Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/vIo7xH0TyD99HPcqE34AZvg9Bgg.mft
File: vIo7xH0TyD99HPcqE34AZvg9Bgg.mft (raw, json)
Hash identifier: yh7cXAGelMdIcnBvXekk4x49UEM7CaYT7VWA1IZyOaA=
Subject key identifier: 91:E4:D4:AC:CC:F5:93:1E:1C:0B:6F:A7:0F:74:EA:0D:87:B9:D9:FB
Authority key identifier: BC:8A:3B:C4:7D:13:C8:3F:7D:1C:F7:2A:13:7E:00:66:F8:3D:06:08
Certificate issuer: /CN=bc8a3bc47d13c83f7d1cf72a137e0066f83d0608
Certificate serial: 0197696114DFC04D02042D75D63CAE66EB0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIo7xH0TyD99HPcqE34AZvg9Bgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/vIo7xH0TyD99HPcqE34AZvg9Bgg.mft
Manifest number: 15A4
Signing time: Fri 13 Jun 2025 13:00:59 +0000
Manifest this update: Fri 13 Jun 2025 13:00:59 +0000
Manifest next update: Sat 14 Jun 2025 13:00:59 +0000
Files and hashes: 1: gphbKzpx6tWGj_zsNbx2el-xjBw.roa (hash: EGV6JtWjWAcUe3P+wNKh2PddbSFnyVdKJ948XnlhOEI=)
2: ndKmZul4TmrLysbdAHv2TdPx3YI.roa (hash: MA6ve6ns46O8nAHaLW/ESCUujJDx6mhMBRqi1sXugZw=)
3: vIo7xH0TyD99HPcqE34AZvg9Bgg.crl (hash: lpe3uDaGtb7cHS/GIvmAg0/I+WjFQ+Mmxtue5mxHxxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/vIo7xH0TyD99HPcqE34AZvg9Bgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/vIo7xH0TyD99HPcqE34AZvg9Bgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vIo7xH0TyD99HPcqE34AZvg9Bgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:14:df:c0:4d:02:04:2d:75:d6:3c:ae:66:eb:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc8a3bc47d13c83f7d1cf72a137e0066f83d0608
Validity
Not Before: Jun 13 13:00:59 2025 GMT
Not After : Jun 14 13:00:59 2025 GMT
Subject: CN=91e4d4acccf5931e1c0b6fa70f74ea0d87b9d9fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:eb:3e:2d:e6:f8:8d:f4:77:bc:3b:26:3e:d2:
ac:83:03:ba:e1:71:fe:5f:a8:9e:ee:6e:b7:78:d9:
27:2a:6c:5b:44:d6:38:c0:83:84:bb:89:2b:3b:89:
19:4f:ac:59:f5:07:82:41:a7:8c:d9:6b:47:80:8b:
2d:b6:5c:e3:06:a8:6f:ef:a5:d2:ae:1c:c3:5d:fd:
da:e8:51:4d:56:3d:fa:b0:0e:e7:fc:e3:45:de:ab:
b5:80:85:bf:95:a3:d2:70:35:32:61:45:1d:48:b7:
a3:e2:61:8b:b7:da:f1:03:25:ac:19:7f:f2:5b:20:
3c:44:d8:01:95:c0:e5:87:e8:35:47:b5:42:41:a4:
49:cf:5c:45:02:00:0f:77:93:01:31:81:c5:0e:90:
1d:85:fe:3b:e0:ef:61:5b:c5:29:a1:42:14:30:31:
56:99:6f:ed:83:fe:b7:4d:fa:79:84:c9:76:7c:3c:
27:51:0f:2b:8b:b8:00:35:62:03:12:9c:45:0a:5f:
3f:a7:c8:04:1d:a3:92:f4:e8:4a:32:e1:81:23:f7:
45:08:dd:8d:6d:e1:b5:05:21:bb:a5:8a:0c:ae:f9:
f4:ef:a5:1b:1a:16:03:08:33:b2:83:33:2e:31:8e:
9c:99:65:7e:cc:3f:16:34:f2:86:8c:38:87:40:be:
88:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:E4:D4:AC:CC:F5:93:1E:1C:0B:6F:A7:0F:74:EA:0D:87:B9:D9:FB
X509v3 Authority Key Identifier:
keyid:BC:8A:3B:C4:7D:13:C8:3F:7D:1C:F7:2A:13:7E:00:66:F8:3D:06:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIo7xH0TyD99HPcqE34AZvg9Bgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/vIo7xH0TyD99HPcqE34AZvg9Bgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/vIo7xH0TyD99HPcqE34AZvg9Bgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:2c:08:2f:03:b7:da:6d:31:a8:44:8a:2f:7f:f0:0c:91:73:
9a:8e:e0:5b:a3:a4:e4:70:87:09:a3:88:a8:ac:e5:21:e7:f3:
79:d8:ee:b1:c4:b5:18:e7:1c:8f:96:d6:5c:2b:06:ce:18:a0:
43:bc:e0:a7:72:f5:37:60:81:52:69:2c:10:08:ea:a7:01:1d:
93:e0:3c:02:f7:3a:90:18:7b:27:c1:24:0d:11:8a:5c:58:61:
b8:ed:96:21:03:79:82:72:2a:1f:c8:fe:d2:46:27:be:35:fb:
d6:11:21:a5:10:89:10:26:db:f0:17:a0:cc:13:e5:07:7e:e5:
8e:fa:c7:a4:25:96:a2:29:75:66:a0:24:c9:0d:bf:bf:9d:02:
57:6c:dc:9f:8a:78:db:7a:3e:e5:46:2a:c7:cb:f4:d8:0a:bf:
8a:73:24:9f:6e:01:3c:a7:55:99:d8:92:54:e2:f1:0d:f5:b9:
43:09:98:8c:84:95:96:11:6f:d8:02:de:37:df:8a:8d:3a:8e:
f0:92:52:94:f1:eb:09:93:7d:88:d1:a7:2f:5d:1b:7c:b2:9a:
27:e6:a3:50:19:ba:cf:a5:4d:a6:f7:81:c5:2f:fc:90:17:8f:
1b:80:12:9a:25:50:c2:08:c4:d8:93:70:68:1e:4e:1d:4c:65:
7f:6e:3c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:10:43 2025 by rpki-client