Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
File: vCYT4PJtOQfwljQL4FDCAdNY1tU.mft (raw, json)
Hash identifier: 7r6ZlLXnsvnmWCGzyahgQNEhNBQ3SZ2hRqrHIFlvP1o=
Subject key identifier: C4:EB:AE:6C:89:58:8B:EA:8A:6D:F6:4C:38:BE:A0:53:63:CF:D9:51
Authority key identifier: BC:26:13:E0:F2:6D:39:07:F0:96:34:0B:E0:50:C2:01:D3:58:D6:D5
Certificate issuer: /CN=bc2613e0f26d3907f096340be050c201d358d6d5
Certificate serial: 0197C124B7748B96C94E6196E4CFD03FF56F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
Manifest number: 0272
Signing time: Mon 30 Jun 2025 14:01:38 +0000
Manifest this update: Mon 30 Jun 2025 14:01:38 +0000
Manifest next update: Tue 01 Jul 2025 14:01:38 +0000
Files and hashes: 1: urJ49fIkD8qF9GsD_zFu82_16aQ.roa (hash: CgkfZ2tObyCZ5wcx0o7Zqg/j5Bh2RYB4YUbPkk96BQA=)
2: vCYT4PJtOQfwljQL4FDCAdNY1tU.crl (hash: wUXi6gymIcIeIHvs97aVDZqs3ZYEOObOgl/Md0v0BHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c1:24:b7:74:8b:96:c9:4e:61:96:e4:cf:d0:3f:f5:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc2613e0f26d3907f096340be050c201d358d6d5
Validity
Not Before: Jun 30 14:01:38 2025 GMT
Not After : Jul 1 14:01:38 2025 GMT
Subject: CN=c4ebae6c89588bea8a6df64c38bea05363cfd951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ea:10:ad:56:61:7d:80:68:44:d6:af:97:69:
f6:08:12:14:a4:33:c1:03:d3:b5:8e:49:94:25:76:
fb:91:61:f8:3a:f6:96:49:56:59:4c:39:05:81:11:
18:02:c2:00:40:22:0d:f8:64:5c:e2:30:e1:94:c9:
e6:35:05:0c:fe:58:ae:44:cd:18:9d:8d:bc:f2:5d:
3a:f2:7c:a3:a9:24:2c:fb:9d:d4:ad:d5:c3:1a:57:
11:e7:f6:05:6d:06:e0:4c:d2:f3:65:6a:ed:ff:90:
f9:65:82:50:1b:a7:57:be:71:16:ee:d5:b9:49:15:
bd:65:9a:ef:de:bf:31:9f:30:13:8b:fb:b7:e5:04:
2d:3c:5a:d0:8e:55:3a:ec:8f:98:ab:0b:66:80:5b:
8f:3a:6f:4d:d5:62:8e:e3:81:b5:c5:b3:f4:b2:ce:
7f:ed:42:33:0d:cc:8d:17:c7:41:bc:3f:30:2b:fc:
04:b6:5a:c5:eb:de:8a:bc:53:df:dd:91:d9:23:a7:
14:20:37:28:a7:7d:81:2f:89:c1:9a:58:e1:13:72:
5f:7f:fb:0c:51:d0:3f:fb:21:e6:13:66:19:74:76:
d2:ec:ab:19:10:f7:2d:97:48:2d:50:cf:94:bc:f4:
7f:aa:48:4c:c1:d4:99:e2:00:16:7d:e0:42:ff:b7:
21:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:EB:AE:6C:89:58:8B:EA:8A:6D:F6:4C:38:BE:A0:53:63:CF:D9:51
X509v3 Authority Key Identifier:
keyid:BC:26:13:E0:F2:6D:39:07:F0:96:34:0B:E0:50:C2:01:D3:58:D6:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:3c:37:2e:2b:9a:75:68:87:46:fc:fa:ca:d9:c3:e0:d5:a1:
cb:a2:3b:1e:67:01:ec:e6:8e:44:0b:11:7a:55:ab:18:60:a4:
ca:49:b6:d7:99:af:b3:9d:52:84:8b:22:fa:cf:33:e5:f9:06:
bb:91:90:b2:1b:ef:5f:30:4f:6a:70:f3:58:98:73:09:0b:f6:
47:b7:ba:01:23:41:4c:20:50:37:24:83:54:2f:bb:97:29:25:
16:e3:05:d2:51:c8:b1:de:91:43:a7:fa:33:d5:81:ff:a1:59:
98:23:a4:5c:9b:c5:b1:77:09:ba:b4:06:fa:cf:fd:e9:1b:8a:
ed:8d:ce:48:b2:20:36:a8:a0:d2:aa:03:28:1a:e0:3f:68:06:
7b:22:e8:4c:72:62:70:93:41:b4:aa:1e:15:b0:7a:65:40:20:
5d:27:60:43:d2:cf:fc:80:c9:d7:6b:75:d9:8e:8a:5d:3b:cb:
73:44:30:d8:f9:cf:93:31:5c:61:cb:93:9e:9e:96:7c:d7:12:
bf:00:21:43:dc:84:0f:a7:f0:a9:1e:fc:69:91:aa:aa:bf:55:
c0:a0:bd:2b:4a:31:7d:5d:35:11:fa:39:5a:19:a1:37:73:d1:
eb:02:d1:5c:8c:92:4b:d7:a8:4c:84:9c:f0:4a:e9:89:ec:0a:
e7:ae:7e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 17:26:13 2025 by rpki-client