Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.mft
File: vmWzDa10rHadS1syMS2o-oGrM9E.mft (raw, json)
Hash identifier: nA80XCASoS+GC8GT+VmYLNrCR5oPx6ya7liwCyehxhg=
Subject key identifier: 1B:97:C1:78:85:BE:FF:58:3C:A8:73:F1:BB:40:F4:21:D0:16:EA:D7
Authority key identifier: BE:65:B3:0D:AD:74:AC:76:9D:4B:5B:32:31:2D:A8:FA:81:AB:33:D1
Certificate issuer: /CN=be65b30dad74ac769d4b5b32312da8fa81ab33d1
Certificate serial: 0197B70F166900249C20D20133DF8F9D87E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vmWzDa10rHadS1syMS2o-oGrM9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.mft
Manifest number: 0B0D
Signing time: Sat 28 Jun 2025 15:01:48 +0000
Manifest this update: Sat 28 Jun 2025 15:01:48 +0000
Manifest next update: Sun 29 Jun 2025 15:01:48 +0000
Files and hashes: 1: gySZz205phomZv7uwZ9DDc75Itk.roa (hash: eO5SMh+ywbk5mzLS6dSPU+KeItuyQY93yBUL4wk+YdY=)
2: vmWzDa10rHadS1syMS2o-oGrM9E.crl (hash: S5B9rOWs4fsEPRpr8k+kf2TaObYqZJYdA1XiEabz9Oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vmWzDa10rHadS1syMS2o-oGrM9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:16:69:00:24:9c:20:d2:01:33:df:8f:9d:87:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be65b30dad74ac769d4b5b32312da8fa81ab33d1
Validity
Not Before: Jun 28 15:01:48 2025 GMT
Not After : Jun 29 15:01:48 2025 GMT
Subject: CN=1b97c17885beff583ca873f1bb40f421d016ead7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:75:2b:c5:6b:74:8c:da:46:ef:8b:06:6c:a8:
45:4b:f1:cb:6e:20:08:58:f5:0a:98:97:6d:32:ed:
0d:6f:54:75:44:a7:35:a2:6e:4a:3e:ae:2e:24:8e:
a0:e3:0f:97:6f:41:f6:bc:98:ee:67:2a:39:96:d5:
fa:2f:af:1c:de:a8:f5:ca:fd:c2:8d:ab:c7:4b:e8:
92:7a:6c:15:64:00:f6:dd:94:fc:74:c2:e9:83:6c:
87:e8:b1:5e:b9:6b:89:57:0d:fc:1b:ad:c5:17:15:
dd:ed:cf:b6:ec:43:00:99:66:82:ae:bc:01:97:ba:
a6:ef:5c:93:09:4c:fa:00:60:03:74:51:c3:d9:fd:
40:ac:e7:d1:16:91:00:8e:af:a3:c2:6e:ff:57:72:
26:c6:c4:2b:f8:c3:a2:8a:fd:d6:08:52:81:7d:bb:
b4:1b:ad:2f:f9:27:44:b3:7c:6f:56:d2:b0:69:a7:
7a:ef:d4:32:f1:a1:2a:25:94:5b:cc:8c:11:b2:34:
84:ae:1a:52:f1:07:e9:ec:88:06:b7:42:54:9c:04:
76:25:d2:e2:9a:f9:79:e4:55:e0:ca:77:44:a8:1e:
76:eb:e8:62:3f:3c:d1:b8:d9:9f:db:fc:9a:7c:a2:
a4:8f:62:9b:ac:1c:5c:9a:ff:d3:7d:9c:72:bd:d4:
8c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:97:C1:78:85:BE:FF:58:3C:A8:73:F1:BB:40:F4:21:D0:16:EA:D7
X509v3 Authority Key Identifier:
keyid:BE:65:B3:0D:AD:74:AC:76:9D:4B:5B:32:31:2D:A8:FA:81:AB:33:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmWzDa10rHadS1syMS2o-oGrM9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:eb:eb:7e:95:39:fa:f4:e0:6d:4c:f9:3a:36:62:55:b9:ca:
94:19:cc:e1:22:b7:8f:52:f2:a4:5b:b2:a9:ca:de:53:63:39:
1e:b5:16:3f:ee:47:ce:94:ee:cd:ef:b7:b3:10:b6:c0:a0:0f:
f6:71:85:95:fe:79:fe:37:ca:46:d1:dd:dc:c8:c2:ad:d1:e4:
92:a5:ad:55:62:fc:fe:52:8a:75:5a:3d:b5:49:a1:b3:08:6c:
cf:1e:6a:d0:db:8f:11:50:36:5c:42:1a:8e:fe:b4:b1:31:60:
f8:d2:d3:66:54:fe:07:ad:b5:78:64:9c:98:88:8a:cb:51:35:
a5:4c:5e:7f:67:cf:e1:5d:e1:4b:a6:a4:8a:09:3f:9a:8c:9c:
0a:99:63:ec:2a:4a:e1:65:8d:1e:22:ad:7f:4b:7e:68:51:a0:
5f:2e:ee:50:1d:c0:b1:fe:59:18:00:25:96:6d:0a:82:48:13:
cc:2f:6c:00:45:5c:b3:76:f0:df:e3:e8:34:5a:25:2c:4d:4c:
f2:ac:9b:3f:32:9d:fa:7f:b6:fa:b3:32:ce:07:33:26:1e:9e:
e8:c1:8f:1e:03:8a:73:46:3f:fd:8b:a4:55:8c:82:28:83:89:
be:b0:5b:40:5a:32:eb:60:bc:24:a3:fc:a0:47:fa:0d:f9:c9:
f3:ba:87:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:55:50 2025 by rpki-client