Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft
File: vayPM9tKSgF12PjqfKdHUH5-geA.mft (raw, json)
Hash identifier: XP2PCQb7EeCiApk5FJYvfS6UDiKMTcpecoUYV+5pPeM=
Subject key identifier: C5:FE:80:ED:0B:C3:33:AA:97:42:D9:D8:1A:92:C5:E2:C6:DC:AE:36
Authority key identifier: BD:AC:8F:33:DB:4A:4A:01:75:D8:F8:EA:7C:A7:47:50:7E:7E:81:E0
Certificate issuer: /CN=bdac8f33db4a4a0175d8f8ea7ca747507e7e81e0
Certificate serial: 0197B7EA3EFE15B5AF270172D551EC7D6B37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vayPM9tKSgF12PjqfKdHUH5-geA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft
Manifest number: 0497
Signing time: Sat 28 Jun 2025 19:01:11 +0000
Manifest this update: Sat 28 Jun 2025 19:01:11 +0000
Manifest next update: Sun 29 Jun 2025 19:01:11 +0000
Files and hashes: 1: 7oEw8EFmquKMrLL8-hfLmIwZUQY.roa (hash: UnWZTOCHUCj50Mpn5ZUqFaqkSFvoIDWjjwDqigNU5NY=)
2: Ck3Jvy5ijt5-_NFGYo-OlYqf3Jo.roa (hash: Ngn9iQ8GLL0NfQbzc69TCLUMH0IFa8vev/CQWXBGYeI=)
3: vayPM9tKSgF12PjqfKdHUH5-geA.crl (hash: aVcMB0SESt4eRIB2b/Sa3b6CwpE9O0Mxl3z/85Eux8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vayPM9tKSgF12PjqfKdHUH5-geA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:3e:fe:15:b5:af:27:01:72:d5:51:ec:7d:6b:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdac8f33db4a4a0175d8f8ea7ca747507e7e81e0
Validity
Not Before: Jun 28 19:01:11 2025 GMT
Not After : Jun 29 19:01:11 2025 GMT
Subject: CN=c5fe80ed0bc333aa9742d9d81a92c5e2c6dcae36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bf:21:6d:06:02:cb:3d:1a:44:16:68:47:84:
54:e0:e3:c4:7e:65:b3:7c:92:18:1e:30:aa:b1:c3:
0b:d3:42:e8:38:9e:f7:a8:64:f8:ae:f3:88:55:2f:
af:52:35:ac:f5:ac:e3:64:6b:d1:a7:09:b9:ae:07:
cc:58:c3:c7:a2:ad:37:ce:84:2c:fa:17:79:5a:cf:
84:4b:74:d3:31:88:b0:72:a9:7c:4e:18:9d:80:df:
e1:68:0f:84:98:7c:22:2a:e9:d8:80:ec:05:f0:ce:
72:ea:c8:12:00:46:47:3d:29:93:8d:ba:0d:07:d0:
d5:3f:57:d6:10:d9:83:63:34:b0:32:8a:c9:32:0b:
1d:27:36:74:73:52:05:2d:81:93:1c:82:4e:dd:d3:
1c:b9:1c:f8:86:34:4b:a7:44:34:c8:c6:11:59:ae:
e0:60:90:e1:c6:95:e6:71:5d:9e:14:aa:b0:20:09:
5f:e7:5e:7a:05:4b:46:ea:ab:8a:4e:64:ab:a1:21:
51:31:bd:7f:b3:d3:f8:3b:13:c1:2e:b2:62:b9:31:
e5:26:88:c8:5f:32:cc:19:e4:0f:67:64:9f:66:f0:
43:c4:e5:e5:19:e4:1d:d2:a0:d9:4e:0e:b4:35:b1:
a6:f2:4a:84:7f:55:40:e2:db:07:28:59:1c:cc:69:
a4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:FE:80:ED:0B:C3:33:AA:97:42:D9:D8:1A:92:C5:E2:C6:DC:AE:36
X509v3 Authority Key Identifier:
keyid:BD:AC:8F:33:DB:4A:4A:01:75:D8:F8:EA:7C:A7:47:50:7E:7E:81:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vayPM9tKSgF12PjqfKdHUH5-geA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:75:45:92:57:94:f7:f1:df:18:70:99:89:fe:97:81:20:bd:
7f:d1:c7:9e:22:f8:fe:66:28:c3:72:09:35:95:b0:31:d2:ee:
83:be:cb:cd:3f:8a:ba:85:05:89:50:db:f4:44:c4:c7:5e:c8:
f6:f2:33:70:3f:4f:6d:4c:c1:cf:b7:ac:2a:ac:9a:6c:66:cc:
e4:46:9a:02:87:f5:de:e5:8d:1d:49:60:19:88:c4:47:31:3f:
f0:67:c5:7d:50:12:a6:60:66:1e:9b:da:2b:a7:3a:23:94:73:
be:72:04:e6:4e:ce:18:b3:78:7e:05:b5:2e:1c:8f:5f:ba:09:
a4:75:74:9d:dd:d5:af:18:8d:0a:b6:fb:f6:68:60:ca:d4:00:
dc:f6:2e:4b:9f:28:9a:38:b3:ba:00:83:4b:d4:0e:b3:f3:e0:
4a:a0:c9:8c:2e:26:62:3d:bb:2c:73:83:2f:e1:49:4f:dd:3e:
15:0a:0b:c2:19:b1:07:1f:f1:9a:6d:c5:f4:d7:a8:d9:b3:6f:
e6:ba:2d:ab:0b:de:56:87:5a:9b:4a:08:4f:7b:cf:87:8b:71:
59:84:c3:70:a9:5a:d4:38:f5:2c:a6:62:1b:b3:94:93:e9:f1:
68:95:ac:c4:36:4e:fd:85:e6:58:af:69:4b:d6:51:01:e5:94:
a0:b4:6e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:38:13 2025 by rpki-client