Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
File: vDEkfzWabUktyZQ64PAPyL4hbHg.mft (raw, json)
Hash identifier: 7iKqwDVubA3rDlo2tyZE8jrfvYRugtf5f9nVBWWYWBM=
Subject key identifier: 9B:86:38:66:47:EC:C8:2C:24:05:C3:25:D6:17:0F:1D:C0:D1:2C:C6
Authority key identifier: BC:31:24:7F:35:9A:6D:49:2D:C9:94:3A:E0:F0:0F:C8:BE:21:6C:78
Certificate issuer: /CN=bc31247f359a6d492dc9943ae0f00fc8be216c78
Certificate serial: 01976BBDA673285E77395C2FFD1FC298145E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 00:01:20 +0000
Manifest this update: Sat 14 Jun 2025 00:01:20 +0000
Manifest next update: Sun 15 Jun 2025 00:01:20 +0000
Files and hashes: 1: OTqu6ofFTyzK0xc5jrx6KgXbQ7M.roa (hash: McteydyUGW+LpPCexm+O1QefOp1oYc2XsREa8UjCVIA=)
2: dKgonROO4xpKslqbxO1osnY3m3M.roa (hash: Hl3GLighJnfdP7Jed7jsC0ysJmCVrDY4pvlKDvOdEYc=)
3: vDEkfzWabUktyZQ64PAPyL4hbHg.crl (hash: UZ+brXtBXIrz9uLF87E0hsIPyF9LOsCWQTI0kSIG6ZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:a6:73:28:5e:77:39:5c:2f:fd:1f:c2:98:14:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc31247f359a6d492dc9943ae0f00fc8be216c78
Validity
Not Before: Jun 14 00:01:20 2025 GMT
Not After : Jun 15 00:01:20 2025 GMT
Subject: CN=9b86386647ecc82c2405c325d6170f1dc0d12cc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c3:27:50:a6:cf:65:02:73:2e:fa:0f:dd:3c:
c6:9b:8e:84:fe:62:0c:15:ee:e1:f4:cb:96:e7:8d:
7e:0e:6d:74:3c:1c:0d:85:ff:fe:3f:6c:a3:ad:c2:
2a:d9:24:70:82:09:4c:c0:da:18:81:ee:8e:a5:ef:
1a:57:7f:13:c0:f3:29:ec:21:9e:08:f4:e5:9e:41:
81:5a:06:ee:1d:82:38:0e:ef:a0:78:ac:73:d7:73:
70:b1:f6:ab:e6:ca:fc:d4:cc:c4:85:7e:b1:02:9c:
b6:82:af:36:4e:9b:40:2a:0f:32:43:41:c7:af:32:
92:56:ab:4b:5c:fa:97:b9:6d:c0:09:e1:60:40:d8:
d6:67:9f:4d:37:fe:f9:22:99:bb:42:fe:68:0f:83:
bf:f2:b6:e2:87:bb:19:05:eb:c1:92:71:f7:0a:4f:
df:55:77:4e:4f:be:58:2c:c3:32:b5:e8:ee:80:6a:
23:d8:ed:e9:99:46:b2:b8:4d:50:6d:6b:b1:4e:be:
f3:16:c3:90:fb:70:22:c4:00:db:d5:f5:87:ea:e4:
3c:f0:00:fd:59:86:91:56:ec:1a:03:70:ba:f1:a1:
76:5d:6b:25:4a:e5:76:ef:60:9a:80:97:aa:93:38:
b4:d3:10:3a:2f:1d:d5:1b:7e:a1:6f:0d:aa:eb:9e:
e1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:86:38:66:47:EC:C8:2C:24:05:C3:25:D6:17:0F:1D:C0:D1:2C:C6
X509v3 Authority Key Identifier:
keyid:BC:31:24:7F:35:9A:6D:49:2D:C9:94:3A:E0:F0:0F:C8:BE:21:6C:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:f7:8f:4c:17:d7:12:6a:cf:23:1f:97:90:a3:d8:eb:42:bf:
28:3f:5b:bf:42:44:a6:2c:d9:cc:7d:9f:05:bf:c5:9b:89:d6:
dd:35:40:fa:7b:c1:84:21:f2:52:ef:2f:30:50:78:e6:94:21:
ce:47:5f:d1:64:ec:bc:0f:ba:76:c4:5a:13:1b:d6:e1:02:13:
34:21:8a:26:28:f0:3c:b8:8a:9e:57:ef:ba:a0:98:84:b3:1f:
81:c3:d4:89:2b:1b:e9:cc:2a:2f:ff:39:fc:b8:d7:d6:ea:41:
8d:da:59:a9:02:a4:5c:ae:59:4a:48:36:c1:af:bb:26:2d:bb:
ea:1c:48:61:a3:11:a1:fe:97:a6:3b:df:19:a7:bb:28:40:f9:
a9:3f:aa:a3:6c:b6:63:aa:77:04:d6:2a:e0:3d:2e:b8:9b:13:
89:df:7d:42:fd:a1:e7:08:80:26:84:d3:d7:78:d8:f1:be:11:
c0:2d:f7:e0:11:02:96:d2:27:b4:d1:12:d5:ae:c4:c0:4c:7f:
73:6b:6f:8a:4f:cd:28:f0:ed:d6:2b:52:b4:0c:63:80:96:b2:
03:c3:1f:d4:a5:14:08:22:cc:13:e2:ff:aa:8e:05:7c:b7:a9:
a1:46:18:17:5c:0a:0a:a0:6d:d0:03:70:46:87:61:2c:66:ae:
fc:cb:28:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:19:26 2025 by rpki-client