Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.mft
File: vMY_AQxUC81FVDRL-5pZou26vCk.mft (raw, json)
Hash identifier: 24hlCgmN/RmW/yPS2udbdLoR2ajFI8ME3RhDejKHfmo=
Subject key identifier: B3:F0:24:7A:89:6F:C6:C1:07:5C:02:D2:A4:31:D1:6A:E5:1B:22:39
Authority key identifier: BC:C6:3F:01:0C:54:0B:CD:45:54:34:4B:FB:9A:59:A2:ED:BA:BC:29
Certificate issuer: /CN=bcc63f010c540bcd4554344bfb9a59a2edbabc29
Certificate serial: 01976D743FFDD9AB4A90955B8C133EFDAC18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMY_AQxUC81FVDRL-5pZou26vCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.mft
Manifest number: 1597
Signing time: Sat 14 Jun 2025 08:00:24 +0000
Manifest this update: Sat 14 Jun 2025 08:00:24 +0000
Manifest next update: Sun 15 Jun 2025 08:00:24 +0000
Files and hashes: 1: f54g9Idv6PqQc5NMQvmsvFWJIzA.roa (hash: l130lZQGnDRQWTrBtDjmk6wY+7GBZMzcTr0yBlbCoVI=)
2: vMY_AQxUC81FVDRL-5pZou26vCk.crl (hash: mlw6FEk7w2OUtdgggrw/g1m2Stgv14876adhucPojog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vMY_AQxUC81FVDRL-5pZou26vCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:3f:fd:d9:ab:4a:90:95:5b:8c:13:3e:fd:ac:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcc63f010c540bcd4554344bfb9a59a2edbabc29
Validity
Not Before: Jun 14 08:00:24 2025 GMT
Not After : Jun 15 08:00:24 2025 GMT
Subject: CN=b3f0247a896fc6c1075c02d2a431d16ae51b2239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:bc:f1:30:73:d3:79:1c:6e:01:75:06:14:75:
c9:64:78:d4:6f:73:a0:7a:5f:67:d6:a7:e6:98:ce:
90:8c:0b:c2:c7:ec:89:5f:a7:9a:ee:fc:39:20:21:
24:ea:03:a8:cd:af:b1:2f:f6:5d:de:80:36:ec:f2:
37:a7:5a:34:43:68:32:ea:39:c7:37:a4:52:89:de:
a9:c6:2b:2c:ab:6c:46:06:98:91:ed:6d:c2:86:18:
00:34:92:b4:88:76:d5:a7:e3:6e:7c:d8:6a:80:6c:
a8:c8:fe:3b:68:1c:02:08:f8:18:f6:4e:80:5a:56:
e8:52:1c:43:cb:d8:79:92:ee:c1:18:3b:81:00:e9:
39:39:3d:50:3e:e3:6b:aa:48:52:5a:d0:a8:84:5e:
a7:4c:9e:07:c4:87:a5:1b:22:2e:b1:36:6f:82:7b:
ea:40:13:bf:8f:a8:90:70:7d:ed:33:d7:bc:8d:51:
83:21:69:86:1c:56:cc:2a:df:be:c5:5a:a5:89:af:
67:3a:ae:7b:a7:e5:f0:07:6b:6f:bb:63:7b:33:21:
03:c7:13:be:3c:de:2e:f4:e3:8e:8e:d4:26:50:cf:
a6:4d:8a:e1:60:d8:cf:42:9b:4b:10:eb:10:cb:29:
43:ec:a3:17:36:e4:95:b5:5a:1b:21:bb:37:34:3b:
d1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F0:24:7A:89:6F:C6:C1:07:5C:02:D2:A4:31:D1:6A:E5:1B:22:39
X509v3 Authority Key Identifier:
keyid:BC:C6:3F:01:0C:54:0B:CD:45:54:34:4B:FB:9A:59:A2:ED:BA:BC:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMY_AQxUC81FVDRL-5pZou26vCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:93:14:f4:ca:5d:d8:fb:2c:d0:7c:47:bb:62:c9:12:f2:03:
50:0c:e8:fc:bd:04:bf:7e:85:2d:cf:25:ad:dd:bb:90:b4:be:
db:09:03:07:fa:9a:40:8a:26:f2:63:1d:f4:4c:c9:6d:17:0a:
13:c1:30:80:db:25:f0:bb:e1:71:36:0b:e8:dd:81:61:c7:7f:
52:93:aa:72:68:61:65:f7:36:16:d2:db:72:fb:eb:19:f7:fa:
7e:8c:fb:03:33:80:aa:52:25:fa:af:34:ec:0c:ab:3b:00:25:
64:19:bc:d3:1e:c5:e7:21:dc:09:35:47:0e:5f:7c:ef:c0:2b:
5a:82:b0:70:9f:05:e9:33:c1:c6:4d:bb:55:e8:73:54:ae:59:
25:aa:ed:a9:d7:00:37:5a:55:e5:8d:11:ec:d7:28:32:a4:7a:
d8:31:26:b3:10:df:57:08:16:7c:1a:f1:e6:da:81:19:8d:7f:
aa:bd:43:99:92:f9:56:3d:49:e5:c6:39:d7:54:67:9a:46:0d:
5e:73:a2:a7:71:68:99:09:c6:02:37:b0:7a:89:e0:3e:4a:2e:
9e:ef:ee:25:02:fa:45:07:ca:08:85:94:2b:55:a2:e3:bc:dc:
64:40:8d:7c:33:7b:da:3b:8a:a1:13:27:e4:53:ad:a7:08:74:
f8:9a:7a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:08:28 2025 by rpki-client