:b3:58:4e:f4:ab:57:
b8:96:02:c5:53:6c:d0:bc:e8:d7:c7:e8:39:40:c1:ac:0d:96:
99:6b:9e:f5:43:20:67:44:c1:16:9d:db:e3:ea:8d:85:73:d0:
1a:b9:84:80:f7:72:b6:c4:1f:b4:d7:da:92:12:99:e7:73:64:
f5:8a:d0:11:52:e0:9d:7a:67:5b:28:6a:57:f2:87:a1:53:ab:
b7:32:52:7b:f4:bc:f6:d2:87:53:1f:0b:70:d3:f5:75:a9:4e:
b0:02:31:ca:46:3d:6f:1b:b2:65:cd:7a:34:43:95:e0:4f:06:
81:73:34:1e:52:4b:1e:b4:dd:60:a9:69:90:ec:b3:d1:ec:92:
f8:ac:bb:1e:af:f6:f6:5a:7c:2d:c9:07:e1:bd:d9:14:fc:72:
f5:b8:2f:73:08:51:a4:47:c6:33:c8:1d:71:6a:1b:ad:f7:ca:
d4:51:6e:78:ef:10:12:dc:3e:1c:42:a5:24:65:3f:28:ef:1f:
ba:1b:3e:24:36:64:1f:f9:af:5b:3b:27:a4:f1:36:22:4e:1a:
74:e5:71:f6:cf:80:88:b8:5b:0a:bd:e6:5c:ad:44:4f:6b:dc:
15:17:55:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:36:01 2025 by rpki-client