Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
File: vZctRCdupBAu9q7TDyrljpmz51E.mft (raw, json)
Hash identifier: siM2cZcSgwHuXSl120J+yzcQ5lfttG9RDLlGnjHDzPU=
Subject key identifier: 2B:D0:6A:DE:63:6B:4A:B3:73:3D:07:80:13:28:B6:3B:CE:85:27:D9
Authority key identifier: BD:97:2D:44:27:6E:A4:10:2E:F6:AE:D3:0F:2A:E5:8E:99:B3:E7:51
Certificate issuer: /CN=bd972d44276ea4102ef6aed30f2ae58e99b3e751
Certificate serial: 01977BD4C9B5C3F75634289A4ED9FCF919B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
Manifest number: 1596
Signing time: Tue 17 Jun 2025 03:00:32 +0000
Manifest this update: Tue 17 Jun 2025 03:00:32 +0000
Manifest next update: Wed 18 Jun 2025 03:00:32 +0000
Files and hashes: 1: b6NjfbPhaNhgb-BW4tqnY3lmaqA.roa (hash: pqBGjfGCyQz5ophzP0TT0DFUBi4mqZdJUqu+xhB6npw=)
2: vZctRCdupBAu9q7TDyrljpmz51E.crl (hash: M54lW1z3PONdtXx5aeD7Ie4fgBfV77SxV82enZrsN/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 21:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7b:d4:c9:b5:c3:f7:56:34:28:9a:4e:d9:fc:f9:19:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd972d44276ea4102ef6aed30f2ae58e99b3e751
Validity
Not Before: Jun 17 03:00:32 2025 GMT
Not After : Jun 18 03:00:32 2025 GMT
Subject: CN=2bd06ade636b4ab3733d07801328b63bce8527d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0b:74:a7:fb:0d:aa:29:15:81:cf:b5:9a:b4:
d2:f9:28:72:d7:98:c9:9c:d1:77:9b:e9:87:21:ae:
8b:65:f1:1b:9b:e7:ec:6e:74:71:6c:51:39:50:10:
f2:e3:c0:3c:d9:d3:c1:a2:3a:57:27:06:1f:83:1e:
ca:1a:dc:2a:14:19:d4:39:1f:ed:7e:1c:76:4c:cf:
41:78:c1:01:b7:59:85:af:bf:d4:c9:f7:cb:25:3e:
78:09:eb:26:a9:78:bf:99:85:9b:72:02:81:42:f2:
22:d3:c2:ff:7c:77:69:83:5c:91:19:7d:e6:b4:e0:
b3:64:10:82:19:07:d7:35:7f:71:09:c4:0f:0f:b0:
13:e5:e0:df:3d:a3:4f:1f:64:ab:9f:6e:15:fb:e4:
1b:05:aa:27:53:4b:07:52:7d:f2:fe:94:17:ef:5a:
88:58:4a:91:a9:90:a8:ef:69:5f:fe:35:7a:e0:41:
e0:7f:30:c1:bd:4d:12:f7:66:42:eb:7d:fd:f9:f6:
28:1b:d4:ee:a9:3c:84:fb:e2:d1:f9:ea:2d:91:1a:
7e:54:f3:36:c3:e2:ac:89:39:84:0b:5d:69:b8:39:
9d:02:17:cf:b5:7f:4a:f7:69:4e:fb:6a:73:a6:67:
9f:c4:39:d8:c4:95:91:10:8f:10:5f:cd:4c:1c:17:
f8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:D0:6A:DE:63:6B:4A:B3:73:3D:07:80:13:28:B6:3B:CE:85:27:D9
X509v3 Authority Key Identifier:
keyid:BD:97:2D:44:27:6E:A4:10:2E:F6:AE:D3:0F:2A:E5:8E:99:B3:E7:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:8e:15:76:bf:81:ef:92:b4:64:13:db:04:a4:ac:7d:b5:12:
e6:7c:58:0d:19:3e:3a:cb:3a:47:0a:7a:0a:30:21:42:96:30:
7a:d1:75:30:74:af:af:1c:ef:ed:ec:85:08:5d:57:a8:e9:70:
66:8d:ea:0f:2c:8a:e3:7c:fc:41:a1:f3:bf:01:b3:58:e4:88:
bd:10:2d:01:f9:49:b1:26:c6:ef:37:7d:36:05:7a:7b:64:4f:
4c:b7:9b:5e:70:a8:39:1c:be:9f:f3:75:e5:c8:bc:b9:21:9a:
8b:e7:01:36:4d:cd:eb:6b:35:46:8e:58:ad:f6:75:b8:a7:2e:
2c:bd:57:60:43:94:36:da:71:76:e6:80:ef:34:84:5e:5c:03:
ed:48:d0:a5:ec:59:c3:40:d3:23:bd:b1:6e:1d:5a:d9:71:dc:
88:87:49:2e:37:5f:f1:03:f2:2b:15:cb:4b:63:e2:de:6f:6f:
2c:9a:6d:0d:95:49:78:07:d5:6e:86:85:35:34:1c:8d:fa:ce:
ed:8d:43:40:d4:5e:98:d0:40:8a:27:ea:0b:93:51:fd:37:52:
be:59:a0:e9:85:6c:b2:ff:fd:34:ca:3d:d0:72:fc:d9:df:27:
3a:50:d0:28:c2:0f:a7:2c:b3:25:bd:40:f6:f0:6e:3c:35:01:
71:fb:c5:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 05:50:50 2025 by rpki-client