Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/688e37-d942-486a-a932-5893bb7761cd/1/vKoRRq_U9F8RcJWhWn3gu_l4FEo.mft
File: vKoRRq_U9F8RcJWhWn3gu_l4FEo.mft (raw, json)
Hash identifier: xPIYgnHjmJ6Lih9GbGQwmEAxEemGLZuaMibIRwaLQjI=
Subject key identifier: DC:E5:B1:69:41:8C:07:9C:09:A8:B7:07:BE:25:73:88:61:D2:98:85
Authority key identifier: BC:AA:11:46:AF:D4:F4:5F:11:70:95:A1:5A:7D:E0:BB:F9:78:14:4A
Certificate issuer: /CN=bcaa1146afd4f45f117095a15a7de0bbf978144a
Certificate serial: 0197B6A2449DFEE88BAEBD67CFE686D838F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vKoRRq_U9F8RcJWhWn3gu_l4FEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/688e37-d942-486a-a932-5893bb7761cd/1/vKoRRq_U9F8RcJWhWn3gu_l4FEo.mft
Manifest number: 0127
Signing time: Sat 28 Jun 2025 13:02:57 +0000
Manifest this update: Sat 28 Jun 2025 13:02:57 +0000
Manifest next update: Sun 29 Jun 2025 13:02:57 +0000
Files and hashes: 1: EkTaUypg_pd7rGnsbGXftVikPSk.roa (hash: sEhgMg8C+XnNqF8zClrkN2E7JsFwEbgtXl2it8CHZBU=)
2: vKoRRq_U9F8RcJWhWn3gu_l4FEo.crl (hash: mSGCSNOjopuugp4MHSR5vdm0XloMgkVwUjeF+5G1NLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/688e37-d942-486a-a932-5893bb7761cd/1/vKoRRq_U9F8RcJWhWn3gu_l4FEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/688e37-d942-486a-a932-5893bb7761cd/1/vKoRRq_U9F8RcJWhWn3gu_l4FEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vKoRRq_U9F8RcJWhWn3gu_l4FEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:44:9d:fe:e8:8b:ae:bd:67:cf:e6:86:d8:38:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcaa1146afd4f45f117095a15a7de0bbf978144a
Validity
Not Before: Jun 28 13:02:57 2025 GMT
Not After : Jun 29 13:02:57 2025 GMT
Subject: CN=dce5b169418c079c09a8b707be25738861d29885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:29:79:75:67:bf:ba:3c:f7:23:92:33:32:c7:
f4:13:77:3e:bf:1f:5b:e0:9e:ba:64:f6:4b:bd:d7:
9e:b1:dd:ee:2e:a3:37:35:6e:c8:69:88:ad:e4:27:
d6:f3:61:ee:37:81:06:cd:d9:c2:74:83:2d:74:dc:
8a:8a:64:8f:98:5f:7a:2d:35:0e:c3:b7:4a:8d:4e:
83:ac:46:2f:59:05:d0:43:1c:42:d6:bf:df:45:9a:
97:b3:de:97:d0:f2:4b:86:68:3f:00:d3:b8:eb:69:
44:18:0d:e8:ec:58:64:95:88:78:cc:09:79:7f:18:
9f:c2:7a:43:20:b8:c1:d8:b4:37:d6:86:21:9d:50:
6b:08:85:03:53:d9:a7:15:4c:3b:a9:95:48:4d:5f:
b6:18:e1:e8:75:7d:78:c1:3b:1a:ae:12:39:5b:56:
7e:13:5e:a9:7e:41:53:ef:38:18:7b:88:a6:1d:b0:
13:c4:cf:e4:05:d1:1a:d7:ac:b1:31:e4:e3:67:e1:
06:b0:21:7e:b5:47:77:2f:a2:9b:f5:0d:a2:6d:a3:
3d:a1:a3:83:8f:e5:9d:f8:1e:c0:5c:e7:58:ce:e8:
d1:61:b2:66:5b:7b:1a:48:37:fa:9f:ed:e6:63:da:
77:fc:5e:f6:68:4d:5d:12:4f:26:57:dc:89:7e:c5:
aa:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E5:B1:69:41:8C:07:9C:09:A8:B7:07:BE:25:73:88:61:D2:98:85
X509v3 Authority Key Identifier:
keyid:BC:AA:11:46:AF:D4:F4:5F:11:70:95:A1:5A:7D:E0:BB:F9:78:14:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vKoRRq_U9F8RcJWhWn3gu_l4FEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/688e37-d942-486a-a932-5893bb7761cd/1/vKoRRq_U9F8RcJWhWn3gu_l4FEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/688e37-d942-486a-a932-5893bb7761cd/1/vKoRRq_U9F8RcJWhWn3gu_l4FEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:8f:8a:4f:9d:52:c5:11:35:fb:f4:07:e5:b0:bd:d5:13:ef:
f8:a8:17:34:fd:ba:a5:11:35:e2:11:6c:b0:23:07:c9:de:78:
72:4e:42:6d:56:25:18:e5:53:a9:ee:70:71:c3:53:ae:37:ec:
54:05:bb:ed:bd:1b:79:cb:d3:9d:ef:8c:8b:2b:75:c1:7c:88:
4f:94:17:96:d7:b7:fb:eb:4f:e6:dd:96:01:38:1d:70:1e:04:
85:74:09:9e:4a:25:cf:9a:70:da:c9:2b:35:0c:ed:d2:6c:f4:
cf:6a:46:d3:e3:47:23:49:67:27:76:a3:01:20:77:85:1d:12:
aa:51:cf:f9:b9:76:95:2f:4a:b3:90:79:c3:55:0b:a1:d2:ed:
8d:72:78:56:03:b6:f3:e1:4f:44:d4:6c:6d:ca:cb:31:a3:0f:
a4:ee:fc:18:7a:44:b2:00:49:14:72:e0:c4:67:4e:7c:a4:fa:
2d:23:da:94:d3:62:df:f1:4a:70:b9:b9:35:0a:82:1c:59:84:
cf:37:4b:6a:c3:e9:e9:68:ab:8e:b5:16:0d:82:6f:ae:95:df:
ee:d9:3c:c4:70:ad:64:90:c6:8a:5d:78:4e:d4:d4:51:7f:39:
0a:cb:c5:ef:31:b7:26:24:df:96:49:68:d4:f0:26:70:48:6a:
a8:23:f2:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:41:35 2025 by rpki-client