Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
File: vkPScQqtfJjBD02UXave6iHEnTE.mft (raw, json)
Hash identifier: NjiaH8rJAIpszGZV9hCFItgYAt7kKDvPZgte5fHdrN4=
Subject key identifier: 3A:00:86:60:D9:3D:56:D2:A1:E3:D9:2D:B0:FA:87:8A:37:CF:7D:A5
Authority key identifier: BE:43:D2:71:0A:AD:7C:98:C1:0F:4D:94:5D:AB:DE:EA:21:C4:9D:31
Certificate issuer: /CN=be43d2710aad7c98c10f4d945dabdeea21c49d31
Certificate serial: 01977B67390A1D5DC3C7F471DBB8A789F3B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkPScQqtfJjBD02UXave6iHEnTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
Manifest number: 0F6A
Signing time: Tue 17 Jun 2025 01:00:51 +0000
Manifest this update: Tue 17 Jun 2025 01:00:51 +0000
Manifest next update: Wed 18 Jun 2025 01:00:51 +0000
Files and hashes: 1: OTeSGDvy30ag83BDxmnIjfIrKns.roa (hash: xkyUd77WygfbbzqamRZFRpRzb6QC+rjro6IfY1rUZu8=)
2: vkPScQqtfJjBD02UXave6iHEnTE.crl (hash: K7mZVPv9iw6mzLIGVTloFfqEAMTXiF0FA4m5cwke8T4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkPScQqtfJjBD02UXave6iHEnTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 21:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7b:67:39:0a:1d:5d:c3:c7:f4:71:db:b8:a7:89:f3:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be43d2710aad7c98c10f4d945dabdeea21c49d31
Validity
Not Before: Jun 17 01:00:51 2025 GMT
Not After : Jun 18 01:00:51 2025 GMT
Subject: CN=3a008660d93d56d2a1e3d92db0fa878a37cf7da5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:bc:ab:f5:fe:79:28:af:24:3c:c1:1f:0f:b6:
19:be:a2:78:62:6d:b0:c3:75:72:b2:f9:a1:11:ad:
5b:b9:2c:6d:0e:6f:47:09:4a:17:b3:4f:4b:b4:c8:
a1:97:81:44:3d:4f:17:dc:15:06:36:88:af:aa:2c:
d4:a0:7e:cf:27:b0:f8:64:37:a8:59:6f:21:3a:a2:
de:43:10:33:87:50:08:cd:17:d5:a3:1a:04:d1:2e:
f3:86:a9:62:c3:37:ea:5c:d7:a2:18:dc:31:7b:49:
72:4b:52:7c:b0:95:37:08:b9:82:fe:d7:57:87:12:
d6:0c:31:92:9a:88:a5:b3:49:01:c8:c0:07:30:73:
cc:52:6d:f8:5f:ff:4a:08:a6:13:dd:63:bf:54:f5:
13:95:1a:64:5f:08:c4:03:3e:71:87:ed:50:49:55:
a0:18:1e:70:12:79:fb:f8:7d:e8:e1:5f:e4:16:c7:
e9:98:f9:68:78:89:7e:84:98:40:3f:16:34:54:1d:
7d:ea:57:40:cf:03:b6:24:c7:f0:cc:50:00:26:f4:
ad:22:8b:31:78:dc:65:39:fc:a0:17:35:53:c4:d0:
70:a9:b9:4b:dc:76:10:12:09:e6:a9:55:7d:31:89:
c3:8f:1b:a8:92:7d:44:09:9f:88:06:f4:f5:9a:56:
8f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:00:86:60:D9:3D:56:D2:A1:E3:D9:2D:B0:FA:87:8A:37:CF:7D:A5
X509v3 Authority Key Identifier:
keyid:BE:43:D2:71:0A:AD:7C:98:C1:0F:4D:94:5D:AB:DE:EA:21:C4:9D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkPScQqtfJjBD02UXave6iHEnTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:36:86:57:91:77:eb:73:28:2e:81:0c:34:bd:dc:a3:b7:13:
b9:0b:1e:be:e4:f3:00:9e:4a:ec:62:a6:78:b5:ad:a3:ab:ba:
a8:df:18:4b:4e:05:7f:0b:2e:7f:21:c8:6a:ca:f0:bb:08:7b:
51:56:4a:4e:05:3d:8e:24:04:0b:87:9c:7e:fc:f2:eb:fe:29:
cd:0d:bf:bf:9e:03:96:3c:38:30:36:f1:03:88:ac:9a:5b:40:
c6:ac:9f:67:ea:9a:1e:07:ad:a2:d5:02:95:ae:0a:1c:e7:7d:
2f:a3:8e:2b:c9:da:aa:e0:14:c7:e7:01:5b:e1:a0:07:cd:8a:
18:a1:34:d3:5f:26:c6:cb:6b:49:92:10:c9:1b:ec:24:ae:61:
bb:41:63:77:e9:62:15:b1:46:44:eb:a0:44:32:9f:65:09:3e:
33:90:f1:bc:29:27:4c:d1:9e:df:25:78:e6:6f:db:57:d8:aa:
d1:1e:d1:65:58:81:00:a9:3f:62:bc:35:3e:3a:a0:fb:2b:ba:
9c:87:1e:8e:df:17:0d:f9:01:49:a4:72:ac:7e:cb:d8:24:ca:
28:e5:12:9d:e3:54:02:00:4a:0c:b0:d1:92:35:f4:8b:5a:8e:
df:3f:ae:a4:f6:97:e1:52:8c:47:b4:89:ec:e0:de:60:0f:23:
9d:f5:b0:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 04:44:05 2025 by rpki-client