Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.mft
File: vmBP81opyRFWvkvSKbO693yDl70.mft (raw, json)
Hash identifier: R2ojui7NVWAkM3QGUAFJM9urGgP2teag4VGE/sFKKDM=
Subject key identifier: 77:17:B1:40:1B:13:E3:90:94:43:7D:9D:25:32:77:92:20:D0:1C:63
Authority key identifier: BE:60:4F:F3:5A:29:C9:11:56:BE:4B:D2:29:B3:BA:F7:7C:83:97:BD
Certificate issuer: /CN=be604ff35a29c91156be4bd229b3baf77c8397bd
Certificate serial: 01976D06C971020FBC4BDBD165B6E2025C49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vmBP81opyRFWvkvSKbO693yDl70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.mft
Manifest number: 07B8
Signing time: Sat 14 Jun 2025 06:00:50 +0000
Manifest this update: Sat 14 Jun 2025 06:00:50 +0000
Manifest next update: Sun 15 Jun 2025 06:00:50 +0000
Files and hashes: 1: 8TP605-bnnRU4oKxlSCpw5mXUvE.roa (hash: mDnmEgfw91sdWLEWlPQZ2jWiCvBV4IYovQSRnJwJt28=)
2: vmBP81opyRFWvkvSKbO693yDl70.crl (hash: 0TSn7e/+6/0VahXUMCTCI1N419YWqRI4r5c6t9OhacA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.mft
rsync://rpki.ripe.net/repository/DEFAULT/vmBP81opyRFWvkvSKbO693yDl70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:c9:71:02:0f:bc:4b:db:d1:65:b6:e2:02:5c:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be604ff35a29c91156be4bd229b3baf77c8397bd
Validity
Not Before: Jun 14 06:00:50 2025 GMT
Not After : Jun 15 06:00:50 2025 GMT
Subject: CN=7717b1401b13e39094437d9d2532779220d01c63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b1:55:39:7d:39:8b:fc:0a:0f:e7:78:8a:3a:
f6:48:90:2f:e1:cf:1b:9b:77:bd:9c:72:82:1c:40:
9d:3f:69:45:4c:0d:99:ed:8c:23:56:8e:8f:84:50:
d9:79:e3:81:68:4b:93:21:f2:6e:71:f7:e2:f8:e4:
1d:32:79:72:ac:5f:35:88:97:89:e0:25:d7:2b:1e:
76:74:2f:eb:4c:ac:38:f2:7b:1e:42:3e:48:1a:96:
10:2f:1b:c5:28:0e:06:7b:99:17:fd:6c:21:33:8a:
1e:4f:ac:36:4c:af:f4:f4:80:96:25:3c:e9:f0:1d:
3b:1d:56:33:0d:ba:3a:26:53:63:ee:70:d4:19:f8:
c9:40:59:fd:6f:b9:58:53:be:5d:ab:c5:73:d8:74:
65:04:3c:de:66:30:d7:1b:ab:e8:17:91:51:59:2a:
61:7c:be:3f:18:a5:19:6e:73:ff:e7:00:5e:6a:85:
78:d2:b2:0e:95:80:3f:d6:92:b4:7c:90:06:7b:96:
27:61:d8:00:53:30:a7:eb:1f:ca:b8:8b:45:e8:5c:
1f:ca:7c:da:c3:ed:a1:7e:43:7a:92:ba:64:c2:53:
79:67:db:be:6b:79:0c:db:94:86:ec:19:76:7c:6e:
f5:f6:cf:0a:37:73:11:f0:ee:f4:b3:0d:72:0a:83:
a1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:17:B1:40:1B:13:E3:90:94:43:7D:9D:25:32:77:92:20:D0:1C:63
X509v3 Authority Key Identifier:
keyid:BE:60:4F:F3:5A:29:C9:11:56:BE:4B:D2:29:B3:BA:F7:7C:83:97:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmBP81opyRFWvkvSKbO693yDl70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:15:99:9b:73:6a:1a:07:9a:59:27:61:15:c9:34:ab:58:c6:
9f:45:cf:14:87:59:0d:9d:64:dc:83:68:dd:67:2e:26:3d:c2:
1c:73:f2:95:86:90:c6:3c:a3:83:5c:a9:e9:2e:6c:10:32:01:
e7:0c:8c:7e:ec:16:06:6b:d4:ad:9a:36:b7:32:16:21:30:01:
e8:f4:29:72:a9:48:56:d5:2d:26:dd:8b:55:57:6c:79:a2:0e:
16:7f:91:44:cf:44:69:6f:09:d1:b0:65:09:e9:a6:32:b1:d8:
80:cb:3c:b1:1e:7d:ca:6f:ff:0c:8c:00:14:d7:0c:c3:d2:37:
6c:df:c8:ef:f3:7b:f7:d4:07:cc:64:58:28:19:3a:30:d2:30:
d2:5f:ad:ae:d2:16:14:05:14:45:59:a2:be:40:be:8a:41:c6:
b8:c5:02:ac:36:d4:7a:14:cf:01:61:34:81:17:af:80:50:74:
22:8e:66:21:40:a5:fa:ac:c9:52:29:80:03:08:d7:0c:3b:33:
1b:b7:ae:57:e3:b7:e5:1b:3b:a3:a2:bb:79:78:d8:5a:e9:f1:
43:ec:5a:cb:51:41:29:51:56:67:d4:dc:d8:de:da:4e:62:03:
73:df:06:b3:20:95:da:00:e1:24:98:24:c0:b1:3b:bf:16:16:
50:52:47:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:49:00 2025 by rpki-client