Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft
File: vB0gk2YmtVdDxllFEt5C75-OkF8.mft (raw, json)
Hash identifier: iRy78buymX0ufGZ5LT50GSktwlMspsb+mgjHVF01Nx4=
Subject key identifier: 34:BE:E2:BD:46:54:4A:CB:50:92:AC:57:28:E3:11:AA:F1:2C:26:53
Authority key identifier: BC:1D:20:93:66:26:B5:57:43:C6:59:45:12:DE:42:EF:9F:8E:90:5F
Certificate issuer: /CN=bc1d20936626b55743c6594512de42ef9f8e905f
Certificate serial: 0197B820EDF42F86A68B1F797DA8A3C7DB33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vB0gk2YmtVdDxllFEt5C75-OkF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 20:00:55 +0000
Manifest this update: Sat 28 Jun 2025 20:00:55 +0000
Manifest next update: Sun 29 Jun 2025 20:00:55 +0000
Files and hashes: 1: 5sX-DGEXiD0BFlvf-Fmo0E_zIWA.roa (hash: 9QROXrOe8DbEbrWzP6N+sqZkzzd6XWEYKMJ32P4x344=)
2: vB0gk2YmtVdDxllFEt5C75-OkF8.crl (hash: CVuKtghxb5vmkF64e0OZy1rdOdJHKdpn846DgAWigNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vB0gk2YmtVdDxllFEt5C75-OkF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 20:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:ed:f4:2f:86:a6:8b:1f:79:7d:a8:a3:c7:db:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc1d20936626b55743c6594512de42ef9f8e905f
Validity
Not Before: Jun 28 20:00:55 2025 GMT
Not After : Jun 29 20:00:55 2025 GMT
Subject: CN=34bee2bd46544acb5092ac5728e311aaf12c2653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:70:c4:7f:c3:70:8d:ae:1b:f0:97:cd:da:d1:
dd:83:41:8e:fe:b3:b6:53:05:6d:03:da:04:b7:c9:
3d:79:14:9b:f6:ab:dd:3e:d5:d5:a2:eb:02:1b:00:
8e:bb:ca:7d:ae:4b:8e:1e:62:6c:c5:a1:0f:de:37:
22:2c:8b:04:ce:8d:e5:2e:c0:8e:a7:68:4b:e0:7b:
96:46:33:64:23:96:87:1b:32:ed:bc:c6:27:4c:eb:
c8:34:93:19:70:a5:82:65:ee:95:9b:f2:1a:fa:24:
aa:30:5a:42:90:0d:05:10:13:18:d4:05:10:59:ee:
26:4e:22:d5:a3:10:b2:4e:a4:47:53:47:4d:90:dc:
3f:61:d2:0e:b5:1b:bb:61:8c:b4:c8:ff:9e:7c:bd:
1f:1a:95:68:6e:38:ab:a6:09:63:dc:76:47:2d:d2:
c9:8d:bc:18:2e:bb:00:d3:0b:a1:cd:79:ad:d4:86:
b1:af:d4:81:ce:ce:8a:50:24:b1:52:e1:69:b1:24:
9c:1f:89:ee:6a:eb:6a:00:4f:14:3e:5d:ba:c2:41:
b6:a5:a9:b9:7f:55:80:ac:6a:8e:ee:67:9a:b6:99:
f6:a9:7b:ce:fa:aa:5e:54:fb:29:70:fa:6a:d6:aa:
e0:e5:82:0b:c9:c4:c4:ba:84:f7:f4:cf:97:c8:6f:
93:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:BE:E2:BD:46:54:4A:CB:50:92:AC:57:28:E3:11:AA:F1:2C:26:53
X509v3 Authority Key Identifier:
keyid:BC:1D:20:93:66:26:B5:57:43:C6:59:45:12:DE:42:EF:9F:8E:90:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vB0gk2YmtVdDxllFEt5C75-OkF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:3e:c8:c2:93:de:bb:23:6a:b7:b5:9d:25:80:61:dc:07:79:
25:0b:cf:0a:4a:29:a2:cd:52:71:df:b8:4e:0f:d4:43:13:45:
fb:6b:d0:43:a6:0c:13:83:fb:01:31:a3:04:84:9b:2f:26:73:
12:41:4f:04:d4:5b:78:fa:44:84:a7:94:f8:b4:79:1a:59:4d:
c7:0f:b3:af:e0:8e:c6:4a:38:38:85:03:7c:e9:6b:f6:be:3c:
35:17:16:1f:28:43:60:d7:a7:f6:78:1e:c6:70:b7:d7:0f:b5:
cc:e0:6e:68:82:27:65:22:34:b3:21:0b:7f:2e:bf:96:a6:3d:
89:b3:0e:66:dd:31:fb:2a:52:93:77:82:61:35:89:57:3c:1d:
0d:b6:be:dd:9c:34:d7:79:f5:10:8f:b8:ad:5d:9a:ea:45:f1:
ad:14:f9:97:fa:f2:6a:3d:3a:38:7b:76:a2:49:c8:bf:ba:8d:
51:cd:39:0b:b9:1d:b4:12:da:79:69:e2:58:02:3c:2d:bf:89:
98:e6:b0:dc:af:eb:13:cc:15:19:7d:24:b4:9f:6b:40:28:50:
2d:c1:de:4a:cc:24:3c:70:a7:bd:4a:9e:da:ec:a6:45:cb:ae:
be:75:6a:6a:3b:00:73:91:29:58:60:9e:ba:55:ca:35:43:b9:
9c:ee:78:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:25:51 2025 by rpki-client