Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
File: vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft (raw, json)
Hash identifier: JTHuwyGR7yirfrG60zvuP4XNlS5ioCW+XlvJS01Jkgk=
Subject key identifier: 0F:5B:98:72:CB:1C:35:87:74:44:B7:10:C9:63:71:04:1B:8E:F6:00
Authority key identifier: BC:44:3F:7A:AE:47:E0:AB:38:BC:F8:D5:36:CC:A6:03:50:D1:72:70
Certificate issuer: /CN=bc443f7aae47e0ab38bcf8d536cca60350d17270
Certificate serial: 01976D7435D34C46CD16CDBD50EC73338B5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
Manifest number: 099A
Signing time: Sat 14 Jun 2025 08:00:21 +0000
Manifest this update: Sat 14 Jun 2025 08:00:21 +0000
Manifest next update: Sun 15 Jun 2025 08:00:21 +0000
Files and hashes: 1: 4zZX5zJWUsfZ5zmG6bPbMr0lvbs.roa (hash: Qk/9tkVuHYR7bI8BB1K5v6WoVgCSt0kT7wqGusdLxvQ=)
2: Cd4rO-Hjh_1s-LE7zVhil5Tbff8.roa (hash: 1HerR65Yb0tTxX+akt3GL/BhgF51Uoa+ZBuv4yRBK4o=)
3: vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl (hash: 96v60N/WoFZmV5q0Q/seBg5YCMGktocStmAepIZvrIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:35:d3:4c:46:cd:16:cd:bd:50:ec:73:33:8b:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc443f7aae47e0ab38bcf8d536cca60350d17270
Validity
Not Before: Jun 14 08:00:21 2025 GMT
Not After : Jun 15 08:00:21 2025 GMT
Subject: CN=0f5b9872cb1c35877444b710c96371041b8ef600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fe:9c:5e:e4:1c:71:b1:17:cf:96:b2:cc:0e:
33:1d:c6:f7:da:7a:0c:81:ae:a6:f1:4f:ba:06:e2:
75:d4:65:c5:31:65:f4:fc:a4:58:f8:4e:03:18:5d:
c2:20:08:de:71:95:71:66:78:42:ec:ab:6f:a0:53:
bb:e9:a6:45:60:fe:23:43:49:b6:90:f9:27:76:2a:
51:e5:db:f2:d1:d0:20:3a:98:27:b4:46:71:22:8e:
f1:40:81:d9:91:48:a2:db:c4:5f:61:85:1f:f7:c9:
b6:f8:6d:0e:55:87:fb:96:46:65:42:41:a0:1b:24:
43:fc:24:97:ec:b3:77:50:58:44:99:c9:33:ee:fa:
47:18:e8:9e:f2:64:83:c1:25:28:29:f5:fb:3b:07:
03:69:b6:f3:4b:d0:12:35:cc:db:9b:e8:12:07:4d:
08:82:63:19:8f:0d:17:14:21:ca:ad:8c:51:49:5b:
c2:6f:c9:25:7d:d3:d0:a7:ed:55:b5:5d:64:d6:db:
b5:8e:2f:f1:8f:ad:0a:70:c5:d4:17:e4:c4:7f:89:
31:9d:f7:e6:84:6d:88:14:ca:38:36:de:54:dd:93:
60:e5:02:ad:61:27:a1:62:6d:80:68:f7:99:26:13:
84:84:cc:33:0a:2b:c9:1b:bd:f5:17:bc:1f:99:f5:
b6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:5B:98:72:CB:1C:35:87:74:44:B7:10:C9:63:71:04:1B:8E:F6:00
X509v3 Authority Key Identifier:
keyid:BC:44:3F:7A:AE:47:E0:AB:38:BC:F8:D5:36:CC:A6:03:50:D1:72:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:0b:3d:04:20:d3:33:e4:dd:24:9b:10:2a:36:9b:33:44:64:
3b:c0:b8:3b:82:1d:3f:6c:51:c5:0d:c1:25:59:09:91:7d:13:
c4:bb:62:01:69:98:22:53:3b:1f:30:76:6b:30:a2:a4:dc:66:
a1:b8:55:82:14:8d:d6:28:d9:4a:a4:a5:e4:15:69:d3:06:5f:
30:b0:ea:4c:c2:1f:9d:64:6f:17:fe:59:53:bc:c2:38:68:1b:
4f:87:28:51:d9:1c:33:a5:76:fa:4d:bc:09:db:53:02:40:43:
9c:88:79:e6:c9:7f:f5:5e:ea:5e:61:9d:29:4b:44:de:e7:bb:
e8:6c:9b:92:c9:2f:5b:be:cc:88:a8:b5:73:39:97:40:6c:40:
fc:7d:89:e6:e9:84:70:d0:3e:61:87:7d:c4:28:0b:bd:5e:95:
0b:57:59:af:2e:b2:da:9d:09:be:be:14:78:24:f6:e9:c4:93:
37:ea:3d:5f:4c:2b:24:ae:c1:c3:53:99:ad:de:6c:6c:12:d1:
4c:d5:48:6a:4a:ac:22:25:ad:55:d3:6d:f1:07:6c:67:1f:82:
3c:c5:5a:46:1d:92:4a:30:2a:76:e3:3f:5e:76:9c:26:27:34:
0d:99:99:9b:05:ca:b8:7e:59:88:b6:67:cb:d7:61:9a:9b:09:
b8:1e:ef:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:04:54 2025 by rpki-client