Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.mft
File: vIwagDL1fyKwFFSmXvMt6ndJbQs.mft (raw, json)
Hash identifier: eXwgKEPL1eO0SRXNJ6SWZl2yjJvgtI5LRlRJMiecUPY=
Subject key identifier: 0B:17:39:3C:5D:26:CE:63:92:20:A3:C1:D7:F0:A1:22:13:B4:BE:1C
Authority key identifier: BC:8C:1A:80:32:F5:7F:22:B0:14:54:A6:5E:F3:2D:EA:77:49:6D:0B
Certificate issuer: /CN=bc8c1a8032f57f22b01454a65ef32dea77496d0b
Certificate serial: 019771BF54E945F8E2B3525496E978D1FE32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIwagDL1fyKwFFSmXvMt6ndJbQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.mft
Manifest number: 08C5
Signing time: Sun 15 Jun 2025 04:00:53 +0000
Manifest this update: Sun 15 Jun 2025 04:00:53 +0000
Manifest next update: Mon 16 Jun 2025 04:00:53 +0000
Files and hashes: 1: 87EiEbuhBkMDFm619edEsUyoB7Y.roa (hash: iu5N7p/QfYR3g8fpVRiIN4OpWGAgMRa+uUZVim92tYw=)
2: hhHnsqFssAy3cZ6p2eic8J_5Jkg.roa (hash: 4+RUythcb8WdsV0R43hgKvkcYTcHEmIS4/pDs5LGxZk=)
3: vIwagDL1fyKwFFSmXvMt6ndJbQs.crl (hash: pjJupXV8koywbySB/vhG7lMW16f5MfRcyi0tfZKGAG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/vIwagDL1fyKwFFSmXvMt6ndJbQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:bf:54:e9:45:f8:e2:b3:52:54:96:e9:78:d1:fe:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc8c1a8032f57f22b01454a65ef32dea77496d0b
Validity
Not Before: Jun 15 04:00:53 2025 GMT
Not After : Jun 16 04:00:53 2025 GMT
Subject: CN=0b17393c5d26ce639220a3c1d7f0a12213b4be1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:dc:e6:69:10:44:74:7b:41:df:4d:65:e5:6d:
45:79:ed:3c:ca:97:b1:05:0f:ae:b8:b2:2d:90:e0:
ba:09:c1:64:db:01:06:a0:4f:62:d9:88:2d:7f:ea:
05:c8:14:9a:d6:24:06:f4:f4:74:cc:70:78:44:f2:
ad:11:97:8d:78:31:d1:d1:09:45:a9:a1:44:66:02:
1e:07:11:b8:f0:48:00:54:69:77:3f:92:70:c0:ce:
af:12:df:e0:f5:d5:08:ac:85:66:bc:57:f3:56:19:
01:23:22:87:5d:b7:b2:20:34:7f:e9:ad:fc:91:66:
41:22:1e:8d:d5:5c:8e:68:4a:66:c6:b3:b3:d1:db:
59:a2:bd:f6:e8:bb:0b:57:1b:8e:93:ef:84:bb:48:
d6:47:f9:bd:9a:e6:8f:fa:2a:04:be:a4:d8:6b:27:
d9:f6:d3:ff:de:95:d3:b5:e3:82:6d:c4:70:75:0f:
de:d4:08:b4:92:81:5b:eb:1f:21:5e:78:53:fb:04:
97:dd:86:f7:3d:4c:15:6d:ef:89:b2:6b:21:a6:8d:
9b:22:c3:6d:aa:6c:c0:13:10:26:76:87:f8:2d:dd:
74:2f:91:90:0b:f2:1f:cf:e4:16:1d:54:9a:26:78:
7d:ae:2f:2f:38:1b:cd:5c:78:5a:44:5c:38:90:75:
3d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:17:39:3C:5D:26:CE:63:92:20:A3:C1:D7:F0:A1:22:13:B4:BE:1C
X509v3 Authority Key Identifier:
keyid:BC:8C:1A:80:32:F5:7F:22:B0:14:54:A6:5E:F3:2D:EA:77:49:6D:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIwagDL1fyKwFFSmXvMt6ndJbQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:76:5e:d4:99:ea:0f:7e:ed:99:fc:39:d7:b8:98:55:6f:de:
36:c0:72:13:4d:30:f3:9b:80:99:b6:17:e4:68:74:a0:04:e7:
e7:e7:84:05:89:ec:45:21:6f:9f:5c:d2:62:3b:ec:4c:04:2e:
51:e2:91:37:7b:09:d3:ea:09:24:67:e5:b8:a3:2a:2b:87:e3:
02:30:13:ff:c6:26:34:9d:9d:f6:37:9a:27:aa:80:fe:1d:82:
1e:01:ba:24:4d:80:fe:e3:45:9c:bc:f0:07:14:e3:85:71:4b:
cb:21:c8:0b:0c:54:d7:f7:33:41:8b:b0:2d:36:98:7d:e8:20:
8a:1d:ed:78:da:b2:9c:e5:6b:f0:2d:e6:36:4c:ac:fb:fd:0c:
dd:27:d5:fc:a9:c4:8c:12:17:92:c2:14:f3:df:f2:80:c2:17:
3f:69:c4:76:e2:40:7f:dd:e0:90:3e:57:52:6b:46:62:a6:b7:
a7:8e:e6:89:52:27:b3:b9:53:4f:7d:d9:f7:4c:f5:0b:64:6b:
26:bd:50:43:17:4e:11:42:52:d1:09:dc:f1:33:9a:bf:63:83:
07:b2:b9:84:48:80:c5:b0:19:28:89:0c:83:3d:be:12:f7:cc:
28:38:99:d5:e6:0d:27:57:42:a1:f1:9b:1b:30:68:b3:8b:30:
bc:7e:9c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:42:25 2025 by rpki-client