Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/9e7d10-243f-47b5-afc4-356ee9776153/1/vRkRNDImIp0gPqMmqdadT8NGxXU.mft
File: vRkRNDImIp0gPqMmqdadT8NGxXU.mft (raw, json)
Hash identifier: /8Czaknyro655bN1sFZgEZlmOm2JJZ/uW3WOC3ju+dg=
Subject key identifier: DB:F4:5C:02:EC:C0:1F:49:5B:C1:69:CB:E7:4F:9E:E1:3D:41:B3:C9
Authority key identifier: BD:19:11:34:32:26:22:9D:20:3E:A3:26:A9:D6:9D:4F:C3:46:C5:75
Certificate issuer: /CN=bd1911343226229d203ea326a9d69d4fc346c575
Certificate serial: 0197C1C8DBA21845276D4DB41F47C2253748
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vRkRNDImIp0gPqMmqdadT8NGxXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/9e7d10-243f-47b5-afc4-356ee9776153/1/vRkRNDImIp0gPqMmqdadT8NGxXU.mft
Manifest number: 09F4
Signing time: Mon 30 Jun 2025 17:00:55 +0000
Manifest this update: Mon 30 Jun 2025 17:00:55 +0000
Manifest next update: Tue 01 Jul 2025 17:00:55 +0000
Files and hashes: 1: 8vm_891vteHi79TbQnGkI8cOQqI.roa (hash: JfWucuJfmWPdMg2hC2g4IUg1QZRP4I3zcWXq8eNKv+E=)
2: vRkRNDImIp0gPqMmqdadT8NGxXU.crl (hash: PasX4HpSG3arBxMqmK1zrgb3E9Rlpb9iRIJbu9AmQG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/9e7d10-243f-47b5-afc4-356ee9776153/1/vRkRNDImIp0gPqMmqdadT8NGxXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/9e7d10-243f-47b5-afc4-356ee9776153/1/vRkRNDImIp0gPqMmqdadT8NGxXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vRkRNDImIp0gPqMmqdadT8NGxXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 17:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c1:c8:db:a2:18:45:27:6d:4d:b4:1f:47:c2:25:37:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd1911343226229d203ea326a9d69d4fc346c575
Validity
Not Before: Jun 30 17:00:55 2025 GMT
Not After : Jul 1 17:00:55 2025 GMT
Subject: CN=dbf45c02ecc01f495bc169cbe74f9ee13d41b3c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:16:d6:b4:06:1c:79:02:1d:cf:99:7d:8d:18:
c6:6a:83:d5:0a:7e:fe:33:a3:c0:ba:08:db:c0:a2:
dc:c0:b8:da:b4:6d:ce:87:b0:ad:bc:4c:f4:57:71:
8d:aa:d3:86:04:b1:21:4b:43:28:1f:ae:a8:c4:30:
e1:4c:b7:ec:b2:59:73:c7:01:f6:ae:d1:ec:90:e7:
22:10:00:cb:20:92:b6:c1:63:7a:93:7f:f7:6e:d6:
92:c6:bf:a8:c6:4c:94:ec:f0:b1:9f:e7:aa:7d:10:
dc:0c:3c:5e:ae:c7:e4:98:8e:fb:4b:bc:eb:0a:b0:
48:b4:ab:6c:39:7d:6e:42:67:b4:b8:63:16:ff:81:
14:eb:d7:fa:78:e4:4d:4e:b9:89:1e:48:ad:9b:54:
8b:bf:bd:70:6a:14:5c:0a:13:0b:60:e2:75:f4:5e:
b9:2d:bf:c7:5a:45:8d:e3:bc:07:24:8a:26:f4:77:
5e:3c:57:55:77:8c:c1:e5:a2:0a:89:41:63:c1:59:
02:95:e1:f3:f8:c6:5a:73:ee:09:92:6a:6f:c3:49:
f6:4f:25:0e:31:15:ac:43:58:cc:37:41:c4:e3:2a:
35:5a:cf:d0:48:96:88:61:ad:4c:34:e6:10:11:1f:
59:8b:ff:03:ef:0d:36:17:fa:58:64:2d:30:8e:42:
79:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:F4:5C:02:EC:C0:1F:49:5B:C1:69:CB:E7:4F:9E:E1:3D:41:B3:C9
X509v3 Authority Key Identifier:
keyid:BD:19:11:34:32:26:22:9D:20:3E:A3:26:A9:D6:9D:4F:C3:46:C5:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRkRNDImIp0gPqMmqdadT8NGxXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9e7d10-243f-47b5-afc4-356ee9776153/1/vRkRNDImIp0gPqMmqdadT8NGxXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9e7d10-243f-47b5-afc4-356ee9776153/1/vRkRNDImIp0gPqMmqdadT8NGxXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:e2:8c:d6:f6:eb:3a:4c:82:8b:8c:e0:74:11:16:df:72:0f:
3e:cb:c7:d8:aa:a6:7c:06:22:af:da:a3:bf:79:5b:c9:52:59:
9c:1c:2e:c9:b9:fd:0d:22:dc:b6:99:f7:83:e0:35:02:6b:dd:
f8:92:c4:b1:f3:eb:35:4d:d1:4e:4f:73:99:8f:9c:3f:2c:8f:
44:7b:31:b2:7c:ee:31:7a:9d:d3:25:ad:2e:4f:1c:7b:28:57:
3d:de:cc:ef:04:8e:e5:8f:a9:d0:bf:29:4d:09:f5:69:ac:e6:
33:1a:62:12:a8:3a:a3:2d:07:83:6e:f2:e2:f9:f1:ee:88:d7:
ad:d4:be:aa:e7:26:ce:4f:ba:70:0b:82:aa:df:a6:e6:64:d2:
7d:34:0a:03:75:a8:00:b3:0d:04:d2:f1:2f:1b:36:f8:23:89:
8d:63:55:b6:c5:a3:ea:f1:ea:29:74:1f:5a:57:e8:17:a7:42:
e2:70:30:02:86:81:fa:70:f6:12:32:25:40:f3:51:5f:95:5f:
02:d3:7e:b1:8c:06:e4:a3:4a:fa:c2:56:ca:95:86:a9:07:d3:
a8:fe:3d:78:58:29:1c:87:46:49:e8:9e:7b:99:42:b7:4d:81:
72:e0:f5:70:26:58:93:1b:ea:a3:2c:81:98:47:1b:a8:9e:cd:
93:e5:3b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 03:20:22 2025 by rpki-client