Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft
File: vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft (raw, json)
Hash identifier: 5S6JGXlZ2HAmi3rkMjrHGSp4YSn4/iCHMdp5iG4P4hA=
Subject key identifier: E9:53:3A:8E:32:FD:5A:E4:B3:50:13:4D:77:69:85:7E:76:E9:EC:A2
Authority key identifier: BD:73:74:7F:78:BD:32:8D:0A:E1:C8:91:71:B3:81:AA:19:01:1A:CE
Certificate issuer: /CN=bd73747f78bd328d0ae1c89171b381aa19011ace
Certificate serial: 0197703EF21507E5E2BD125A324E38B18196
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft
Manifest number: 25
Signing time: Sat 14 Jun 2025 21:01:02 +0000
Manifest this update: Sat 14 Jun 2025 21:01:02 +0000
Manifest next update: Sun 15 Jun 2025 21:01:02 +0000
Files and hashes: 1: D98Ck1_qKOXalzx0pMS_FarSGM8.roa (hash: u49BF5lQyjsLl1bn3ULD3SUQ9N/pcixaCTatnIvy4v0=)
2: tCV34_eFEm-bBTr3p-Dum9J6ZzA.roa (hash: lJs/8jun541iQ5FmJ+SShA8Wi27D6ss5N6YmTLmASl4=)
3: vXN0f3i9Mo0K4ciRcbOBqhkBGs4.crl (hash: RttG6heJqI34VDrdnsFtZOgR7CuCKu7WChxHiMIbMpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:3e:f2:15:07:e5:e2:bd:12:5a:32:4e:38:b1:81:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd73747f78bd328d0ae1c89171b381aa19011ace
Validity
Not Before: Jun 14 21:01:02 2025 GMT
Not After : Jun 15 21:01:02 2025 GMT
Subject: CN=e9533a8e32fd5ae4b350134d7769857e76e9eca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f3:c3:a8:cb:45:f6:45:39:cf:dc:16:b8:d3:
bd:a1:d8:db:19:5e:7d:58:c9:b8:f4:fe:b5:0e:7b:
1e:30:45:7a:f8:b8:f2:29:a8:ea:31:e5:c0:05:25:
98:36:16:7a:9b:c8:53:c7:a3:2c:66:15:35:e2:d2:
48:34:91:2c:ff:ad:6a:e1:ba:e3:ea:12:16:13:27:
f2:8a:18:82:96:62:da:3b:29:81:08:fc:9a:06:6a:
18:01:54:72:c9:3b:ff:6e:65:bf:48:41:bd:1d:df:
b4:4c:fa:f0:69:a9:c7:f3:0a:05:84:46:74:77:ed:
87:14:4e:e2:1f:c4:1d:c3:c1:c1:63:fd:2a:68:34:
93:a0:91:d4:20:e1:be:03:44:c7:ab:16:bb:2f:ab:
69:43:d1:6c:fa:97:24:14:e8:d6:26:ab:56:b8:d1:
56:c1:7d:fe:5b:60:ef:a6:44:6c:ec:ab:bd:e7:6e:
1e:60:69:91:3d:9c:15:37:a4:1d:46:7f:01:43:86:
d3:4c:22:64:40:c2:ad:a9:26:b6:f5:2d:ad:13:14:
22:8d:bf:a9:10:0f:3c:f6:f3:58:d0:b5:0d:4e:2c:
1e:a4:0c:1b:60:e3:fe:f5:38:84:ad:88:bc:31:e1:
71:8f:00:db:13:c6:72:95:68:83:17:d0:98:ad:0a:
d5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:53:3A:8E:32:FD:5A:E4:B3:50:13:4D:77:69:85:7E:76:E9:EC:A2
X509v3 Authority Key Identifier:
keyid:BD:73:74:7F:78:BD:32:8D:0A:E1:C8:91:71:B3:81:AA:19:01:1A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:31:6a:ef:a3:b3:f6:a6:01:88:c3:48:c2:22:9f:b9:f7:30:
ff:da:73:d9:6b:05:23:d4:a6:f4:89:e2:63:8d:85:6c:3f:87:
e4:eb:5e:04:de:07:45:c3:76:e9:42:7a:7f:f5:8b:ae:d7:9d:
7e:c9:60:ed:c9:40:ec:a6:11:d3:c5:53:56:5b:0f:8f:c2:62:
db:07:cb:b1:42:30:f1:8a:9b:c2:57:c7:04:47:38:60:57:fe:
aa:76:67:0e:55:d5:a9:14:18:ca:e6:45:33:11:82:e5:1c:fd:
5c:89:ee:26:77:9e:a2:ec:dd:bd:9d:ac:fb:0a:58:33:a6:bb:
9a:ef:b0:64:22:5a:3f:a2:d8:08:48:c4:19:26:c5:1f:bf:12:
6c:97:63:19:3a:5a:4f:48:23:06:0b:78:8d:de:37:3c:82:2a:
f6:f0:54:11:70:2a:28:3e:8d:96:90:b6:8c:e3:de:2d:9f:71:
a2:ad:fe:46:63:a0:23:a1:57:30:60:92:79:7f:94:49:92:62:
0b:04:cc:14:e2:f3:a8:a7:3b:52:14:ea:db:05:c1:cb:5a:bc:
a3:b8:b4:68:43:08:bb:43:23:f3:19:63:38:2e:24:a1:78:21:
9c:c5:12:8b:6f:ab:8f:65:13:60:34:a4:8f:0c:c4:f1:13:62:
38:20:df:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 01:17:17 2025 by rpki-client