Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.mft
File: vMY_AQxUC81FVDRL-5pZou26vCk.mft (raw, json)
Hash identifier: 6vqOWTKg/5Y260fHrSrqUxos0hYmlqX+5kb3YHT0h7o=
Subject key identifier: 9E:69:44:E2:14:B8:EE:29:50:A9:E2:D6:F8:57:D0:57:AA:8A:48:98
Authority key identifier: BC:C6:3F:01:0C:54:0B:CD:45:54:34:4B:FB:9A:59:A2:ED:BA:BC:29
Certificate issuer: /CN=bcc63f010c540bcd4554344bfb9a59a2edbabc29
Certificate serial: 0197C26D9F9A9B5F5F499B724C2B053C3556
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMY_AQxUC81FVDRL-5pZou26vCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.mft
Manifest number: 15C3
Signing time: Mon 30 Jun 2025 20:00:53 +0000
Manifest this update: Mon 30 Jun 2025 20:00:53 +0000
Manifest next update: Tue 01 Jul 2025 20:00:53 +0000
Files and hashes: 1: f54g9Idv6PqQc5NMQvmsvFWJIzA.roa (hash: l130lZQGnDRQWTrBtDjmk6wY+7GBZMzcTr0yBlbCoVI=)
2: vMY_AQxUC81FVDRL-5pZou26vCk.crl (hash: wSMOpPuG4+QQyA1JibFSqqMOOFSHYoCql0ewngEretU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vMY_AQxUC81FVDRL-5pZou26vCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 20:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:6d:9f:9a:9b:5f:5f:49:9b:72:4c:2b:05:3c:35:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcc63f010c540bcd4554344bfb9a59a2edbabc29
Validity
Not Before: Jun 30 20:00:53 2025 GMT
Not After : Jul 1 20:00:53 2025 GMT
Subject: CN=9e6944e214b8ee2950a9e2d6f857d057aa8a4898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e5:4c:fe:d6:cb:d7:41:0a:8f:90:47:d0:36:
c2:ec:d8:07:92:58:8c:20:ad:42:2d:a6:c9:ff:db:
10:55:fe:99:82:12:1c:72:42:fe:6f:d9:cf:42:ab:
f8:79:5f:63:9b:66:a2:39:90:97:e3:33:af:44:75:
c8:44:18:52:4f:83:21:b0:ef:e1:7a:35:5a:94:c0:
b4:11:c1:d4:16:87:36:92:2c:f5:f2:64:00:ab:53:
57:56:e2:22:9a:93:37:86:4a:fc:24:7c:70:b8:e2:
3c:c0:31:67:e5:b8:c4:8d:d8:76:0b:3d:8a:36:39:
33:62:73:28:8d:c9:ec:18:9d:49:66:f7:df:a8:4b:
96:42:7a:75:ae:d5:0f:7d:0a:e3:b5:83:b4:fe:dd:
eb:3a:b4:50:2a:28:54:87:0e:58:31:cf:78:cd:b9:
10:b4:6d:68:15:4e:ee:7f:60:4f:22:70:bf:d5:fd:
12:70:a1:8f:b9:39:03:70:10:55:3b:23:aa:77:20:
1a:53:90:35:8e:14:50:c0:72:2c:86:45:d2:da:f8:
ab:1a:09:fe:f3:a4:4a:d8:06:85:2a:1c:59:5c:82:
da:8f:3c:0f:54:8d:58:99:1b:4e:21:53:9c:ee:61:
3f:34:a5:b0:a2:bc:f1:28:84:8b:b3:18:a6:d9:48:
e6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:69:44:E2:14:B8:EE:29:50:A9:E2:D6:F8:57:D0:57:AA:8A:48:98
X509v3 Authority Key Identifier:
keyid:BC:C6:3F:01:0C:54:0B:CD:45:54:34:4B:FB:9A:59:A2:ED:BA:BC:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMY_AQxUC81FVDRL-5pZou26vCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:22:52:83:34:b2:0c:7d:0c:40:11:73:7d:b0:c1:47:db:22:
31:16:8c:b0:ac:4a:df:8a:60:c1:7e:19:0f:3c:83:58:d2:af:
c5:19:de:8d:5a:89:ad:20:31:5e:b2:f4:de:54:84:72:31:53:
84:40:99:05:1a:2c:34:c9:77:49:8d:ec:82:2b:44:11:17:6b:
86:4c:98:10:51:33:29:a7:98:56:2b:2d:31:35:d7:18:73:a7:
98:2a:9e:74:40:43:4e:d5:76:4b:75:c6:63:16:11:98:cc:bc:
03:96:f7:52:4d:0d:48:b5:d8:69:b7:33:c5:67:46:a6:46:d0:
7a:db:8a:6c:82:f3:a4:bd:8e:94:74:b9:86:20:6e:f3:04:b3:
dc:ad:97:fd:0a:9e:83:f3:44:91:e7:dc:7f:1e:5d:31:4b:bd:
92:b2:a1:09:df:37:bd:d3:36:4a:16:be:9b:3b:fa:08:00:4e:
42:b8:e9:4d:8e:50:88:08:fa:56:f2:e1:f5:8d:9c:b5:5e:4e:
a5:42:bf:be:7a:e9:01:8d:0f:40:f6:f5:d4:c6:d8:83:7c:bb:
f9:41:8a:25:54:65:ab:20:70:0e:9a:15:36:dc:b5:77:38:a7:
17:a7:03:c3:b1:eb:66:ab:7b:64:65:1b:b7:ea:ba:59:9d:28:
9a:94:17:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 03:08:28 2025 by rpki-client