Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.mft
File: vWSXBH8g1vcI19tCVXtpj7-z2Ps.mft (raw, json)
Hash identifier: 3SAEYRLh79m7fxnznOho4oFP/sw/86Au40nWJIynM1Q=
Subject key identifier: 11:CE:0A:70:D7:3D:6A:36:A9:24:85:65:87:29:DD:A9:A1:D0:07:5C
Authority key identifier: BD:64:97:04:7F:20:D6:F7:08:D7:DB:42:55:7B:69:8F:BF:B3:D8:FB
Certificate issuer: /CN=bd6497047f20d6f708d7db42557b698fbfb3d8fb
Certificate serial: 0197B7458C3727DBBFADCFA7843902A68032
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vWSXBH8g1vcI19tCVXtpj7-z2Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.mft
Manifest number: 0538
Signing time: Sat 28 Jun 2025 16:01:17 +0000
Manifest this update: Sat 28 Jun 2025 16:01:17 +0000
Manifest next update: Sun 29 Jun 2025 16:01:17 +0000
Files and hashes: 1: W0ISdcMD3BWsHVPGG7LkFApumXs.roa (hash: ycAJc8E2fcKafG7/xeE7xIvkeS6Y7snCVRq4mmzolw0=)
2: vWSXBH8g1vcI19tCVXtpj7-z2Ps.crl (hash: SUVkiQZTnej4ird5jHsCetVVYsBbPEbSjaRJ1eg/MlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/vWSXBH8g1vcI19tCVXtpj7-z2Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:8c:37:27:db:bf:ad:cf:a7:84:39:02:a6:80:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd6497047f20d6f708d7db42557b698fbfb3d8fb
Validity
Not Before: Jun 28 16:01:17 2025 GMT
Not After : Jun 29 16:01:17 2025 GMT
Subject: CN=11ce0a70d73d6a36a92485658729dda9a1d0075c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:47:28:e0:58:5d:9d:ef:1a:80:68:47:70:ff:
68:34:f4:99:17:b9:23:78:ce:60:56:49:cb:8f:a4:
56:d6:27:53:d4:d7:cc:84:a5:d1:d5:60:97:b3:a5:
1e:24:a5:5c:01:05:f1:b3:97:c0:6c:c3:34:c4:54:
bf:c0:1b:d2:e1:1d:41:e3:a0:c9:75:7f:b5:26:3b:
fe:98:6f:60:0c:bf:b5:a2:46:30:ff:52:16:e2:ca:
26:45:08:7a:32:af:9b:56:af:43:4e:22:2d:53:6a:
f5:ff:d2:56:e0:33:ed:8d:42:b0:e1:9e:7d:dd:5b:
21:e5:6a:9d:92:26:cb:c3:ed:7f:e1:d5:af:58:54:
8a:e9:8a:a3:1c:ec:ab:f7:53:0b:cc:0e:f1:fb:42:
e4:52:88:b1:ed:75:54:40:48:2e:4d:96:da:e2:41:
3d:b7:c0:24:d8:56:f5:0a:ba:22:92:25:5f:b5:c1:
a2:3a:c6:35:c8:93:98:de:85:ac:9a:3d:e5:e8:e2:
5b:87:74:e6:ac:b1:c5:2a:33:0b:ef:90:f0:6b:7f:
21:23:c5:a0:4c:47:96:ce:97:7c:63:6f:b7:c3:24:
e0:4f:dd:c5:c7:a8:af:81:c1:c1:06:f7:c5:3c:9c:
21:4a:eb:ac:b2:2b:40:e1:67:3e:1f:3c:1c:cd:23:
c1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:CE:0A:70:D7:3D:6A:36:A9:24:85:65:87:29:DD:A9:A1:D0:07:5C
X509v3 Authority Key Identifier:
keyid:BD:64:97:04:7F:20:D6:F7:08:D7:DB:42:55:7B:69:8F:BF:B3:D8:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWSXBH8g1vcI19tCVXtpj7-z2Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:28:3a:e7:fe:cf:f8:4d:8f:69:14:97:77:b7:dc:63:d4:f7:
22:a5:3f:b5:29:c5:87:6c:21:60:ec:85:30:de:c7:ae:8e:00:
9d:ef:90:90:b2:28:6d:d5:ac:dc:a6:2c:69:10:3b:74:0e:98:
79:eb:48:b3:a3:4c:47:2c:34:22:63:80:08:fa:28:0c:10:66:
11:42:08:41:bc:f0:a0:82:ed:39:07:1c:9a:70:a1:9e:d7:ea:
89:f6:f4:bb:68:fc:fb:b4:0a:3b:78:b0:23:cb:a9:62:92:90:
58:38:15:f8:24:d2:1d:07:77:2c:7f:74:ab:26:27:66:aa:a3:
e7:f4:a7:44:76:93:e3:49:8b:55:b3:05:69:42:b3:58:6e:7c:
1c:db:3f:b3:41:47:16:e3:46:22:1b:ef:9d:f6:df:a7:e7:41:
58:9a:0c:e0:c0:90:d5:42:d9:59:14:ed:c7:71:95:bc:6d:7b:
2c:b7:13:06:4b:4a:0a:85:d8:49:e7:53:24:7b:a3:d3:dd:e7:
ce:56:61:43:0b:3c:fb:bf:4e:0c:ef:50:85:74:35:3e:d9:bc:
1f:8b:c3:2a:34:41:27:37:2b:42:84:00:6c:5f:a1:ac:b8:85:
16:fc:c8:15:81:e5:41:c3:8d:e2:01:8c:4f:56:9d:f6:54:cc:
b9:fb:77:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:55:41 2025 by rpki-client