Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.mft
File: vlJx8OFYfBRDTySA-RQQGFUHz6E.mft (raw, json)
Hash identifier: HD/6eH9AgkDqv5TiKWg5cAXQDrBqvJQEJCEbWqSrHhw=
Subject key identifier: 94:19:01:EB:04:DA:66:D3:68:35:B0:28:C4:51:93:79:DE:DA:6E:C4
Authority key identifier: BE:52:71:F0:E1:58:7C:14:43:4F:24:80:F9:14:10:18:55:07:CF:A1
Certificate issuer: /CN=be5271f0e1587c14434f2480f91410185507cfa1
Certificate serial: 019778660ADC0BC8DFBE4FE823A4974F8BCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vlJx8OFYfBRDTySA-RQQGFUHz6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.mft
Manifest number: 1525
Signing time: Mon 16 Jun 2025 11:00:42 +0000
Manifest this update: Mon 16 Jun 2025 11:00:42 +0000
Manifest next update: Tue 17 Jun 2025 11:00:42 +0000
Files and hashes: 1: bxyMDkypoYoPE36odgLUanwOaLY.roa (hash: /Tdt2l601ImlNiIyf1pfayzYn4s0xCETamIww0AgaGc=)
2: vlJx8OFYfBRDTySA-RQQGFUHz6E.crl (hash: /6f+H2pDcAD4aZNZNfeoLX0yoapNYW+3/S7iRlBszXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vlJx8OFYfBRDTySA-RQQGFUHz6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:66:0a:dc:0b:c8:df:be:4f:e8:23:a4:97:4f:8b:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5271f0e1587c14434f2480f91410185507cfa1
Validity
Not Before: Jun 16 11:00:42 2025 GMT
Not After : Jun 17 11:00:42 2025 GMT
Subject: CN=941901eb04da66d36835b028c4519379deda6ec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ea:12:48:93:66:43:e6:58:b8:e5:fb:64:a5:
97:c8:26:ab:ae:43:c1:6c:3b:65:50:c5:9d:8f:06:
27:4f:f4:2f:3d:88:b9:83:b4:4a:10:a4:f9:7d:7f:
cb:f4:2a:68:83:73:31:de:fc:76:b6:7f:d0:1d:7d:
bf:c6:a7:32:5d:24:32:b0:04:5a:46:8a:23:22:06:
d8:41:3f:f6:a3:6f:0f:64:04:4b:a4:76:9a:76:74:
ee:f8:c8:de:4d:3b:9b:7f:35:74:e3:a0:ba:81:46:
e6:e7:54:68:94:ca:7c:c7:17:42:94:53:02:67:6b:
7c:6b:c7:cd:84:a0:e4:25:0a:21:5f:43:12:7c:69:
70:4a:70:9c:fd:cc:de:8b:25:f3:06:14:24:97:74:
f3:29:21:8f:e1:dc:12:b2:c6:29:91:0f:40:a7:80:
3f:be:d3:f6:90:e4:63:2d:7e:8b:78:f4:e6:68:4b:
e1:c5:a2:4a:ac:76:31:4a:6f:f7:8a:dd:b9:11:21:
73:b6:4c:2f:e4:77:54:e0:b3:4a:fe:1a:e5:22:47:
dd:8a:84:75:db:6b:79:15:e6:28:ad:51:19:91:46:
e8:d6:ed:ef:f1:d0:7f:4d:0a:07:f1:b3:6c:f5:2e:
35:28:cc:fa:01:bc:06:ef:c4:b9:26:f7:24:6f:9d:
86:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:19:01:EB:04:DA:66:D3:68:35:B0:28:C4:51:93:79:DE:DA:6E:C4
X509v3 Authority Key Identifier:
keyid:BE:52:71:F0:E1:58:7C:14:43:4F:24:80:F9:14:10:18:55:07:CF:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlJx8OFYfBRDTySA-RQQGFUHz6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:ec:79:b0:93:34:f6:b1:9b:42:f5:30:e1:49:a7:f0:66:59:
18:cd:89:84:ac:0d:1a:b9:15:01:37:dc:c6:93:0c:22:82:1c:
3a:da:4b:8e:11:3c:09:c1:af:0a:dc:14:32:13:6e:94:2f:d2:
4e:1b:5c:0e:68:b2:c5:2f:bb:89:da:30:ba:0b:5f:7d:42:5b:
05:86:1b:dd:24:1f:e6:a5:8e:81:99:30:37:a9:1f:31:19:91:
08:98:6b:5f:ef:c6:9c:35:18:fd:4c:96:ef:6f:aa:ce:fb:1e:
6a:5e:e8:26:8c:e0:ba:f6:2a:04:5a:31:c6:6f:09:00:6f:97:
5d:15:36:78:6c:c9:93:b9:0a:11:c3:80:d2:1b:c7:55:5f:9c:
e1:7b:be:2c:bf:d0:6a:3c:c4:de:6f:84:6c:59:30:17:3a:81:
38:0c:02:92:34:91:42:c1:8d:71:ef:19:01:05:e1:8e:39:ad:
09:01:45:ec:c8:4d:0b:be:82:75:d8:d6:a4:b3:c6:98:d9:76:
c0:7e:fa:9a:84:d9:d8:33:93:11:21:e9:90:39:e9:f1:77:2d:
08:a2:27:67:71:77:ae:31:83:54:e6:9f:7a:71:18:70:38:1a:
b1:c6:5d:39:5c:8c:a3:6b:d7:66:e0:bf:44:1d:fa:50:d1:98:
9e:9b:92:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 17:40:27 2025 by rpki-client