Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
File: vygFmS5lMdPaMe4a9rzVwG0Ctso.mft (raw, json)
Hash identifier: wEENzVn7+BolWByFWw8Fo1KulwVsSIlOirnw8n7Vph4=
Subject key identifier: 4F:70:19:CF:1D:71:EC:B0:C8:52:21:09:FD:75:82:C0:91:84:95:80
Authority key identifier: BF:28:05:99:2E:65:31:D3:DA:31:EE:1A:F6:BC:D5:C0:6D:02:B6:CA
Certificate issuer: /CN=bf2805992e6531d3da31ee1af6bcd5c06d02b6ca
Certificate serial: 0197B7B318DE5F66636D17BD998972E2EFCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 18:00:57 +0000
Manifest this update: Sat 28 Jun 2025 18:00:57 +0000
Manifest next update: Sun 29 Jun 2025 18:00:57 +0000
Files and hashes: 1: ZA2eo4PhOO6YarPBjFuZYerlXM8.roa (hash: OaUR9ntwZSMTqF4rae/f45ntDF7DCdGD74N9a3x5n8s=)
2: iU6o8UX2fMqdnVT4GPBZLMHQUVk.roa (hash: L7qS2Pktcg+3MFOhFw0UCguQbXdIgIfJZ4PXXKIQFAI=)
3: vygFmS5lMdPaMe4a9rzVwG0Ctso.crl (hash: 3thOPnPTabSpMtioc/kGDCW0nwpsgCKtRymbA71Ohek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:18:de:5f:66:63:6d:17:bd:99:89:72:e2:ef:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf2805992e6531d3da31ee1af6bcd5c06d02b6ca
Validity
Not Before: Jun 28 18:00:57 2025 GMT
Not After : Jun 29 18:00:57 2025 GMT
Subject: CN=4f7019cf1d71ecb0c8522109fd7582c091849580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1a:f9:97:5a:c9:47:28:54:07:49:36:ab:90:
14:58:fc:18:32:2d:03:5d:46:46:a0:46:83:83:ca:
cf:bc:4e:42:d6:58:aa:85:df:b8:5a:62:57:ea:d9:
04:1f:30:7f:2e:45:91:fb:4f:4b:f3:e0:2e:cd:3b:
db:8d:6b:bc:9f:64:ef:02:6c:e1:ad:2f:a2:9f:bf:
f9:2c:b8:2f:87:01:64:7c:7c:89:d4:5e:36:cd:16:
d7:e9:b3:cc:b9:d1:5e:53:52:bb:77:3e:72:3e:03:
5e:93:13:ea:b1:8e:23:a9:79:20:52:82:3f:33:cf:
57:12:60:1c:13:75:b1:c2:04:26:35:be:b0:3f:61:
6e:ac:32:90:00:f7:1a:02:f9:83:eb:7a:ed:8b:4a:
01:26:7f:05:31:85:0f:6b:bf:27:0a:c7:f8:b7:c6:
8c:e9:e1:02:64:5b:0d:a2:bf:b2:4b:2c:62:ac:82:
2a:4a:0d:1b:90:1e:cf:ab:e0:ab:b6:a1:84:77:37:
1a:d3:20:f0:13:94:0d:e2:cf:a5:19:db:ab:e0:5c:
40:07:38:7b:1a:50:7b:e1:a4:5b:a5:09:d4:3e:20:
4f:94:77:cd:ea:e2:9d:59:58:58:55:7c:c5:af:76:
4b:5b:eb:bb:0a:37:10:c5:d6:f1:2b:5c:1b:3c:55:
2d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:70:19:CF:1D:71:EC:B0:C8:52:21:09:FD:75:82:C0:91:84:95:80
X509v3 Authority Key Identifier:
keyid:BF:28:05:99:2E:65:31:D3:DA:31:EE:1A:F6:BC:D5:C0:6D:02:B6:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:f2:60:c6:8b:3d:5a:bd:a6:eb:9e:2d:1f:49:89:5b:d3:4b:
fa:d3:e9:3e:9e:a3:10:3c:77:05:65:aa:c9:34:b5:d8:62:9d:
e0:7f:6d:03:aa:0c:d8:e5:52:b1:ac:fe:48:87:fe:26:6f:6c:
39:fb:ad:50:a6:1d:65:e3:d9:27:f5:31:ed:10:d0:33:8d:4a:
b5:c9:26:3a:9f:e5:01:c9:77:58:77:10:33:7e:a6:47:ad:bb:
25:0a:e6:e7:24:7d:41:b2:e4:0f:c5:d7:bc:b5:d5:5c:b3:11:
d8:be:88:9f:70:be:70:6f:77:03:b6:b9:1e:62:ea:3e:90:92:
98:a8:e0:b4:ce:5d:3c:dd:1b:89:56:3a:0e:bb:86:7f:26:ac:
19:b3:7c:3f:b1:2d:42:7a:6f:84:db:2e:24:fa:f7:8c:cb:af:
ca:e3:63:2c:08:36:48:24:95:9d:3e:a5:c2:ce:d9:b1:a7:7d:
b6:65:5a:f1:c2:5a:fc:f3:61:c8:8a:6b:52:6c:c9:19:bd:5f:
a5:ec:45:1c:c2:93:d2:00:ea:90:7d:bf:00:eb:86:f9:c4:f6:
ff:ac:aa:0e:b3:60:4c:62:fa:03:fc:c7:bf:16:9b:a0:b6:fd:
8a:54:d7:1b:f8:80:e1:a7:20:6c:10:5c:40:87:84:a5:ca:31:
91:c2:96:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:25:27 2025 by rpki-client