Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
File: VytO2SaC1xio_ESIFAAnQGlgeV8.mft (raw, json)
Hash identifier: W8MEfz0OkYSJP6iSThRNCfEgZFliSi8WnjHNt1Lfflk=
Subject key identifier: 96:09:DC:2B:82:15:DE:1A:9E:17:9F:62:80:9E:37:5A:7B:99:CE:6B
Authority key identifier: 57:2B:4E:D9:26:82:D7:18:A8:FC:44:88:14:00:27:40:69:60:79:5F
Certificate issuer: /CN=572b4ed92682d718a8fc4488140027406960795f
Certificate serial: 01976C2B2B3CBC49ADC438DDAE434A78F108
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VytO2SaC1xio_ESIFAAnQGlgeV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
Manifest number: 0BEB
Signing time: Sat 14 Jun 2025 02:00:57 +0000
Manifest this update: Sat 14 Jun 2025 02:00:57 +0000
Manifest next update: Sun 15 Jun 2025 02:00:57 +0000
Files and hashes: 1: 8R_SRNPLxmibFS1usJIWud4x3Z8.roa (hash: b2dIcGiMsdbDXAx7DhwSvU4UC5F6aoWQ/Pjpo9tIfQA=)
2: HSPZejR5lJB8cqlG1i1XbvBd4AY.roa (hash: LYg4VkRRLjikz7I2hzCQk0ST28urIdVmK83g08e6nBA=)
3: VytO2SaC1xio_ESIFAAnQGlgeV8.crl (hash: vWqg5+tswl6niiVEXJGPnQvzKxGB2PI73be/XhB9fW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VytO2SaC1xio_ESIFAAnQGlgeV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:2b:3c:bc:49:ad:c4:38:dd:ae:43:4a:78:f1:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=572b4ed92682d718a8fc4488140027406960795f
Validity
Not Before: Jun 14 02:00:57 2025 GMT
Not After : Jun 15 02:00:57 2025 GMT
Subject: CN=9609dc2b8215de1a9e179f62809e375a7b99ce6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cc:32:1b:e7:ce:f6:45:e9:f6:4e:7d:3d:b0:
34:68:60:c3:5d:8e:2f:22:7f:a5:47:86:79:a8:9d:
87:d6:0a:54:41:ea:38:17:e9:1f:7a:43:e2:07:af:
83:50:93:c5:db:93:c2:d4:d6:84:6c:5e:e6:cf:c7:
6f:cc:21:b2:77:44:d4:f4:e7:8b:0e:d9:36:5f:b9:
df:0d:24:5d:45:17:9d:15:ca:72:10:5c:01:c7:43:
e3:aa:64:da:b4:8c:7b:97:96:08:08:d4:40:84:8b:
99:c4:ad:4e:ca:8a:f1:54:7b:62:a5:cd:35:4e:a4:
d5:21:0f:7f:72:65:ff:7d:d4:e4:29:1b:ce:95:56:
21:1b:b8:06:15:eb:e0:1d:51:89:4f:a4:a7:78:8d:
f9:16:a2:52:92:bc:0a:4a:ef:91:4d:0c:df:60:f3:
c5:08:c5:bf:68:7f:dc:f1:07:07:70:c2:f7:4d:c0:
6f:13:b5:29:c3:1b:61:e6:58:ca:3a:fb:79:05:06:
ec:71:ff:63:39:49:7d:8c:f2:ed:7d:3e:0e:eb:a1:
7a:73:f9:0d:ab:c9:8e:e6:a8:f0:c3:38:61:a2:45:
bc:bc:2e:9a:5f:2e:a1:61:8f:5b:b3:24:e0:85:ab:
22:ec:7b:e5:df:80:84:e3:b0:5c:92:49:82:a8:34:
e2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:09:DC:2B:82:15:DE:1A:9E:17:9F:62:80:9E:37:5A:7B:99:CE:6B
X509v3 Authority Key Identifier:
keyid:57:2B:4E:D9:26:82:D7:18:A8:FC:44:88:14:00:27:40:69:60:79:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VytO2SaC1xio_ESIFAAnQGlgeV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:bb:5a:4f:96:05:0a:43:ab:a5:91:13:13:fd:2d:b7:0f:d5:
82:91:83:83:27:6e:b3:20:11:6a:6d:55:81:dc:47:2b:73:ed:
69:08:03:3d:3b:85:65:8f:5a:56:05:2c:09:9d:25:a2:98:c0:
07:b2:2f:2d:e7:84:ec:5a:65:a1:f4:df:a4:83:bd:a5:8b:ad:
80:cf:b6:8e:8a:a0:eb:a7:f6:80:dc:d7:1a:57:4a:dd:bd:06:
0a:15:32:c5:30:4f:a5:94:27:5e:60:c1:17:bb:e1:fe:fb:d6:
0a:a8:e2:a5:a3:24:ec:8d:07:12:4c:60:4e:0f:0c:6d:56:37:
c0:a9:ad:e3:9e:1d:0c:5a:6e:8c:fb:65:7a:46:d9:74:e7:69:
fa:d8:59:1e:80:2b:7e:15:6d:40:07:38:19:f2:ea:b5:36:e2:
0e:da:68:b1:15:bc:be:c2:c8:b7:68:69:84:0c:1e:6c:b2:85:
4c:f6:f5:ed:51:18:1c:b8:15:c1:0b:1c:9e:dc:53:17:d3:cb:
8c:b1:b5:b7:54:71:77:92:4c:14:22:04:c3:33:c7:1d:32:f3:
99:7d:1f:5e:ed:28:e7:2d:3c:ab:2f:66:93:a1:e8:e2:00:36:
9e:ce:22:f7:1a:d1:a4:fe:53:4a:01:7a:76:d2:c2:81:ff:b8:
f4:28:da:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:57:42 2025 by rpki-client