Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft
File: vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft (raw, json)
Hash identifier: iSu/jPixZyagczcAWhDKYe882k1KIApkzhD54ozXs/M=
Subject key identifier: AA:F5:6E:26:BE:60:0E:06:F4:69:D5:BF:78:72:B9:53:91:A2:B9:CC
Authority key identifier: BC:9D:7C:42:E9:17:84:4C:BC:2D:E4:A9:1C:6C:17:01:DE:59:71:B5
Certificate issuer: /CN=bc9d7c42e917844cbc2de4a91c6c1701de5971b5
Certificate serial: 0197C0B6CFA933F06C8B65AFF0662243DFFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJ18QukXhEy8LeSpHGwXAd5ZcbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft
Manifest number: 15BD
Signing time: Mon 30 Jun 2025 12:01:35 +0000
Manifest this update: Mon 30 Jun 2025 12:01:35 +0000
Manifest next update: Tue 01 Jul 2025 12:01:35 +0000
Files and hashes: 1: PtAXY24lYtkFRHade4pTjXormLM.roa (hash: 1elZ7b8fLDvNPO81SeVzVwIAYPfLoIwWb4acP64QkQU=)
2: vJ18QukXhEy8LeSpHGwXAd5ZcbU.crl (hash: 2hI+IgN1c3P5gEL1gvg1tkQqnSnFBpPBorqZXRb2tJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJ18QukXhEy8LeSpHGwXAd5ZcbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 12:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:b6:cf:a9:33:f0:6c:8b:65:af:f0:66:22:43:df:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9d7c42e917844cbc2de4a91c6c1701de5971b5
Validity
Not Before: Jun 30 12:01:35 2025 GMT
Not After : Jul 1 12:01:35 2025 GMT
Subject: CN=aaf56e26be600e06f469d5bf7872b95391a2b9cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fd:06:b5:39:50:3f:df:ee:eb:6f:6a:fc:f0:
f4:28:6d:98:26:4f:09:4c:2a:c5:76:02:69:be:8a:
a7:28:8a:61:db:88:61:87:8c:b0:71:18:84:d6:0a:
fd:1d:e8:bf:41:47:2d:93:9c:62:be:a2:c6:fc:57:
20:a1:10:6d:84:41:47:8c:5f:18:ee:1c:24:95:12:
dd:5e:57:96:38:5f:0a:0e:06:36:b1:46:49:85:a2:
63:c2:4e:3a:a7:c1:c1:8b:77:b6:da:49:80:79:ff:
e5:c4:99:b1:ca:48:1b:12:83:57:05:83:41:72:58:
a6:fa:0a:5c:e8:dc:ba:fd:d4:f7:47:7c:5a:d5:91:
69:e0:a5:0a:58:c0:b7:8c:7c:13:1f:57:99:dd:00:
5d:13:07:83:23:c1:99:38:6d:6e:3f:5f:27:05:2a:
b3:42:27:3e:5e:a7:85:87:04:9d:47:4a:8e:7a:2c:
d3:b4:cc:ee:64:02:79:38:3d:ae:5e:34:79:24:37:
4c:41:44:ad:1c:58:e5:5f:68:fc:8f:be:af:7d:23:
c9:fa:96:1b:d4:d2:14:36:3d:3e:fe:f9:c9:f8:01:
32:36:e9:a4:38:b8:bb:e2:12:87:55:a3:6c:3e:fb:
14:0e:2a:6c:28:55:4e:31:c0:26:b1:c9:22:d0:dc:
75:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F5:6E:26:BE:60:0E:06:F4:69:D5:BF:78:72:B9:53:91:A2:B9:CC
X509v3 Authority Key Identifier:
keyid:BC:9D:7C:42:E9:17:84:4C:BC:2D:E4:A9:1C:6C:17:01:DE:59:71:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJ18QukXhEy8LeSpHGwXAd5ZcbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:23:68:af:8c:e1:68:7e:98:0d:9d:49:e6:ae:36:01:be:31:
aa:de:52:d4:12:c0:74:db:dc:46:80:3c:d3:f7:e3:bb:ed:3d:
67:40:c2:62:f9:24:b3:b7:cb:ac:8a:f9:b2:9c:a1:df:00:af:
38:92:51:26:16:c9:c1:4c:67:97:2e:c5:88:21:57:d2:5c:48:
cd:e4:2a:43:6c:da:88:93:ac:ef:fc:f3:5c:9e:dd:90:dd:36:
53:ac:ec:f7:6d:0e:11:a5:90:2f:f7:b6:1e:c8:62:e0:d3:26:
47:a9:6f:9f:92:fb:0c:56:7d:2e:0c:c8:5a:3f:d0:3b:74:d1:
5f:26:78:6e:7e:0c:c0:4e:e7:65:52:dd:b4:63:cf:74:25:c4:
87:58:8a:19:d2:ad:fb:7c:16:f6:42:1a:b5:d8:f5:b0:9e:b8:
d4:3a:83:5e:de:58:3f:0e:cc:90:6d:81:c0:56:81:c8:34:52:
c8:1c:72:b0:8a:de:e1:8c:a6:81:53:dd:2d:76:fa:b6:47:89:
a7:69:cd:cd:14:ed:74:78:95:d5:4a:7a:a6:63:6c:46:f8:83:
c5:9f:fa:b6:a5:91:f7:76:56:e5:a7:76:3b:7f:d8:87:49:7c:
b1:e1:a7:8d:f5:66:52:d5:73:3d:25:2f:9f:60:2b:7d:2c:27:
4a:cd:36:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 17:24:12 2025 by rpki-client