Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft
File: dv4wVehykAAOMof3q1iDgCpapto.mft (raw, json)
Hash identifier: 1NhW9QBnMrhLPTcP9HQlPDmt2qx28Rm/mn4Ju4tTmAI=
Subject key identifier: 22:EE:D2:40:7B:9E:3C:D1:54:13:4B:A2:18:4D:5B:E8:F5:12:DE:4A
Authority key identifier: 76:FE:30:55:E8:72:90:00:0E:32:87:F7:AB:58:83:80:2A:5A:A6:DA
Certificate issuer: /CN=76fe3055e87290000e3287f7ab5883802a5aa6da
Certificate serial: 0197C236F06545CB65D5B22E264A819ECE72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dv4wVehykAAOMof3q1iDgCpapto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft
Manifest number: 08E2
Signing time: Mon 30 Jun 2025 19:01:09 +0000
Manifest this update: Mon 30 Jun 2025 19:01:09 +0000
Manifest next update: Tue 01 Jul 2025 19:01:09 +0000
Files and hashes: 1: 8nt8dsbMeiqtSt6KoDNGgs5pyTM.roa (hash: RvFtibhd8tSawl3iSjZ76rX4z9HhG8SM7MwleTD5nY0=)
2: dv4wVehykAAOMof3q1iDgCpapto.crl (hash: nd1oKRCYJ6Z0IKIOpBd7YdxJSjoGZt/+t6mXQYMFeKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft
rsync://rpki.ripe.net/repository/DEFAULT/dv4wVehykAAOMof3q1iDgCpapto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 15:11:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:36:f0:65:45:cb:65:d5:b2:2e:26:4a:81:9e:ce:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76fe3055e87290000e3287f7ab5883802a5aa6da
Validity
Not Before: Jun 30 19:01:09 2025 GMT
Not After : Jul 1 19:01:09 2025 GMT
Subject: CN=22eed2407b9e3cd154134ba2184d5be8f512de4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ca:79:09:1f:bf:63:ea:80:59:ba:f7:2f:2e:
27:13:5d:61:aa:50:7d:7c:f2:9a:c4:e6:1d:6e:1b:
c1:28:97:3e:cd:44:aa:ba:47:4f:54:4a:38:a7:9f:
18:66:60:fd:2e:b1:cb:bb:3d:a5:71:41:3a:f6:57:
be:d3:54:6c:ae:6f:65:a5:5a:7c:1a:bb:bc:f1:4f:
0d:19:27:b4:71:63:a2:d2:3e:77:91:1c:b4:c6:d2:
6f:5b:73:49:4f:40:6d:5f:27:47:54:87:68:2d:a6:
05:6e:97:de:06:a7:0d:6e:fb:40:94:de:c8:30:80:
9f:97:27:ba:19:ba:25:3a:7a:14:51:fc:b8:10:4e:
0c:7d:76:2e:3e:d5:a7:b0:5b:22:df:fc:76:a5:c8:
40:7a:e3:35:c7:d8:06:74:8b:70:f3:5f:7b:ec:3f:
ca:bb:6a:77:6c:90:15:13:c9:a5:9e:35:e7:d8:31:
c2:49:b2:f2:2d:cb:d8:65:09:f8:36:80:d2:79:37:
50:4f:8d:92:08:59:b7:c5:ae:9b:35:4b:61:dc:e4:
4f:08:bc:d0:35:4c:c0:f9:8d:79:67:95:60:96:3c:
91:f5:52:ce:c8:8c:cc:d6:16:05:31:7f:cc:c3:3e:
82:24:4d:62:38:7a:3c:36:99:26:e0:ce:5d:6e:17:
c8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:EE:D2:40:7B:9E:3C:D1:54:13:4B:A2:18:4D:5B:E8:F5:12:DE:4A
X509v3 Authority Key Identifier:
keyid:76:FE:30:55:E8:72:90:00:0E:32:87:F7:AB:58:83:80:2A:5A:A6:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dv4wVehykAAOMof3q1iDgCpapto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:cc:64:f9:b5:2d:7e:4d:00:81:2d:50:0c:02:8f:38:dc:47:
2f:82:9b:91:7c:08:41:4f:b1:5c:30:ab:f8:53:38:96:75:5f:
be:d2:ce:58:c6:c4:a9:d1:93:b2:cf:30:93:53:73:99:92:1d:
86:66:fd:24:d0:8d:80:8d:eb:7e:8e:c0:00:62:dd:00:8e:f1:
9b:cb:73:21:cc:b8:74:a7:b2:27:9c:dd:fe:92:17:5e:d0:83:
4b:84:c6:fc:35:5e:45:85:65:ca:f3:dc:d5:db:af:7d:5e:21:
34:f6:43:72:67:dc:59:6d:f3:68:01:fb:65:d3:0b:fe:1b:ac:
8e:de:f7:e2:c1:66:fe:d8:1e:f0:7a:52:b9:e4:ab:fe:45:86:
9e:5e:9f:f3:0e:1f:bd:40:0c:a3:e3:8e:2e:ea:a4:7c:36:58:
bd:89:9d:e4:8c:27:f3:96:c4:b9:3a:dd:01:63:41:ea:19:33:
87:f2:aa:41:15:b0:ff:c3:26:92:5c:0f:99:ed:e0:5e:38:75:
98:52:ce:40:87:c8:f1:a5:ae:28:16:98:74:97:87:17:87:4f:
be:47:f9:bc:66:ce:27:28:32:b2:07:38:9f:2e:27:cf:9e:18:
9d:24:c8:7d:0d:07:6a:09:4a:b7:89:ee:68:a7:83:26:dd:32:
03:78:cf:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 01:06:12 2025 by rpki-client