Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
File: vSX3G6QTFIO7m4I92IZR06_UTns.mft (raw, json)
Hash identifier: WfH7QjG6I0ewiQRdMvuoUWmvtjZ1zIkJsVdNCi0IXYs=
Subject key identifier: 9F:1D:30:DA:7F:AF:A7:B3:CA:9C:F2:0D:38:BE:3F:FC:C4:F7:F4:A7
Authority key identifier: BD:25:F7:1B:A4:13:14:83:BB:9B:82:3D:D8:86:51:D3:AF:D4:4E:7B
Certificate issuer: /CN=bd25f71ba4131483bb9b823dd88651d3afd44e7b
Certificate serial: 0197B77C9DD56324C776D40C44010FBC1E6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
Manifest number: 1287
Signing time: Sat 28 Jun 2025 17:01:26 +0000
Manifest this update: Sat 28 Jun 2025 17:01:26 +0000
Manifest next update: Sun 29 Jun 2025 17:01:26 +0000
Files and hashes: 1: VTzQEre1LOW5un0PlYn-CvmDAKI.roa (hash: fUzpWZIo72ujZLDiYOULGotM+6e+u6e7TR9QhDLmQyE=)
2: uOlfWw_ot1GNz-xDs0HfE8f0GXg.roa (hash: p6HLTz97eUfObx31ZQ7fD3+tg4SDQ5VAA/i07H3/8o4=)
3: vSX3G6QTFIO7m4I92IZR06_UTns.crl (hash: H/tQvilR8IZwity662pSJ1M+2879I9FZLIj1PfKhWW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:9d:d5:63:24:c7:76:d4:0c:44:01:0f:bc:1e:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd25f71ba4131483bb9b823dd88651d3afd44e7b
Validity
Not Before: Jun 28 17:01:26 2025 GMT
Not After : Jun 29 17:01:26 2025 GMT
Subject: CN=9f1d30da7fafa7b3ca9cf20d38be3ffcc4f7f4a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2b:eb:41:c5:73:d4:a1:77:d2:02:c9:89:a5:
01:72:69:e6:87:df:4c:32:85:53:25:ef:0d:03:8b:
e0:00:50:a3:90:33:45:47:a8:5d:54:91:6b:8d:03:
be:3a:f5:4f:47:19:89:7e:24:33:c1:c5:3f:af:b5:
77:98:9d:1a:7f:d5:92:d8:8b:1c:bf:bd:bd:e2:5b:
ec:be:3c:fb:95:19:c1:e9:35:1c:08:c8:23:6b:bc:
1b:7c:f7:dc:8a:37:e3:b7:c5:3f:75:81:2e:81:0a:
3c:cf:f1:fe:27:15:d8:a7:27:92:1a:75:d2:1c:b6:
f1:eb:bf:40:94:f4:49:19:a2:39:44:6a:85:e0:70:
ee:ef:ea:ba:73:14:32:96:84:5a:60:6b:b8:f3:40:
ea:d2:98:79:a8:cc:b6:1b:d8:b6:d4:06:a1:39:f9:
8a:90:c9:c4:b4:e5:40:55:8b:ee:5e:38:57:03:21:
00:f9:83:8e:38:24:e4:a0:69:6b:00:4f:cf:23:4b:
3d:2e:99:79:8a:7f:ea:0f:f2:83:4b:82:19:aa:f8:
c8:c0:5b:f7:fd:90:b8:ad:5d:95:aa:3e:e3:c8:3f:
f0:4d:1f:cd:bb:68:af:b9:d8:4e:10:93:d0:e8:f4:
73:bb:d4:f7:a9:ea:80:7e:eb:40:bf:05:44:19:8a:
3c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:1D:30:DA:7F:AF:A7:B3:CA:9C:F2:0D:38:BE:3F:FC:C4:F7:F4:A7
X509v3 Authority Key Identifier:
keyid:BD:25:F7:1B:A4:13:14:83:BB:9B:82:3D:D8:86:51:D3:AF:D4:4E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:16:39:92:a0:5d:d6:9d:32:8e:e5:bb:e3:e5:d4:62:a1:4b:
5a:d0:ed:95:74:65:bc:e8:e3:32:e0:b0:69:71:13:73:e3:50:
b1:14:25:ee:38:38:93:3b:33:4c:d5:a8:31:72:ef:28:0f:98:
f1:a0:ce:37:e7:6a:1c:69:98:f6:c8:0f:91:2c:b7:0d:ce:50:
b6:f8:6f:c2:21:83:ff:f6:4c:47:75:49:be:28:c7:f8:06:72:
7d:b4:d4:c7:ff:ad:0b:5c:7e:96:dc:f2:cd:23:a3:23:34:77:
c8:52:00:bf:a1:83:ed:97:bb:c9:a8:71:da:08:6c:d7:33:cf:
2e:3e:50:80:61:0b:b8:e5:b0:58:17:3b:49:d8:5e:2c:1b:37:
f7:07:ed:d6:5c:16:b5:8b:6e:86:4a:36:4e:2a:76:2c:b9:fd:
29:ba:c0:84:b2:26:bd:90:26:5e:9c:04:93:9b:7e:17:64:b6:
08:2e:cc:01:aa:65:98:80:75:f5:52:99:6f:19:f9:75:2d:09:
0f:ad:5d:ee:1d:5e:57:7d:6e:36:03:6c:2a:a4:68:db:76:d7:
f8:86:06:82:32:65:9a:62:41:13:bb:4a:b3:0d:0d:b9:f0:18:
b2:f7:fd:82:74:cc:4e:c8:1a:5d:7d:40:63:27:c6:12:1d:ed:
dd:56:3b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:34:05 2025 by rpki-client