Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.mft
File: vvUlLMrD9twUJrVT8sHHIzrMiUs.mft (raw, json)
Hash identifier: mqMIOW1L8x2wk6AYyNBo36ccQ/gKk35VOb1gkkaH/98=
Subject key identifier: A5:99:34:C3:9F:95:7E:5F:28:F4:A2:96:E7:54:D3:2C:72:27:0F:BF
Authority key identifier: BE:F5:25:2C:CA:C3:F6:DC:14:26:B5:53:F2:C1:C7:23:3A:CC:89:4B
Certificate issuer: /CN=bef5252ccac3f6dc1426b553f2c1c7233acc894b
Certificate serial: 0197B6D7B2F4A77769EB0A24C31ED5514AFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vvUlLMrD9twUJrVT8sHHIzrMiUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 14:01:18 +0000
Manifest this update: Sat 28 Jun 2025 14:01:18 +0000
Manifest next update: Sun 29 Jun 2025 14:01:18 +0000
Files and hashes: 1: cztKiFowQoK_UYPJ2AEdLhmfdJY.roa (hash: zSStQQUNC6z+zgYsdleYs1GIe5kvbt6u6C94AWl4nn0=)
2: vvUlLMrD9twUJrVT8sHHIzrMiUs.crl (hash: eL5PMAslsN/NCGBvLnWFH23ZA/9dRsieT2fuxBqF5wI=)
3: xlHcoYULH7mPEmpcqtscwUSRg-k.roa (hash: A4kztX9ZPQEUnGsY/7aFwo4jdiC6qf6Ig/R2vXwJcNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/vvUlLMrD9twUJrVT8sHHIzrMiUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:b2:f4:a7:77:69:eb:0a:24:c3:1e:d5:51:4a:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bef5252ccac3f6dc1426b553f2c1c7233acc894b
Validity
Not Before: Jun 28 14:01:18 2025 GMT
Not After : Jun 29 14:01:18 2025 GMT
Subject: CN=a59934c39f957e5f28f4a296e754d32c72270fbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3e:8b:e5:51:b7:55:2f:ad:c3:be:83:24:55:
5f:c3:bc:13:6c:fa:be:3d:af:e3:8b:72:d5:a1:22:
93:89:42:7a:d4:4b:1e:6e:a3:fc:34:88:7d:1a:3e:
26:55:54:b1:b0:07:c7:cb:19:d9:23:d1:5a:0e:cd:
e7:43:66:ec:48:14:92:9e:f5:17:d0:55:2e:0c:2f:
e6:2c:90:25:c7:b1:e4:50:a3:2a:e7:88:51:d7:79:
78:37:a9:78:c8:26:9e:24:b0:3e:4b:70:55:80:19:
a9:dc:c2:76:ba:d9:9b:87:91:4e:d7:48:40:4a:4b:
92:7e:bd:88:12:47:8a:57:ee:e2:09:88:80:7a:2b:
97:57:56:2f:97:e1:1a:07:e2:82:a2:60:0b:a1:14:
4b:a9:de:e0:a5:c1:39:ba:7f:97:c2:42:4c:c5:dd:
17:65:0f:2e:76:75:47:c9:27:58:f0:4c:24:0d:1c:
dc:bc:40:c8:fd:dc:ab:9e:2e:81:91:6e:4c:f1:cf:
81:d8:20:90:4d:c6:98:90:5d:c7:b6:5d:8c:8d:65:
7a:95:80:df:a6:6f:43:79:12:21:95:8c:8c:9e:1c:
69:a4:a5:a5:5e:84:e2:41:dd:c1:0d:a8:1a:a6:d3:
39:eb:01:68:bc:f5:b6:f4:2e:50:9f:6a:04:46:c7:
02:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:99:34:C3:9F:95:7E:5F:28:F4:A2:96:E7:54:D3:2C:72:27:0F:BF
X509v3 Authority Key Identifier:
keyid:BE:F5:25:2C:CA:C3:F6:DC:14:26:B5:53:F2:C1:C7:23:3A:CC:89:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vvUlLMrD9twUJrVT8sHHIzrMiUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:b8:c1:c3:6c:73:42:b2:af:b2:b9:40:db:33:27:dd:c7:89:
00:e8:8b:1f:81:cc:f6:f9:bb:cb:97:c4:bc:9b:fc:be:dd:bb:
c2:c6:33:97:81:7f:0f:ce:83:48:3e:b6:e5:34:81:cb:bc:dd:
e8:c8:39:46:50:55:d7:11:8a:f0:1b:1f:b9:63:0e:c6:ad:66:
53:f4:e7:d0:b0:f4:2d:de:87:f7:6c:4f:18:eb:1c:79:f9:f7:
55:fb:e8:1b:9c:e2:82:e6:03:a6:79:c0:55:3e:5f:25:b2:a9:
8b:ee:60:f4:22:16:f1:54:ae:96:d3:a5:27:35:a5:7d:14:2f:
77:1c:53:bb:1e:56:82:bc:72:ff:1e:43:bf:2b:30:2b:95:13:
47:f3:ef:60:c0:03:6c:a6:32:9a:7a:11:0a:e7:4d:a3:1b:de:
10:b9:c4:3d:a7:88:e9:16:d8:d6:e0:1f:9f:cc:91:6b:05:65:
70:40:b7:f3:a4:96:ba:26:05:a7:f1:51:3c:07:3f:b2:78:e8:
77:db:59:77:ed:2f:52:88:83:09:d3:9a:5c:48:d0:e0:fa:33:
24:53:0e:f3:ca:ac:a1:37:b2:ce:e1:b6:e0:ed:f3:6c:ee:f7:
d7:a1:18:bb:79:69:9e:98:ab:60:60:53:22:da:92:21:70:76:
50:40:15:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:27:00 2025 by rpki-client