Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft
File: vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft (raw, json)
Hash identifier: 4zikxgEu3jm317486F2y/F8Z+QTemMR9NYl/Ouas5dA=
Subject key identifier: DB:65:B5:30:BE:96:BD:A9:E4:E5:51:A6:17:04:17:DD:3A:CF:56:99
Authority key identifier: BC:20:D4:1A:D3:57:0E:D8:88:C3:B9:A3:95:84:3D:28:C4:BD:E7:0E
Certificate issuer: /CN=bc20d41ad3570ed888c3b9a395843d28c4bde70e
Certificate serial: 01976DAB2E8A37B3D1D466671580D53005D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft
Manifest number: 1594
Signing time: Sat 14 Jun 2025 09:00:24 +0000
Manifest this update: Sat 14 Jun 2025 09:00:24 +0000
Manifest next update: Sun 15 Jun 2025 09:00:24 +0000
Files and hashes: 1: 2_V6lJnSbHp-dXL7YMoo09f6snw.roa (hash: OhjwpaD5BnWeaMwPzsn2/JlXIUwI6tpxdz7vTY63lGM=)
2: vCDUGtNXDtiIw7mjlYQ9KMS95w4.crl (hash: CExpcly00XZqyGuVrRZLQ+t6rfHpqRWcNQhcb8N5DUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:2e:8a:37:b3:d1:d4:66:67:15:80:d5:30:05:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc20d41ad3570ed888c3b9a395843d28c4bde70e
Validity
Not Before: Jun 14 09:00:24 2025 GMT
Not After : Jun 15 09:00:24 2025 GMT
Subject: CN=db65b530be96bda9e4e551a6170417dd3acf5699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e6:b5:64:dc:5e:0b:5c:5e:fb:f9:83:04:12:
ab:f9:23:e4:c8:1a:a0:66:a6:68:8d:b4:3f:19:37:
36:4e:7d:93:7c:90:30:d2:28:1b:5e:85:2e:ae:59:
98:f8:e3:20:38:07:18:24:06:1b:b4:53:0c:0d:3c:
47:7d:d4:8e:d4:73:16:35:6e:b0:be:f7:d7:62:ee:
7b:a1:41:76:8e:6e:d3:cd:e1:23:d2:08:0b:48:33:
d8:ed:91:be:91:df:0c:e4:12:47:3d:0a:e0:c5:84:
ce:fd:40:75:d5:98:fb:91:57:c9:f3:76:48:48:16:
96:a5:0f:7f:b8:e2:82:b2:90:3e:77:01:ae:31:be:
ab:88:0f:ed:24:7e:d8:73:8f:5a:cd:8e:f2:28:1c:
ac:10:dd:d5:53:32:b6:27:58:56:8f:2d:e9:57:4a:
17:90:e3:2b:78:35:74:a1:ab:f7:65:1b:c5:1b:5c:
b7:b4:3f:c2:f9:c3:64:bd:56:f5:4a:ae:f1:2c:46:
67:18:8b:88:c3:0c:b4:3c:cd:7a:2d:9d:8a:bf:5f:
3d:50:6f:2c:1c:6f:86:66:2e:cb:78:94:8f:0c:94:
0d:5d:ba:a2:b1:74:d0:a7:53:2f:e3:3f:c3:a4:cb:
57:ba:e8:33:14:24:5e:9b:b1:e4:fe:29:ca:e2:36:
c9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:65:B5:30:BE:96:BD:A9:E4:E5:51:A6:17:04:17:DD:3A:CF:56:99
X509v3 Authority Key Identifier:
keyid:BC:20:D4:1A:D3:57:0E:D8:88:C3:B9:A3:95:84:3D:28:C4:BD:E7:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:9a:f7:cf:fa:d2:cc:9d:38:7c:bb:ef:ef:ff:07:b1:85:35:
ce:71:47:37:dc:34:35:fe:cb:b5:14:6d:30:53:d2:27:3f:9b:
d8:e8:a9:d5:ae:02:1b:dc:ff:67:c9:f0:2f:4e:ae:9a:6d:e1:
6a:b2:18:6a:6b:44:35:d8:77:a1:90:1b:d1:52:2e:03:f2:02:
52:7f:2d:d0:41:56:88:fd:09:ef:1e:41:63:a7:b5:ec:99:12:
8e:74:f0:94:67:9d:ff:bf:93:eb:c7:02:43:d8:85:1e:a3:7d:
93:86:b3:1f:90:5f:25:76:57:8c:10:86:e4:55:20:97:4a:a1:
cc:55:c6:55:b1:8b:e8:20:c4:8e:6c:3e:a8:fc:f7:29:53:64:
97:38:37:c6:0d:8d:a7:51:50:2f:0e:87:bc:12:ba:63:17:a2:
16:2b:cd:c3:96:99:e4:b6:7a:a9:9c:ab:7a:6f:2b:35:4c:b9:
bf:9b:ab:fe:a1:98:ec:d9:d0:9c:da:12:f9:5b:1a:9c:ad:be:
45:97:87:15:ce:fc:61:bd:86:ba:e9:15:78:2b:b1:c7:d7:4e:
56:d5:dc:9c:83:34:e8:c2:4d:50:dc:de:e1:b8:f4:cb:72:99:
51:7a:f6:52:43:aa:b8:df:ae:a2:84:44:2f:9b:c3:29:74:82:
47:f9:4b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:14:08 2025 by rpki-client