Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.mft
File: vj908rbk4o6f9so8yjpdeMosrWo.mft (raw, json)
Hash identifier: nxsU8FPOypLmWv4hBw4FhFDFWmAOCIBY/F75xEW+N34=
Subject key identifier: 88:A8:28:85:42:95:41:98:9F:12:08:66:98:4E:FB:A0:8B:46:EF:17
Authority key identifier: BE:3F:74:F2:B6:E4:E2:8E:9F:F6:CA:3C:CA:3A:5D:78:CA:2C:AD:6A
Certificate issuer: /CN=be3f74f2b6e4e28e9ff6ca3cca3a5d78ca2cad6a
Certificate serial: 01976DABDA31C0CACDC5A2DAB8BA86DEDCB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vj908rbk4o6f9so8yjpdeMosrWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.mft
Manifest number: 08FC
Signing time: Sat 14 Jun 2025 09:01:08 +0000
Manifest this update: Sat 14 Jun 2025 09:01:08 +0000
Manifest next update: Sun 15 Jun 2025 09:01:08 +0000
Files and hashes: 1: XeXaIv0GnCQWCewZa3XGZvVcOuU.roa (hash: IlSm1MC8XpLI7JpFnpnOEj3N8KdmO1O/PRbAlZC1Yqs=)
2: keiUHgNWXQG1tCnd_1r6jW3ByFc.roa (hash: UWHI9ulMx4qU9scGVCWFH3JBiygO7K8ZUkSeDS3PRRY=)
3: vj908rbk4o6f9so8yjpdeMosrWo.crl (hash: /KwRavMusxPFFLQEZoBMXSPKMiQcGSCEQegKmQAOqgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vj908rbk4o6f9so8yjpdeMosrWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 09:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:da:31:c0:ca:cd:c5:a2:da:b8:ba:86:de:dc:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be3f74f2b6e4e28e9ff6ca3cca3a5d78ca2cad6a
Validity
Not Before: Jun 14 09:01:08 2025 GMT
Not After : Jun 15 09:01:08 2025 GMT
Subject: CN=88a82885429541989f120866984efba08b46ef17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:1c:32:e8:b6:2a:d4:10:c8:8a:b2:18:ac:b9:
c7:c3:b8:ec:90:42:ae:5a:26:83:9e:ab:fc:ca:ae:
55:85:3d:61:ff:c8:fa:76:04:0b:40:83:e2:40:35:
24:cb:cb:9d:09:e9:71:43:d4:29:2a:7c:e5:33:6f:
4c:08:05:c5:e3:28:cf:c4:21:62:f0:35:f7:d6:48:
6b:a9:25:71:f4:f8:24:2c:60:a3:6d:b2:6c:c7:f4:
82:77:c7:33:c1:27:30:9a:34:2f:52:63:ad:ea:87:
a2:69:66:38:67:f6:9f:00:50:da:d3:d7:67:c6:69:
4c:44:47:9a:2a:37:e1:0d:a1:c8:46:96:52:bb:3c:
1b:b2:97:a8:35:0e:c7:30:49:19:4b:ab:96:40:15:
c3:67:82:b3:23:17:2d:2a:f8:f6:fd:d6:27:5c:de:
a3:5f:61:55:eb:86:72:69:e4:58:89:a8:80:26:c4:
ec:ab:fa:a6:73:10:90:6f:ac:6e:4d:b4:bf:f6:42:
8c:67:e3:cf:59:c6:17:5b:58:f3:34:37:84:96:b1:
b3:26:56:57:11:d6:98:a2:64:06:d6:21:e7:23:ab:
a3:86:29:d7:42:65:9a:1a:59:3e:3f:f5:e7:83:a6:
1f:9d:bc:0c:c4:9c:7c:6c:16:3b:e7:41:ca:b5:3b:
b7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A8:28:85:42:95:41:98:9F:12:08:66:98:4E:FB:A0:8B:46:EF:17
X509v3 Authority Key Identifier:
keyid:BE:3F:74:F2:B6:E4:E2:8E:9F:F6:CA:3C:CA:3A:5D:78:CA:2C:AD:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vj908rbk4o6f9so8yjpdeMosrWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:8a:4b:a9:0e:65:04:ba:21:ee:c2:32:37:98:5e:86:38:5a:
0c:0c:05:79:54:dd:63:7b:ed:7e:b3:41:04:80:c8:3c:2c:70:
3d:fe:d0:8c:0e:48:b0:74:42:b2:e8:f4:87:95:f1:c5:c3:30:
42:60:94:92:28:1a:0c:e7:2f:c8:b9:54:dd:e8:a5:f8:dc:39:
aa:25:00:d7:3f:ce:a4:ae:56:63:31:82:38:b3:00:30:e8:71:
df:74:ed:3b:51:1b:12:60:81:cd:3c:d9:36:07:4d:28:8a:44:
bc:75:9d:d8:36:20:e0:6c:b3:c0:79:43:1d:0e:3a:c6:19:9c:
59:b6:ce:41:8d:4b:5c:64:65:26:83:70:b5:19:22:b4:65:f1:
4e:30:01:b9:d1:eb:3b:4f:e8:f3:3e:ee:15:ae:f9:41:cd:fc:
54:a3:50:83:eb:e4:c2:0f:ae:49:15:d7:4f:3c:c7:11:b3:94:
c2:4c:60:d0:73:e3:b6:fd:45:1c:48:23:75:4c:03:8a:d5:a8:
c2:47:cc:f3:37:23:ac:fa:7a:13:7e:3e:d9:01:6b:f5:cb:e7:
32:3f:c0:77:4d:97:39:d4:18:04:4c:10:7d:80:48:ba:13:c6:
da:7e:84:77:53:ef:bf:f9:8c:34:89:79:32:9b:00:66:83:a2:
d0:8b:68:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:34:05 2025 by rpki-client