Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.mft
File: vjxU0e3KaS9Eydo4NALCT95yNQc.mft (raw, json)
Hash identifier: Wvp0+Ua1L2IMEGPWdUOrRMAY3HARb5BRXXmsQKiii4A=
Subject key identifier: BB:6A:49:F1:F7:6D:72:9A:EE:3B:E6:FA:BC:4A:DF:E0:89:32:C6:BF
Authority key identifier: BE:3C:54:D1:ED:CA:69:2F:44:C9:DA:38:34:02:C2:4F:DE:72:35:07
Certificate issuer: /CN=be3c54d1edca692f44c9da383402c24fde723507
Certificate serial: 0197CB3A09FAE1CEDDE7E419139CA48E9B5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vjxU0e3KaS9Eydo4NALCT95yNQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.mft
Manifest number: 1552
Signing time: Wed 02 Jul 2025 13:01:07 +0000
Manifest this update: Wed 02 Jul 2025 13:01:07 +0000
Manifest next update: Thu 03 Jul 2025 13:01:07 +0000
Files and hashes: 1: NciqB0nxRsKsgl_dqrGriZqOS10.roa (hash: A4v1pKF3O59HRDDkByw4kog7MAnROAkCPMI/UYgkXRo=)
2: vjxU0e3KaS9Eydo4NALCT95yNQc.crl (hash: l46IpAJuQ0FQRMi8EJuMiH6Wel0zCLC3Fq78yyQEl7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vjxU0e3KaS9Eydo4NALCT95yNQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 13:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:3a:09:fa:e1:ce:dd:e7:e4:19:13:9c:a4:8e:9b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be3c54d1edca692f44c9da383402c24fde723507
Validity
Not Before: Jul 2 13:01:07 2025 GMT
Not After : Jul 3 13:01:07 2025 GMT
Subject: CN=bb6a49f1f76d729aee3be6fabc4adfe08932c6bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c7:76:36:bd:a3:05:b9:9d:8e:de:e4:e0:fb:
f5:44:16:e9:63:20:89:0e:b8:77:eb:96:ed:8d:39:
8f:f1:d0:21:25:e3:27:4d:91:58:d1:33:f5:a5:99:
af:2e:90:6d:b3:c8:19:f6:18:ae:6f:8a:11:40:c1:
35:e0:6f:a5:94:89:b7:b5:51:1b:8b:f8:5c:ce:bf:
9b:85:40:f0:8f:e5:82:8a:48:3a:a4:30:b8:30:2d:
2b:be:53:95:f3:39:6f:0a:8b:aa:71:39:60:1b:5c:
9f:7b:74:a6:c9:8b:5c:0d:50:32:e7:26:0d:93:9c:
ad:bb:a9:42:31:26:4f:60:bb:37:53:61:4c:9f:90:
66:77:b7:7d:2c:fb:2a:e6:90:fb:53:a2:1f:91:e3:
23:bb:8c:c4:dd:20:82:ee:42:0f:3a:25:e7:98:ff:
9b:0b:19:b7:e5:e6:3f:81:d2:da:a8:6f:5f:0c:6a:
c5:96:82:0f:b6:4a:31:f3:94:13:f1:32:5d:5a:d0:
2c:82:ce:5b:ca:c7:96:bb:12:0d:6d:9e:1a:de:51:
69:e9:5a:36:3e:42:f6:70:cc:4a:01:41:a9:20:ee:
83:b0:05:8f:86:54:1c:42:7d:15:52:b0:46:44:07:
ed:ab:c2:ab:a2:da:75:6b:38:6e:7e:36:08:60:a4:
d1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:6A:49:F1:F7:6D:72:9A:EE:3B:E6:FA:BC:4A:DF:E0:89:32:C6:BF
X509v3 Authority Key Identifier:
keyid:BE:3C:54:D1:ED:CA:69:2F:44:C9:DA:38:34:02:C2:4F:DE:72:35:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjxU0e3KaS9Eydo4NALCT95yNQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:0f:9b:64:74:d7:12:81:0a:3d:cd:f2:14:a2:0e:4d:31:9e:
b4:05:ce:3a:2e:c5:ec:5b:bc:d8:e5:f9:34:7c:16:c0:f0:18:
c3:17:8d:38:24:9d:4b:33:da:6a:cb:2e:a8:60:72:aa:6c:1a:
f6:a1:cb:21:5d:08:e2:53:63:fb:9b:b9:60:ac:48:29:8f:64:
dc:d4:a3:a3:34:10:a3:41:81:82:46:74:d4:ce:da:ed:f8:80:
7d:59:2d:3e:8b:e0:a8:18:19:8c:f3:d5:ed:33:c5:92:7b:64:
55:77:2d:e5:31:8d:35:1b:d4:3d:6d:2a:38:6d:07:bd:f0:18:
ca:06:5a:c0:f0:47:19:86:f8:1e:da:69:64:2c:6b:27:45:7d:
f0:51:6b:b7:c6:a7:1c:9f:ef:2d:12:3d:50:26:27:64:30:48:
40:42:fa:89:b6:8d:dc:83:c6:25:99:1e:b8:87:1b:95:d2:8d:
a9:4d:2e:86:0c:c9:a7:5d:c1:2b:90:1c:55:ec:6b:9f:e6:ee:
a5:a0:28:e6:b2:e0:0a:5c:3a:c4:b1:96:60:11:8f:48:17:8e:
29:f9:7c:a0:47:3a:84:d1:b0:e5:67:1e:b3:bb:a7:a9:12:42:
c4:65:83:31:8d:86:79:08:b4:b3:05:e9:fc:8c:7c:93:08:83:
13:8c:9b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 21:14:21 2025 by rpki-client