Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.mft
File: vEZLqdJjhfVN9iVKwkiSbTcERbA.mft (raw, json)
Hash identifier: 9l9KXUXLn3Zy+WMtdy7lfLcxtn3eZvwMjrtkCYBgaDc=
Subject key identifier: 86:8B:48:82:E5:63:C5:98:D3:B8:15:6A:62:D4:12:4B:D8:24:B3:55
Authority key identifier: BC:46:4B:A9:D2:63:85:F5:4D:F6:25:4A:C2:48:92:6D:37:04:45:B0
Certificate issuer: /CN=bc464ba9d26385f54df6254ac248926d370445b0
Certificate serial: 019779E6CEEEF821F3B2DB22A75843D731BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEZLqdJjhfVN9iVKwkiSbTcERbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.mft
Manifest number: 159E
Signing time: Mon 16 Jun 2025 18:00:58 +0000
Manifest this update: Mon 16 Jun 2025 18:00:58 +0000
Manifest next update: Tue 17 Jun 2025 18:00:58 +0000
Files and hashes: 1: gAF5yk6vmaOq2Uung0D_8Gub1gc.roa (hash: eVAKmeO8heHGdx9Kcy2Kx3p7IXGpACADu9i5ILdct+c=)
2: vEZLqdJjhfVN9iVKwkiSbTcERbA.crl (hash: zz6AjlW36BjrDdQcCjdNlrOmHrIf6iWobjnPhT6Nxxs=)
3: zyyxpnYwsTYjNu4Wy5twrx2x4fk.roa (hash: NQRYx+K4EclccAZE0WPjuwlvX5dADgQnuUhPYSSnRgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vEZLqdJjhfVN9iVKwkiSbTcERbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:e6:ce:ee:f8:21:f3:b2:db:22:a7:58:43:d7:31:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc464ba9d26385f54df6254ac248926d370445b0
Validity
Not Before: Jun 16 18:00:58 2025 GMT
Not After : Jun 17 18:00:58 2025 GMT
Subject: CN=868b4882e563c598d3b8156a62d4124bd824b355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9a:a1:78:0b:f1:db:6a:63:28:62:77:86:52:
d3:65:4e:48:6e:2a:cb:46:40:0f:c5:0d:88:5e:eb:
fd:75:fb:44:7f:ae:0e:c7:a5:49:58:67:76:83:f3:
f1:11:f6:6c:10:63:3a:97:2b:d2:f2:5b:80:67:20:
41:05:e9:a6:08:df:ec:ab:3c:cb:db:4c:0e:08:e4:
1f:13:e0:44:69:2c:af:f1:07:bd:83:3b:22:c1:33:
ad:3a:41:ea:0d:c4:cf:21:87:43:43:5b:83:ad:b1:
b5:60:ac:1b:07:1d:29:a2:1d:8c:2f:e1:48:ce:96:
25:a0:0e:1d:0c:cf:be:11:08:b0:8d:04:ee:d5:32:
7a:84:02:da:6e:9d:78:49:20:b0:c9:45:a6:6d:ce:
a3:4c:a6:9c:d4:74:ba:8b:03:6a:b6:62:e4:7e:58:
00:8a:1b:14:3e:41:d5:d2:42:a1:1e:ea:13:3d:82:
01:8f:32:42:d9:ac:4a:a7:b7:08:a6:08:fd:f9:59:
5c:56:32:80:eb:d5:9f:ca:89:b9:84:0c:9f:1b:12:
72:12:79:65:3f:e2:ed:17:57:e5:7b:0d:6c:8c:4d:
3a:fc:62:95:87:9f:25:6c:b0:24:0e:21:df:71:aa:
4b:cc:3a:6b:ec:b8:e9:13:97:1a:1b:ce:1d:61:2b:
3b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:8B:48:82:E5:63:C5:98:D3:B8:15:6A:62:D4:12:4B:D8:24:B3:55
X509v3 Authority Key Identifier:
keyid:BC:46:4B:A9:D2:63:85:F5:4D:F6:25:4A:C2:48:92:6D:37:04:45:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEZLqdJjhfVN9iVKwkiSbTcERbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:0f:a5:04:d7:81:8e:46:62:47:0f:e0:97:1b:06:e6:ea:28:
91:88:06:7e:7e:11:e0:a9:dc:38:25:04:e6:fe:da:5e:c2:5b:
37:d8:8a:77:14:2c:9d:60:2b:ac:46:cf:63:e3:54:11:a3:9e:
74:c1:e0:01:fd:5d:1e:f0:bc:a0:5a:3d:5c:98:80:2b:4c:36:
c5:b7:97:ff:36:be:67:43:9f:f5:eb:44:e9:1e:a6:f4:a8:17:
8c:92:81:a9:3d:61:86:68:90:9d:ed:5e:8f:0c:71:f4:18:c6:
cd:f7:ec:6d:8b:3d:bf:8c:9a:83:a4:e2:72:85:f3:62:b9:0c:
f1:ce:9f:01:64:1c:20:67:b1:59:78:a4:b7:22:15:0c:06:c0:
02:91:a8:c1:a6:f0:d6:64:b8:d4:2f:7a:2c:7e:0f:c7:b5:d3:
56:59:07:e9:51:ca:89:3c:e1:38:e5:34:6f:6f:ea:ca:d7:bf:
e8:74:d8:72:a3:36:d9:0a:1e:49:86:9f:39:19:0e:ca:bd:3d:
fa:82:ba:50:97:05:ea:14:52:fe:cf:d5:bb:ae:03:e3:b6:39:
34:f2:25:b7:9b:23:b7:22:2b:41:5e:d8:9d:6b:f0:4e:32:31:
63:71:63:31:51:78:32:8f:8b:8d:03:95:8b:7f:2b:b1:d4:d7:
93:4f:5e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:44:09 2025 by rpki-client