Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft
File: vx1ZdLTlmcpy3MTawGbXcUIC78k.mft (raw, json)
Hash identifier: dceCGnIvzKIFwaDHoXajvGmwIKsQU0iIjGRsfHGpiKw=
Subject key identifier: 09:7E:D2:E2:37:E6:C8:FA:F8:12:E0:B7:0E:B1:28:96:2A:6A:9B:24
Authority key identifier: BF:1D:59:74:B4:E5:99:CA:72:DC:C4:DA:C0:66:D7:71:42:02:EF:C9
Certificate issuer: /CN=bf1d5974b4e599ca72dcc4dac066d7714202efc9
Certificate serial: 01976CCFDEC45AC47E4C086606C9B203865D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vx1ZdLTlmcpy3MTawGbXcUIC78k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 05:00:51 +0000
Manifest this update: Sat 14 Jun 2025 05:00:51 +0000
Manifest next update: Sun 15 Jun 2025 05:00:51 +0000
Files and hashes: 1: oj5pO6PbAIedrwIhX-SgXkuxPgQ.roa (hash: chkdnhybp0jJ1hG80xmgFXkOcgLkze7nqAVVBuJ+bhU=)
2: vx1ZdLTlmcpy3MTawGbXcUIC78k.crl (hash: wluQTkzJPYbhg/FpwX3tzoPoElnNzTGU/MjTptq+K0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft
rsync://rpki.ripe.net/repository/DEFAULT/vx1ZdLTlmcpy3MTawGbXcUIC78k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:de:c4:5a:c4:7e:4c:08:66:06:c9:b2:03:86:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1d5974b4e599ca72dcc4dac066d7714202efc9
Validity
Not Before: Jun 14 05:00:51 2025 GMT
Not After : Jun 15 05:00:51 2025 GMT
Subject: CN=097ed2e237e6c8faf812e0b70eb128962a6a9b24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:05:dc:c7:05:c1:fe:cd:58:ad:25:49:d6:b2:
ca:35:a3:5d:45:33:5a:f4:b3:d4:37:09:40:8e:a0:
a8:2d:c5:01:f5:5c:73:b5:1c:b4:97:a4:a4:a0:d6:
49:d1:10:4d:9b:c1:00:4c:83:25:f1:63:58:05:bb:
19:24:8d:38:46:1c:4a:7e:44:57:4a:40:65:c1:28:
e3:f9:66:84:c6:3b:e8:d9:4c:44:4f:95:05:3b:36:
c0:54:dc:ae:50:9b:aa:67:9b:c7:b3:a4:c5:c9:55:
15:08:41:4e:a3:25:db:fa:fd:aa:ef:33:39:e8:2b:
40:73:37:c1:f8:bb:5f:ac:95:9e:6b:33:1c:a9:13:
08:31:a9:6e:4c:df:fe:b3:f6:aa:30:35:95:1a:a0:
5d:89:46:30:ab:75:d8:35:57:7f:1e:1d:24:40:d0:
be:67:9e:7c:b2:86:11:92:a9:2c:7d:ec:1d:2d:17:
dd:f0:5d:9f:a4:8d:4a:42:d7:8d:67:26:38:56:89:
b0:84:94:4a:77:76:86:ca:c6:4a:1d:37:de:44:53:
13:63:cb:50:e0:30:82:7d:1e:a4:8c:d9:97:c7:23:
cd:9d:23:21:a3:12:ed:9c:ef:a5:ba:37:37:4a:bd:
b4:53:c1:26:56:17:3b:99:00:29:64:01:b3:4c:00:
f8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:7E:D2:E2:37:E6:C8:FA:F8:12:E0:B7:0E:B1:28:96:2A:6A:9B:24
X509v3 Authority Key Identifier:
keyid:BF:1D:59:74:B4:E5:99:CA:72:DC:C4:DA:C0:66:D7:71:42:02:EF:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vx1ZdLTlmcpy3MTawGbXcUIC78k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:3a:e3:bd:0e:92:65:54:e0:bd:3b:04:8e:f0:33:c5:16:60:
44:71:26:c6:2f:29:ca:09:6a:87:79:8e:db:ae:cc:c1:f7:ad:
f9:6f:f8:72:34:8b:60:2f:84:93:71:b0:ee:82:cc:36:08:34:
d3:3e:f6:94:2d:a1:ed:2f:75:89:6a:bc:96:17:26:f7:87:b7:
91:a1:0e:6c:f3:3d:1c:1d:4a:f3:8a:c2:69:84:1c:1a:62:92:
a6:70:07:7e:6e:83:de:56:c1:89:aa:a1:21:ca:23:be:aa:41:
6b:c8:d3:d2:2c:f3:d2:0a:13:10:b3:28:27:0a:5e:3a:16:79:
ab:08:ed:e7:ad:88:4c:bb:a5:fe:ad:70:15:44:a8:14:5d:24:
a2:d7:f1:d3:7a:41:95:92:ae:a7:0c:2f:d9:72:c1:3b:ac:7a:
aa:0f:c4:82:1c:d2:c4:3b:9c:7e:e7:09:54:0c:46:92:68:c9:
eb:f3:06:ba:88:ca:1d:44:82:62:2a:2f:58:e6:02:93:e2:0d:
cc:1a:e5:f8:aa:8e:6f:ae:74:d8:6d:ea:38:b9:15:4a:10:b7:
87:e1:79:14:37:81:d9:1b:da:1b:cc:b4:5a:80:ce:5a:56:da:
c2:e8:9b:1d:d6:2c:80:ba:f5:ab:dd:bf:ae:8e:24:1c:15:e0:
98:5f:61:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:06:46 2025 by rpki-client