Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.mft
File: vaYQQ1QkhQlrDfQ1HMDal383cN0.mft (raw, json)
Hash identifier: QYzttsIVIwpe5urZnag7IwWyC4osarl81QOx7eG0ntU=
Subject key identifier: 44:17:94:92:5C:B8:B6:E6:FD:F1:D9:A7:36:B8:4F:F0:77:72:EC:EA
Authority key identifier: BD:A6:10:43:54:24:85:09:6B:0D:F4:35:1C:C0:DA:97:7F:37:70:DD
Certificate issuer: /CN=bda61043542485096b0df4351cc0da977f3770dd
Certificate serial: 0197B820CE0D242412F6471D95E9574AA55D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vaYQQ1QkhQlrDfQ1HMDal383cN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 20:00:46 +0000
Manifest this update: Sat 28 Jun 2025 20:00:46 +0000
Manifest next update: Sun 29 Jun 2025 20:00:46 +0000
Files and hashes: 1: RYZ_HUggvvOzHTuXBACbgajQpo0.roa (hash: Fp6s79hRrwq+bZ12gZrNnH0nQeo4puoviWIdP4EjMXQ=)
2: vaYQQ1QkhQlrDfQ1HMDal383cN0.crl (hash: eH+rd7k8dP3EGJgDZ4KndXotaHRf2sVDxQJoTr0dN7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vaYQQ1QkhQlrDfQ1HMDal383cN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:ce:0d:24:24:12:f6:47:1d:95:e9:57:4a:a5:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bda61043542485096b0df4351cc0da977f3770dd
Validity
Not Before: Jun 28 20:00:46 2025 GMT
Not After : Jun 29 20:00:46 2025 GMT
Subject: CN=441794925cb8b6e6fdf1d9a736b84ff07772ecea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:33:af:58:be:9e:8e:c0:0b:b4:a8:db:5c:df:
61:f3:b2:a2:d2:17:96:e5:60:91:5c:dd:87:2f:51:
c1:e6:4a:a2:47:e3:a2:64:d6:fd:65:b9:26:47:6c:
9f:d5:cc:8b:e0:60:fa:02:a0:40:91:f2:fd:5a:67:
9f:5c:d2:10:be:fb:bf:a9:0c:3f:c9:f9:5c:c6:f5:
a1:ff:87:10:d6:a2:1a:26:ff:e2:76:8d:cc:57:0c:
1d:65:e3:ae:d3:ca:02:ab:a2:d5:a0:8a:28:cf:cc:
54:a7:f0:1f:e1:c8:9b:6f:3e:2f:86:76:1c:89:13:
bc:d5:f4:5f:06:22:34:89:fe:c4:8c:25:72:99:00:
6a:4b:6c:ec:b6:0f:ba:33:34:db:57:b4:67:d0:94:
40:50:5d:7d:94:bb:8b:72:34:4b:75:2f:11:1b:86:
87:21:f4:a5:51:bf:2e:a6:41:d9:13:1d:82:5e:52:
81:f2:e4:25:83:e5:10:28:01:8a:fc:1a:1e:90:e1:
58:a9:a7:bd:91:39:6c:5b:7f:e1:18:4a:e0:64:82:
af:6b:5e:fc:01:35:f6:69:0b:9b:29:ae:fa:28:61:
51:f4:e6:37:1c:0f:74:b9:36:da:df:aa:79:54:28:
76:2d:36:ad:75:6f:e2:aa:9d:f9:d3:1f:02:ae:af:
83:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:17:94:92:5C:B8:B6:E6:FD:F1:D9:A7:36:B8:4F:F0:77:72:EC:EA
X509v3 Authority Key Identifier:
keyid:BD:A6:10:43:54:24:85:09:6B:0D:F4:35:1C:C0:DA:97:7F:37:70:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vaYQQ1QkhQlrDfQ1HMDal383cN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:1c:8c:a2:14:54:93:67:3e:05:6f:66:70:f9:3a:1b:a4:bc:
f6:85:58:d1:7a:0f:a1:1f:f1:b0:d6:39:09:5d:aa:f0:78:08:
8c:e3:2a:22:db:54:52:01:c7:20:1c:2e:28:41:0e:05:98:1d:
67:e9:d1:5a:4d:57:34:e6:d9:05:c5:ac:7f:1b:ab:c4:0d:57:
69:c8:bb:87:dc:77:1d:52:5d:05:b5:1f:a7:b4:ed:e9:8d:f1:
ab:92:6f:83:df:c5:53:c0:d6:39:27:b0:2f:d2:ea:e8:6e:d3:
e8:a4:fa:3b:15:31:3f:b2:f9:e8:45:27:36:d1:1c:9a:b8:84:
3d:77:94:7e:2e:24:29:28:19:b1:66:ad:78:fb:96:0c:c1:ca:
ce:aa:26:46:2e:b9:e0:05:a4:7a:e4:b9:b4:10:50:f8:df:b0:
e2:1a:b1:fa:e0:72:65:d8:a3:fd:91:ca:2e:c9:42:a9:c5:a5:
48:ba:18:42:07:15:58:ac:4d:0f:cb:74:ed:e1:fc:7f:8b:5d:
89:37:25:d8:46:39:1a:15:08:e1:b1:c3:c8:5a:6d:89:ae:7c:
c8:c0:d5:e6:9f:bf:69:b4:79:cc:b1:fb:2c:2a:2d:92:72:cd:
d0:be:ca:b2:ad:0b:c5:0b:ea:13:fc:67:a1:13:bf:33:b5:9e:
a9:55:bc:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:00:19 2025 by rpki-client