Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/88c5b7-b126-4ed3-9d7a-e5ba4bfa171a/1/vZdNyMZF7SNRRcqqE1W6hfUldjQ.mft
File: vZdNyMZF7SNRRcqqE1W6hfUldjQ.mft (raw, json)
Hash identifier: 0lE4jcoBtbRhZNoQ72pxO9S09trLK8PFrVwzn21kyIo=
Subject key identifier: 3D:B5:27:C0:9D:75:BE:CA:83:4D:B4:87:DE:2C:46:B8:18:CC:E1:EE
Authority key identifier: BD:97:4D:C8:C6:45:ED:23:51:45:CA:AA:13:55:BA:85:F5:25:76:34
Certificate issuer: /CN=bd974dc8c645ed235145caaa1355ba85f5257634
Certificate serial: 0197C424F257BEF7902D1FD210CA5DE8FAC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZdNyMZF7SNRRcqqE1W6hfUldjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/88c5b7-b126-4ed3-9d7a-e5ba4bfa171a/1/vZdNyMZF7SNRRcqqE1W6hfUldjQ.mft
Manifest number: 12D8
Signing time: Tue 01 Jul 2025 04:00:44 +0000
Manifest this update: Tue 01 Jul 2025 04:00:44 +0000
Manifest next update: Wed 02 Jul 2025 04:00:44 +0000
Files and hashes: 1: uulQ7vEdGhsy6Awn7kfrVQnLiMU.roa (hash: tZVgJDesulw5XmQQyaxeLBz/Dpnfz7Z3L4uwLGw8CzQ=)
2: vZdNyMZF7SNRRcqqE1W6hfUldjQ.crl (hash: YwHnrw/KKTkB7I9lCgtTrhnCGfCkZiY0MCKYtKgzd44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/88c5b7-b126-4ed3-9d7a-e5ba4bfa171a/1/vZdNyMZF7SNRRcqqE1W6hfUldjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/88c5b7-b126-4ed3-9d7a-e5ba4bfa171a/1/vZdNyMZF7SNRRcqqE1W6hfUldjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZdNyMZF7SNRRcqqE1W6hfUldjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:24:f2:57:be:f7:90:2d:1f:d2:10:ca:5d:e8:fa:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd974dc8c645ed235145caaa1355ba85f5257634
Validity
Not Before: Jul 1 04:00:44 2025 GMT
Not After : Jul 2 04:00:44 2025 GMT
Subject: CN=3db527c09d75beca834db487de2c46b818cce1ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f5:1c:9b:b9:96:ba:9c:65:e9:16:a0:ef:fb:
87:46:27:55:37:8e:cb:e2:0f:b9:c2:8d:1d:cb:8a:
e3:dd:13:8e:3f:26:a1:68:9a:d9:71:a4:8f:54:f5:
70:29:b8:65:12:e0:06:9b:c1:18:dd:76:2c:41:8b:
e0:ee:0f:0d:27:e9:8b:45:2a:2c:b0:6a:a8:b5:8e:
10:f0:29:aa:31:35:68:58:b3:31:d3:c4:d5:ab:8d:
60:9d:57:a7:9d:d3:f8:bb:12:cc:f5:4b:03:96:2d:
e9:24:01:31:95:85:d6:a0:96:9a:b5:11:2b:2c:2f:
46:af:f9:92:f3:e1:aa:0b:76:9e:08:f7:9d:7f:7d:
d4:a2:35:b8:8c:c3:17:b3:59:03:f9:f3:d7:18:75:
ce:8a:da:a5:66:d1:19:8a:32:d8:ee:c0:fe:50:e9:
a6:85:17:06:00:83:0e:56:f6:e2:ed:0e:c3:f1:ef:
d4:3b:4d:7d:92:c4:64:f8:64:a0:25:97:d4:94:87:
ff:c0:71:55:d8:c6:db:d0:1c:a4:9f:6f:2b:3f:25:
72:9e:70:f1:1e:d2:74:bb:e6:8b:2a:8a:71:00:6f:
93:17:3a:06:af:9e:29:46:21:af:1d:90:6f:12:f6:
0d:2f:7a:fd:a7:d5:e2:12:ae:61:1e:c8:b7:b1:3a:
21:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B5:27:C0:9D:75:BE:CA:83:4D:B4:87:DE:2C:46:B8:18:CC:E1:EE
X509v3 Authority Key Identifier:
keyid:BD:97:4D:C8:C6:45:ED:23:51:45:CA:AA:13:55:BA:85:F5:25:76:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZdNyMZF7SNRRcqqE1W6hfUldjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/88c5b7-b126-4ed3-9d7a-e5ba4bfa171a/1/vZdNyMZF7SNRRcqqE1W6hfUldjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/88c5b7-b126-4ed3-9d7a-e5ba4bfa171a/1/vZdNyMZF7SNRRcqqE1W6hfUldjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:fe:da:7e:9f:2f:c8:78:1d:26:24:ce:ec:fb:54:ba:d5:e0:
fe:8f:27:e5:6e:6a:0a:71:a2:d6:d7:9d:5b:07:a6:c6:ea:f4:
7a:a7:fc:a0:8d:44:95:15:1a:9d:4c:9a:fa:07:19:8f:06:45:
a7:4e:32:8f:6a:1e:6e:c3:2d:08:72:ad:e9:03:69:38:88:51:
36:53:ae:c5:6c:89:e6:0b:a8:b2:02:d9:ae:e1:8c:0f:37:ab:
81:e2:39:64:95:e1:19:c2:a5:c9:ba:19:84:27:6f:15:e8:4b:
f9:18:79:88:3c:03:65:4a:2a:1b:82:d9:40:61:53:8e:e0:98:
80:c6:3c:1c:1c:1e:3b:89:a8:9f:50:07:fb:35:49:71:d8:b0:
e2:8e:a9:3a:e1:56:85:06:56:69:82:b4:7f:ba:36:2a:c9:23:
a3:20:2f:2e:5f:9d:d8:74:b3:e1:eb:23:22:64:31:a6:84:6c:
32:a0:30:cb:fd:cb:5b:1d:e1:89:36:56:d3:ed:48:e6:47:21:
89:43:a2:91:54:3f:a0:19:3b:78:f5:ac:c3:bb:3c:0f:b0:4c:
b6:c6:99:a7:7e:ad:a1:86:3b:f2:21:7a:2d:29:db:a2:65:e0:
ba:91:86:f6:2f:a0:4b:da:1f:1b:40:a7:7d:d6:f1:c9:b6:b8:
8e:e6:49:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 07:02:55 2025 by rpki-client