Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
File: vkOZUom2pcqXLEuHteMUnDLLRDA.mft (raw, json)
Hash identifier: H8JW2QH4wei6yELyNxY8FECZey4EJtKxj8iLekiQwFY=
Subject key identifier: 1B:8B:35:FB:2E:58:52:32:C4:AF:CD:39:E5:17:B6:A7:F6:6C:70:B4
Authority key identifier: BE:43:99:52:89:B6:A5:CA:97:2C:4B:87:B5:E3:14:9C:32:CB:44:30
Certificate issuer: /CN=be43995289b6a5ca972c4b87b5e3149c32cb4430
Certificate serial: 01976C2B2C9FFDEF271E9781613C54752DE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
Manifest number: 1355
Signing time: Sat 14 Jun 2025 02:00:58 +0000
Manifest this update: Sat 14 Jun 2025 02:00:58 +0000
Manifest next update: Sun 15 Jun 2025 02:00:58 +0000
Files and hashes: 1: 8fMw7PIEmcuZ4SQ2ToyoBpDjoJU.roa (hash: lfgDrB7NQSrt5KaQ0P2PrRAn8atRZykuTXvKRd7fgJo=)
2: e0TEu5beAVWeSmXxkW6X6x2gBHA.roa (hash: bCc+ujeebjVb3R0AjVp+lBJExzxOGb5apQpq8yxW908=)
3: vkOZUom2pcqXLEuHteMUnDLLRDA.crl (hash: T190PP2y4x5ziLfFEfGYWmMKuximtPFYodi145G5RXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:2c:9f:fd:ef:27:1e:97:81:61:3c:54:75:2d:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be43995289b6a5ca972c4b87b5e3149c32cb4430
Validity
Not Before: Jun 14 02:00:58 2025 GMT
Not After : Jun 15 02:00:58 2025 GMT
Subject: CN=1b8b35fb2e585232c4afcd39e517b6a7f66c70b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1f:32:68:44:ae:d3:5f:56:18:38:6e:ca:a0:
ef:69:0c:8c:49:16:46:d8:51:86:c9:7a:ec:ef:00:
33:5a:74:2c:50:da:5f:75:65:d7:29:c5:0a:7b:db:
76:16:0b:91:1d:9e:da:b5:9d:31:a7:54:f4:ce:cc:
ef:80:f8:1b:48:70:28:f8:ef:2a:b0:2a:3a:8f:dc:
0d:ba:1c:e2:90:2a:3f:77:05:ff:e3:40:c5:88:73:
07:ae:28:ff:7c:f3:ef:a2:4a:23:dd:32:f2:71:c2:
0f:84:8b:cc:95:e9:56:58:3e:85:01:84:71:92:d1:
ad:04:05:90:2a:ab:70:2a:00:48:f2:91:7f:9d:cd:
1e:b7:f3:eb:40:90:48:b2:e7:f1:aa:01:a5:fa:31:
4a:1f:ef:44:ae:ec:44:0e:35:f0:d0:30:b3:2d:9c:
c4:63:f6:07:cd:8e:cf:f0:28:f1:11:a4:a7:8d:5a:
ba:5f:3f:10:14:89:71:48:5d:57:75:10:9e:ff:6c:
67:b7:d4:1e:93:44:aa:e1:f8:5a:46:76:9a:6e:be:
05:0c:f8:2c:b7:af:cf:38:73:f0:c4:40:a1:c1:58:
d6:9c:07:4d:08:de:cb:00:42:86:62:e6:b8:db:98:
c6:11:11:76:ac:c2:2e:a8:75:7e:81:12:db:42:65:
26:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:8B:35:FB:2E:58:52:32:C4:AF:CD:39:E5:17:B6:A7:F6:6C:70:B4
X509v3 Authority Key Identifier:
keyid:BE:43:99:52:89:B6:A5:CA:97:2C:4B:87:B5:E3:14:9C:32:CB:44:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:66:14:ef:41:b8:e3:f5:33:f6:8e:01:8a:25:49:61:0d:6b:
58:91:17:18:b6:0e:a5:4b:9d:40:ac:52:10:6e:6e:72:ff:35:
35:fa:67:a2:d6:0e:13:25:a3:5f:8f:f8:53:7a:dc:ff:dd:09:
36:dd:90:d4:83:bf:74:5f:23:12:a5:ed:4d:5c:83:23:d0:c5:
83:2b:8c:6f:36:b9:ae:34:74:aa:54:e8:ec:ac:a9:d5:a2:3d:
69:ed:b9:d1:82:a7:76:b1:99:e9:06:15:73:31:65:49:ff:14:
50:76:37:cb:b7:e2:d1:1f:61:ab:ef:37:5e:d3:59:58:d7:fd:
13:f1:92:ac:64:a0:b0:c8:d3:6e:0c:3c:7b:93:5e:9f:9a:c7:
c1:d1:5d:50:8a:a8:56:c5:1f:ac:30:6a:f1:58:39:07:62:33:
00:11:41:41:ec:d7:f0:f8:7a:2f:93:e2:fa:c4:dd:02:5b:94:
4b:15:b6:de:52:04:ec:7f:92:cd:f9:94:02:a5:aa:93:d0:6f:
88:b0:23:a3:fb:a2:00:5d:4c:6f:e9:07:b7:45:08:63:a4:85:
b6:1c:4a:9c:21:b2:6f:7b:eb:ab:82:08:37:3b:45:39:17:11:
4c:95:e7:e4:96:36:3d:86:19:0e:5a:71:41:bc:f7:28:80:c1:
6b:6f:03:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:14:42 2025 by rpki-client