Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.mft
File: vGY2Z5cyOLGE2e79NrvzgQukttk.mft (raw, json)
Hash identifier: yeamP8FX2Ge82ygobIPLRxFj+9bdeuuhhcZ2fdC8nIQ=
Subject key identifier: C8:C0:57:7F:FA:DA:B5:42:DF:FA:96:5D:FA:A1:3E:6D:BE:3A:56:61
Authority key identifier: BC:66:36:67:97:32:38:B1:84:D9:EE:FD:36:BB:F3:81:0B:A4:B6:D9
Certificate issuer: /CN=bc663667973238b184d9eefd36bbf3810ba4b6d9
Certificate serial: 019771F6192FB65A8ED12A1B2DAF66185B75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGY2Z5cyOLGE2e79NrvzgQukttk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.mft
Manifest number: 1099
Signing time: Sun 15 Jun 2025 05:00:43 +0000
Manifest this update: Sun 15 Jun 2025 05:00:43 +0000
Manifest next update: Mon 16 Jun 2025 05:00:43 +0000
Files and hashes: 1: ig3YUnf06jRQJy2W3dYiO6rsejs.roa (hash: iYGiR2ToZxGUekv5mS+Li0t2IVpNRi9TVFKQBK+2Rl8=)
2: vGY2Z5cyOLGE2e79NrvzgQukttk.crl (hash: rs22tUoD6A+5o/BdeRaZBvn+41huaOPrt7xa7auz3Tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vGY2Z5cyOLGE2e79NrvzgQukttk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:f6:19:2f:b6:5a:8e:d1:2a:1b:2d:af:66:18:5b:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc663667973238b184d9eefd36bbf3810ba4b6d9
Validity
Not Before: Jun 15 05:00:43 2025 GMT
Not After : Jun 16 05:00:43 2025 GMT
Subject: CN=c8c0577ffadab542dffa965dfaa13e6dbe3a5661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a1:11:c4:53:50:4e:f5:62:c8:40:4a:ed:11:
53:f7:94:49:2a:cd:dd:3f:0c:65:d0:77:db:89:17:
6e:67:20:6c:15:99:c5:91:5d:a7:3d:c2:7e:fb:7b:
df:a1:3f:02:18:6d:ef:4b:66:86:00:a2:e8:a0:82:
6e:68:da:de:6a:d9:c3:ef:ed:26:22:57:ab:21:f1:
b0:e7:88:e4:f4:02:cf:5b:40:be:88:a2:6d:c1:0e:
62:ec:b7:53:58:a9:8d:70:a6:da:6a:e1:97:f6:e4:
6e:65:85:21:25:8e:ab:96:dc:7c:64:82:0e:28:55:
d2:88:e7:f3:9f:ea:50:09:ed:73:5b:66:f0:27:6a:
e3:d5:24:cf:e7:d1:7c:d3:a2:a9:26:99:97:48:d9:
9d:91:fa:f0:b5:14:77:a7:95:a2:92:83:3d:10:66:
48:df:f3:2a:5d:66:9e:08:4a:dc:7d:f3:f3:3d:ef:
80:7c:b0:80:f8:ea:42:5b:90:54:f8:08:ef:40:2c:
86:fa:8a:77:1b:a6:94:74:b1:26:3b:35:c1:d7:c1:
bc:43:aa:ed:d4:a2:e3:52:48:a7:58:75:db:e4:c2:
f1:db:e3:77:99:ad:c6:f4:8a:7f:a4:8e:44:e6:b0:
e8:7e:0a:d0:37:6b:9b:08:d6:a7:99:40:9e:7d:29:
31:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:C0:57:7F:FA:DA:B5:42:DF:FA:96:5D:FA:A1:3E:6D:BE:3A:56:61
X509v3 Authority Key Identifier:
keyid:BC:66:36:67:97:32:38:B1:84:D9:EE:FD:36:BB:F3:81:0B:A4:B6:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGY2Z5cyOLGE2e79NrvzgQukttk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:3b:9b:94:29:66:cc:a8:e6:ff:87:f3:53:5f:41:bd:a0:7b:
74:0e:54:9e:83:f3:0a:71:6e:79:01:b4:8f:ee:c9:88:73:2d:
4a:9b:90:7e:c3:b9:a0:a7:19:be:e7:fd:4e:43:5f:c6:37:10:
2a:cb:7e:6f:34:82:15:45:74:64:bb:88:91:af:c6:71:c2:ba:
bd:9c:7e:4f:0c:cf:0f:47:fb:80:11:c2:8f:d1:88:ac:57:98:
32:38:fe:07:5a:b7:05:2f:73:4d:db:66:ab:e1:d1:03:bc:11:
be:e6:09:b5:11:c3:30:7b:78:14:6c:8f:69:cb:d1:8e:bd:fe:
fd:bd:82:e1:6d:62:40:31:28:8e:6b:1e:0a:02:1f:2d:6b:a3:
a4:0c:a0:22:3b:23:ba:c2:fc:c6:30:96:f9:76:77:8c:52:1f:
6c:fb:e8:6d:99:e2:35:a2:c0:40:42:de:db:a7:bd:f1:99:29:
53:88:00:49:16:22:79:b7:2f:70:87:eb:eb:77:e5:1b:be:01:
82:11:e5:0d:e5:14:d3:4d:cb:bf:12:be:33:1d:7d:9f:d3:cc:
96:83:65:3c:da:9b:0e:37:03:0f:7f:fb:13:49:07:c4:52:58:
a6:75:2f:63:40:da:48:d7:92:df:ff:de:ff:26:69:01:e3:72:
d8:50:e9:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:32:29 2025 by rpki-client