Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/3ad43e-a4db-4465-82b5-ffae20700e93/1/vGNYdq8cfvgkEbQEpw2It5FlCfY.mft
File: vGNYdq8cfvgkEbQEpw2It5FlCfY.mft (raw, json)
Hash identifier: AvOb5C1vu9crLWcOnyD3sXldu9N41kop70o21rbKvWE=
Subject key identifier: 74:D6:2C:9F:FE:31:4E:3C:3D:E2:25:E6:87:66:4E:23:6E:05:3F:18
Authority key identifier: BC:63:58:76:AF:1C:7E:F8:24:11:B4:04:A7:0D:88:B7:91:65:09:F6
Certificate issuer: /CN=bc635876af1c7ef82411b404a70d88b7916509f6
Certificate serial: 0197692A167B7FF9F9130AC7992B2EB432F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGNYdq8cfvgkEbQEpw2It5FlCfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/3ad43e-a4db-4465-82b5-ffae20700e93/1/vGNYdq8cfvgkEbQEpw2It5FlCfY.mft
Manifest number: 04CC
Signing time: Fri 13 Jun 2025 12:00:55 +0000
Manifest this update: Fri 13 Jun 2025 12:00:55 +0000
Manifest next update: Sat 14 Jun 2025 12:00:55 +0000
Files and hashes: 1: LSy4pwlxx6ifbllGQJDj8D7o8bU.roa (hash: VlWSPvQ7mW3Gy9fHD3zUtzLx6zn5FCR5wnd8Mk9PMXI=)
2: vGNYdq8cfvgkEbQEpw2It5FlCfY.crl (hash: JVSBL06i9lTuR+l8OjHR+SD4m5Xz7xuDIXXNbUo91E4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/3ad43e-a4db-4465-82b5-ffae20700e93/1/vGNYdq8cfvgkEbQEpw2It5FlCfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/3ad43e-a4db-4465-82b5-ffae20700e93/1/vGNYdq8cfvgkEbQEpw2It5FlCfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/vGNYdq8cfvgkEbQEpw2It5FlCfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:2a:16:7b:7f:f9:f9:13:0a:c7:99:2b:2e:b4:32:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc635876af1c7ef82411b404a70d88b7916509f6
Validity
Not Before: Jun 13 12:00:55 2025 GMT
Not After : Jun 14 12:00:55 2025 GMT
Subject: CN=74d62c9ffe314e3c3de225e687664e236e053f18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ab:3a:ce:a8:4c:57:46:30:e2:e9:be:18:72:
80:19:30:0b:75:a0:d1:ab:d4:74:c4:f9:5d:9b:b1:
a6:22:9b:03:fa:34:2f:1d:21:52:b3:9a:98:20:a3:
b3:76:43:3a:06:eb:b7:e3:78:b7:c6:15:6e:2a:87:
ca:69:b9:6c:e6:67:8c:67:12:5f:53:7d:7c:fb:8c:
3d:86:65:c4:e5:d0:b7:be:60:4b:1b:84:9c:2a:fb:
88:ed:f5:98:26:11:2e:49:3a:69:69:da:73:9c:04:
95:dd:5e:ec:c4:54:44:d4:a3:57:85:a8:b1:7e:fb:
07:2b:78:68:16:9c:bc:d5:2b:26:33:1d:aa:69:b4:
ae:a6:8e:d5:ad:a0:1c:37:75:f6:aa:b1:3b:80:76:
9e:8f:da:f7:5d:fe:ca:81:41:a9:cb:2e:9a:1a:5c:
02:9f:1e:02:1b:02:c6:fc:63:e9:b4:7e:98:eb:97:
34:63:e2:33:77:c7:dd:ad:dd:ca:4d:73:d3:d1:cc:
5d:5d:d9:90:11:21:fc:ae:7e:54:8d:ee:f4:08:c8:
b4:61:ee:c5:1b:f0:91:ca:05:57:fd:b3:05:08:aa:
e2:f9:6f:ff:8f:91:3b:d6:c3:b4:5c:a1:69:c6:d5:
85:76:6c:d2:9c:7b:1b:fa:a2:4b:07:fc:58:b0:33:
a0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D6:2C:9F:FE:31:4E:3C:3D:E2:25:E6:87:66:4E:23:6E:05:3F:18
X509v3 Authority Key Identifier:
keyid:BC:63:58:76:AF:1C:7E:F8:24:11:B4:04:A7:0D:88:B7:91:65:09:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGNYdq8cfvgkEbQEpw2It5FlCfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/3ad43e-a4db-4465-82b5-ffae20700e93/1/vGNYdq8cfvgkEbQEpw2It5FlCfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/3ad43e-a4db-4465-82b5-ffae20700e93/1/vGNYdq8cfvgkEbQEpw2It5FlCfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:d0:08:87:d8:13:26:ba:03:b6:1e:1c:cd:79:de:bd:c4:2f:
48:e5:8b:94:ab:cb:be:26:19:ad:0b:0f:d8:44:1c:62:74:e7:
6c:4d:b7:73:86:de:84:16:ee:1b:d5:35:59:f2:fd:06:27:22:
0e:48:52:b7:bf:45:2e:42:1a:45:ff:99:4e:9d:1f:48:9c:28:
c5:df:6b:67:51:2b:dd:e7:d3:78:57:f1:e2:53:80:43:c1:8b:
cd:d9:58:62:91:b5:93:69:02:f0:99:79:ab:d8:27:4c:98:84:
54:f3:af:ab:12:a2:7b:8c:15:00:df:0e:f8:5a:4e:bc:6b:62:
b5:ec:1b:1b:5c:c5:1b:c9:5b:8d:1f:10:03:2d:76:e6:f0:66:
4e:38:a9:9e:0b:67:6d:d7:43:fd:18:ab:23:24:c7:c8:dc:5d:
8f:45:a2:a7:00:49:f1:cb:4b:9d:23:e0:43:65:8e:21:91:b6:
dc:6d:85:1d:3d:77:e4:48:dd:e1:5f:6d:da:ad:1d:4c:53:64:
9e:eb:89:f9:b9:2d:65:07:7d:60:16:6b:ed:9f:38:04:52:67:
26:17:c3:e8:cb:ea:65:0e:b2:02:ea:9c:d3:9e:d1:66:a2:95:
44:7e:f5:fb:6a:1b:0e:e1:1f:d3:e7:ed:12:3d:f0:dd:98:5e:
4f:d6:f1:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:54:16 2025 by rpki-client