Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.mft
File: vatssugHrs69fgOoCAj6sj2cRxY.mft (raw, json)
Hash identifier: izAh+dq9DFWpLI4OcWhexfuKQOvKV2wgHW0lWT4F290=
Subject key identifier: AB:AE:AF:2B:04:9E:E0:85:35:F5:B7:DE:9C:3E:74:0A:CA:BD:BD:BB
Authority key identifier: BD:AB:6C:B2:E8:07:AE:CE:BD:7E:03:A8:08:08:FA:B2:3D:9C:47:16
Certificate issuer: /CN=bdab6cb2e807aecebd7e03a80808fab23d9c4716
Certificate serial: 01977AF9B31A11EF40AB35E28F34EA4AF239
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vatssugHrs69fgOoCAj6sj2cRxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.mft
Manifest number: 088B
Signing time: Mon 16 Jun 2025 23:01:14 +0000
Manifest this update: Mon 16 Jun 2025 23:01:14 +0000
Manifest next update: Tue 17 Jun 2025 23:01:14 +0000
Files and hashes: 1: FiQ6326ULjytbcRmbnTQT53B6qI.roa (hash: oVfk3zFCZV+aJ9BHrRH3g14/uV9d1uVQ7Jx5xhv/0d8=)
2: P26iBMzDxpvH-LQZESUQTHncYxo.roa (hash: 3+DbSLlopFDVY7Piu2/Wt1KhQBxlA0+iBBO7seLQMiE=)
3: vatssugHrs69fgOoCAj6sj2cRxY.crl (hash: ajFyEKdkn3J9qsmuz/phhiEYxLeNtZra/yICW2jhYKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/vatssugHrs69fgOoCAj6sj2cRxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 21:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:f9:b3:1a:11:ef:40:ab:35:e2:8f:34:ea:4a:f2:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdab6cb2e807aecebd7e03a80808fab23d9c4716
Validity
Not Before: Jun 16 23:01:14 2025 GMT
Not After : Jun 17 23:01:14 2025 GMT
Subject: CN=abaeaf2b049ee08535f5b7de9c3e740acabdbdbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:03:82:30:b0:4b:04:a7:34:a6:eb:9c:90:d8:
87:aa:d3:f0:6a:ea:26:e0:b7:53:93:53:a7:6d:0a:
ea:de:26:4f:58:0c:73:59:a2:e3:b7:62:62:4b:3d:
79:08:96:e7:27:75:50:63:7c:53:5b:38:7d:d7:df:
76:77:7e:55:8c:f8:a6:6d:5e:dd:7e:c0:4f:a8:87:
71:1a:92:1b:c9:e1:59:2f:22:2a:8e:6d:ec:5e:f6:
cb:e3:2b:75:c0:d6:4b:d2:6b:a2:23:a4:77:a9:47:
e0:47:8e:25:51:06:a4:72:31:e7:04:f2:55:f1:4c:
f2:84:22:2b:45:ab:4b:03:e8:81:39:cc:67:41:17:
f0:61:41:fa:86:aa:12:85:fb:76:47:8a:10:8a:5b:
65:37:4c:8e:f6:f2:08:c1:f2:56:ce:9d:3f:a3:dc:
fa:1a:b9:b4:68:c0:c7:2c:b4:68:05:cc:3f:33:8b:
bf:7d:c0:94:7b:c2:e8:0e:cb:fc:25:3c:44:65:0d:
5a:57:c1:90:01:ff:b3:44:eb:21:df:b1:eb:33:76:
fa:73:28:98:07:30:4b:6a:18:e0:83:67:78:f6:d0:
90:a3:9b:62:bb:54:f1:8f:99:25:8c:fe:bd:66:35:
4e:a5:e7:4c:2d:2b:f2:87:51:dd:be:f5:24:9b:d2:
0c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:AE:AF:2B:04:9E:E0:85:35:F5:B7:DE:9C:3E:74:0A:CA:BD:BD:BB
X509v3 Authority Key Identifier:
keyid:BD:AB:6C:B2:E8:07:AE:CE:BD:7E:03:A8:08:08:FA:B2:3D:9C:47:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vatssugHrs69fgOoCAj6sj2cRxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:36:b8:88:8c:bd:60:d1:67:7c:2e:1e:84:1f:42:1c:92:57:
19:72:f2:30:87:8c:43:46:1f:4b:57:bc:1b:24:d9:00:f6:ef:
51:27:b4:25:24:b8:09:7b:88:5c:3e:1f:5e:ef:ce:89:fd:65:
e5:0e:20:e5:d1:12:0c:00:04:54:e4:db:33:93:0a:06:e5:ce:
f6:25:7a:e9:68:18:00:3e:8a:f7:c5:9d:9f:1a:cb:d2:98:83:
c7:03:e8:c4:26:6b:1a:ed:29:bb:3b:5e:22:e1:47:c3:ae:f2:
13:60:3f:ed:05:70:7b:20:3a:87:86:5d:d6:b5:7a:fb:3e:07:
75:34:23:e0:b0:5d:ce:27:b4:36:e6:d4:a5:3c:40:db:2f:c0:
da:19:3b:96:93:77:40:9d:0e:26:29:84:b9:f6:7f:21:03:c0:
57:ae:dd:5f:89:ad:35:e7:e2:a3:23:4a:21:e3:b4:0e:6c:d9:
8b:e4:1d:62:98:b9:35:55:9f:2a:e9:ea:3c:2c:af:01:ab:ae:
30:27:ac:f7:73:be:80:64:06:d5:7a:46:09:1d:42:73:a1:15:
5f:ae:29:5f:3b:11:d9:88:8e:6e:b3:46:09:9f:f3:28:5e:2e:
a4:88:45:9b:f5:d2:06:ca:7a:f2:85:ad:00:6b:a5:cc:4d:e5:
10:82:19:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 01:36:43 2025 by rpki-client