Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.mft
File: vbJN9KfJqiEx2FdQO5PWD3-1G9k.mft (raw, json)
Hash identifier: kVj8FjhrnSdg9+70sbz4wq4cJwdEAdMZgT0MOaxTp9w=
Subject key identifier: 9F:23:C0:98:A1:21:E4:CF:7C:A0:74:F3:13:F2:A3:9F:91:62:7D:2F
Authority key identifier: BD:B2:4D:F4:A7:C9:AA:21:31:D8:57:50:3B:93:D6:0F:7F:B5:1B:D9
Certificate issuer: /CN=bdb24df4a7c9aa2131d857503b93d60f7fb51bd9
Certificate serial: 0197B70F5250E82CD4D9B225F0D6FCDD67C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vbJN9KfJqiEx2FdQO5PWD3-1G9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.mft
Manifest number: 0283
Signing time: Sat 28 Jun 2025 15:02:04 +0000
Manifest this update: Sat 28 Jun 2025 15:02:04 +0000
Manifest next update: Sun 29 Jun 2025 15:02:04 +0000
Files and hashes: 1: AFVAjCiROQ32Z_efvRaORNpa2fQ.roa (hash: STiLszZIpw1MlrUzOI5Ii3ZfZdoAbfQenvPasDTHJCA=)
2: vbJN9KfJqiEx2FdQO5PWD3-1G9k.crl (hash: WcgIwpbbL2d/zgGHc40xVuo0Ps9QFkYhsaH+O5/OuBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/vbJN9KfJqiEx2FdQO5PWD3-1G9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:52:50:e8:2c:d4:d9:b2:25:f0:d6:fc:dd:67:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdb24df4a7c9aa2131d857503b93d60f7fb51bd9
Validity
Not Before: Jun 28 15:02:04 2025 GMT
Not After : Jun 29 15:02:04 2025 GMT
Subject: CN=9f23c098a121e4cf7ca074f313f2a39f91627d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d8:2a:9d:1d:8b:70:12:31:b0:50:36:6d:ed:
79:01:62:d4:4e:b6:16:ea:22:bd:7d:9f:27:fd:c9:
12:bf:37:03:ae:55:66:ef:de:d7:d4:73:ff:28:70:
df:13:1f:9f:fa:ea:4b:45:33:b9:dc:0f:82:ae:4b:
df:17:11:de:f8:6f:45:12:aa:d7:29:e2:c2:7f:a3:
56:55:40:b8:c7:6c:35:65:db:df:c7:fc:61:4e:8d:
ce:78:c4:c0:32:03:1e:8d:76:d0:b4:89:26:62:ee:
0f:91:44:98:4d:83:3c:5e:3c:c1:3d:19:4a:f0:87:
b0:0b:6f:a7:01:6b:4b:8e:bc:4c:7a:17:f2:65:3a:
b6:37:4f:36:7c:24:7e:c9:2a:f9:e8:b9:1b:aa:68:
a0:2f:76:e8:73:cb:3a:a6:3a:28:64:79:b4:ff:0c:
2f:ab:dd:37:a8:53:1b:dd:cd:dc:29:71:2b:a7:8a:
b6:31:01:10:8e:c7:ae:dd:39:b1:2f:61:ba:af:5f:
f9:68:10:2c:95:d1:cb:08:80:5a:65:30:07:b3:b2:
c0:bf:1f:cd:30:6c:af:dd:5b:07:be:21:2e:a1:dd:
23:17:92:ba:62:53:0a:ef:5f:1f:12:29:da:e7:3b:
b5:2d:63:96:84:87:62:21:f5:34:81:f2:2b:27:bb:
3f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:23:C0:98:A1:21:E4:CF:7C:A0:74:F3:13:F2:A3:9F:91:62:7D:2F
X509v3 Authority Key Identifier:
keyid:BD:B2:4D:F4:A7:C9:AA:21:31:D8:57:50:3B:93:D6:0F:7F:B5:1B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbJN9KfJqiEx2FdQO5PWD3-1G9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:3c:99:d7:80:29:f1:3d:0b:b2:f3:ae:05:ae:0f:6f:67:e9:
ad:e7:50:61:92:77:16:67:c0:5d:57:e5:fe:86:48:d9:bc:0c:
f8:1f:9f:17:73:1a:52:e5:d3:86:4f:f5:61:c6:9c:0f:4c:d8:
7b:dc:92:b5:75:29:a3:08:f8:24:8a:ec:6b:98:48:c5:82:74:
0a:c7:aa:80:3a:01:2b:a2:8a:62:02:cd:85:4e:48:1c:fb:5b:
26:b9:97:27:c3:ba:20:56:f0:49:f6:8f:a1:f5:98:92:36:8a:
79:ad:a5:44:36:9a:11:0e:93:ff:e6:f3:15:d8:e4:e0:b2:38:
46:99:c6:38:07:0f:f1:3a:cd:a1:85:61:ee:71:2e:ae:16:ff:
6d:d7:9c:9d:18:44:3b:57:0f:f4:a3:53:8e:79:b9:a3:34:c5:
5f:a3:b7:2c:06:21:c3:a8:83:72:d8:ec:46:fb:72:c9:75:bb:
d2:d3:4e:93:ba:53:52:dc:0e:db:46:12:c4:02:7a:40:a6:de:
78:03:25:eb:e2:49:2e:fd:4d:83:f2:9d:68:54:40:b0:de:5d:
c9:a8:98:d8:0e:81:9b:1c:3c:f9:84:e0:11:01:f1:b0:5f:48:
c4:32:4d:83:ea:de:0f:cd:11:82:62:ff:52:b8:b0:41:83:78:
66:82:39:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:50:30 2025 by rpki-client