Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.mft
File: vAB4on8QAyY8TFYbAlB2by9Sbn0.mft (raw, json)
Hash identifier: 8TzbbN0Wh75uxJFZ24IyQ64Jjrg5leMfvU1KFz5twis=
Subject key identifier: CE:06:99:37:6E:95:03:4A:57:E5:4E:B6:DC:EE:BC:EA:05:5B:F9:C1
Authority key identifier: BC:00:78:A2:7F:10:03:26:3C:4C:56:1B:02:50:76:6F:2F:52:6E:7D
Certificate issuer: /CN=bc0078a27f1003263c4c561b0250766f2f526e7d
Certificate serial: 0197703E9C9D5E88EC3E61E8891DD7D06B1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vAB4on8QAyY8TFYbAlB2by9Sbn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.mft
Manifest number: 032F
Signing time: Sat 14 Jun 2025 21:00:40 +0000
Manifest this update: Sat 14 Jun 2025 21:00:40 +0000
Manifest next update: Sun 15 Jun 2025 21:00:40 +0000
Files and hashes: 1: U8RX6_Xhgd2rniYJPgiw5XhDM14.roa (hash: 2r/ZPIhIP4vgQHcp4lEFNmYb4WZmbuMJWG8eyE6HlfQ=)
2: vAB4on8QAyY8TFYbAlB2by9Sbn0.crl (hash: Gq9CVr6VccCwzdnaVFsh1yN/EicFIDbLxRLcPQSQyqk=)
3: vAZxSJwcgiBcI_82IoG7w0HDsHY.roa (hash: p3exCfpQFtu6+djLck5m9Ak9SIsL/faxVMijWb66KP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vAB4on8QAyY8TFYbAlB2by9Sbn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:3e:9c:9d:5e:88:ec:3e:61:e8:89:1d:d7:d0:6b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc0078a27f1003263c4c561b0250766f2f526e7d
Validity
Not Before: Jun 14 21:00:40 2025 GMT
Not After : Jun 15 21:00:40 2025 GMT
Subject: CN=ce0699376e95034a57e54eb6dceebcea055bf9c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:64:6b:27:59:e8:5b:53:13:64:90:9b:80:73:
cd:50:b9:92:be:fc:d8:da:78:b1:ae:8e:89:67:ec:
80:ed:5a:5b:be:16:bc:ad:6f:97:19:45:35:7f:30:
c0:81:5b:8e:0b:c0:58:d1:17:77:c0:3f:d1:79:7e:
5e:8d:cf:3c:f9:d2:17:b1:6b:40:00:5c:1d:ba:4f:
5e:d5:c8:55:63:38:b1:6c:5e:af:79:3a:3f:64:ce:
25:ec:cf:7f:c0:88:cb:56:f4:4d:d8:70:a7:67:ee:
51:51:01:0f:be:df:b2:61:ec:3b:a6:1b:0b:09:3a:
35:79:d9:ce:9a:bf:04:44:12:31:ee:64:61:c1:80:
be:ba:42:94:98:1a:51:62:0d:65:11:5a:6e:98:75:
df:4d:fe:d8:82:e2:8d:2e:16:44:51:ca:e6:4e:ac:
a7:9f:fb:68:33:68:15:dd:c3:a1:9e:08:8e:8d:71:
bc:79:47:41:dc:43:b9:14:c4:c1:6c:f1:15:bf:22:
45:6f:7a:85:a6:0a:4a:cd:e8:0c:b5:e0:70:9e:f5:
9d:55:65:31:05:fc:a5:f4:7c:ed:d5:29:34:38:8a:
9b:6b:bf:6f:1a:9c:00:24:b7:32:eb:a9:81:d0:d0:
39:a2:29:a9:9c:00:ff:6c:98:1b:5f:51:34:18:06:
59:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:06:99:37:6E:95:03:4A:57:E5:4E:B6:DC:EE:BC:EA:05:5B:F9:C1
X509v3 Authority Key Identifier:
keyid:BC:00:78:A2:7F:10:03:26:3C:4C:56:1B:02:50:76:6F:2F:52:6E:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vAB4on8QAyY8TFYbAlB2by9Sbn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:71:bd:6f:83:60:35:5e:31:8b:54:17:94:94:b6:90:4d:d5:
e2:53:ef:10:79:36:cc:cd:3f:6c:a1:2f:52:21:12:28:b8:34:
0a:fe:31:af:42:d3:c1:a1:a0:4a:55:66:3e:e0:57:95:cc:d8:
e1:2f:76:6d:dd:d7:db:d1:35:ea:94:ea:c1:47:e2:b8:04:92:
19:06:f8:b9:8b:2d:b1:04:12:c6:3e:0d:2d:c6:24:c3:cf:b7:
15:93:84:ad:33:a0:3d:a5:5c:61:de:a6:52:f7:35:d1:c9:70:
79:85:c7:5e:01:12:21:f1:99:c7:aa:6d:fb:4e:1a:3f:db:5b:
81:0b:32:90:fa:36:2d:fc:e6:3b:7e:d5:9d:57:28:54:15:b3:
f6:c0:23:4f:f8:88:14:cf:9c:74:bb:ce:af:e9:0d:c1:6b:ba:
a5:15:bb:b7:4e:af:dd:c5:6a:5f:2d:1f:11:8f:f3:e5:fa:f5:
ad:1b:c5:3d:09:60:1f:20:b2:7a:33:10:2d:98:66:0d:1a:7b:
ff:67:34:11:30:bf:0a:07:b4:43:f9:b0:26:8c:08:5e:10:dc:
00:6c:21:35:99:4f:2f:b9:57:b2:e9:b1:6d:24:80:7d:52:df:
b4:cd:38:91:ce:64:cf:81:20:eb:09:36:d3:29:20:3f:f5:b4:
cf:d8:68:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:51:47 2025 by rpki-client