Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.mft
File: vG0u13lNMhfPqv4crVP3Vbgs46k.mft (raw, json)
Hash identifier: DN+3OJHpQ/97za7silYOhAmSe3r+2zIm4i7QQeig16w=
Subject key identifier: A0:42:BC:A0:A3:CF:58:49:25:E9:73:1F:B5:16:B0:5C:2C:40:58:8D
Authority key identifier: BC:6D:2E:D7:79:4D:32:17:CF:AA:FE:1C:AD:53:F7:55:B8:2C:E3:A9
Certificate issuer: /CN=bc6d2ed7794d3217cfaafe1cad53f755b82ce3a9
Certificate serial: 0197B7EA50CF9FB84CD9AC8A8924A695A8B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vG0u13lNMhfPqv4crVP3Vbgs46k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 19:01:15 +0000
Manifest this update: Sat 28 Jun 2025 19:01:15 +0000
Manifest next update: Sun 29 Jun 2025 19:01:15 +0000
Files and hashes: 1: Rfx73to5lynfa5P988aJIcpZHW0.roa (hash: fb46D6K33gqqGx/M4AgtMP1UJSgJ24dkYkKRuFAfTRM=)
2: vG0u13lNMhfPqv4crVP3Vbgs46k.crl (hash: K3hUPmU2E44Yb2ztCn2dSPTsBMABrAuhlCO03xwbxbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.mft
rsync://rpki.ripe.net/repository/DEFAULT/vG0u13lNMhfPqv4crVP3Vbgs46k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:50:cf:9f:b8:4c:d9:ac:8a:89:24:a6:95:a8:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc6d2ed7794d3217cfaafe1cad53f755b82ce3a9
Validity
Not Before: Jun 28 19:01:15 2025 GMT
Not After : Jun 29 19:01:15 2025 GMT
Subject: CN=a042bca0a3cf584925e9731fb516b05c2c40588d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8b:cb:62:89:03:a0:b4:34:15:a7:0d:2e:82:
e9:5f:a4:99:f4:1b:31:ee:7b:e0:27:c5:5a:94:06:
17:45:04:54:fd:df:00:5e:aa:30:61:8c:1e:3a:7d:
21:af:b1:e4:b0:e5:b1:50:a5:54:9f:a2:60:9d:f9:
fa:07:90:89:df:1d:47:f9:2a:86:d2:e9:be:f9:9c:
50:d3:04:2f:74:39:73:17:41:19:37:f9:da:a1:d1:
88:99:54:28:37:f0:d5:11:26:47:c1:65:e4:ef:0e:
f5:71:2b:d4:66:12:d2:25:c8:b8:46:65:3f:69:97:
8b:0d:ac:0a:df:52:5c:ae:d2:e5:87:8f:0f:93:0d:
0b:25:02:9b:61:62:e5:f8:83:97:41:28:38:4e:24:
6b:75:28:08:89:c6:f3:80:91:22:d6:c4:c7:55:04:
59:80:fa:b1:08:f9:d1:01:00:74:67:72:98:44:1d:
bc:0e:e4:6f:83:17:97:ac:4d:0b:33:7a:07:df:83:
56:28:3d:27:23:b7:09:d1:76:25:fa:ce:ea:db:fc:
e1:3e:ef:1e:61:09:2b:04:d2:60:ad:70:79:5f:ef:
a9:0b:e3:28:e9:40:10:61:6c:7e:6f:55:66:c4:56:
37:80:2c:77:09:d8:de:94:69:54:a5:06:4e:5f:18:
68:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:42:BC:A0:A3:CF:58:49:25:E9:73:1F:B5:16:B0:5C:2C:40:58:8D
X509v3 Authority Key Identifier:
keyid:BC:6D:2E:D7:79:4D:32:17:CF:AA:FE:1C:AD:53:F7:55:B8:2C:E3:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vG0u13lNMhfPqv4crVP3Vbgs46k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:01:13:27:f9:3d:ab:c5:1a:39:b8:ec:6f:5b:eb:4b:2c:3d:
66:14:40:90:b2:68:b6:28:49:e6:eb:87:19:56:cc:89:41:b0:
d0:70:c8:aa:d0:35:6c:a6:3a:83:a9:06:00:70:df:e0:19:00:
bb:ad:22:ae:30:90:ba:14:ab:fe:f7:75:c2:89:0a:b8:03:c2:
b0:8c:78:4e:34:6a:ed:d6:b1:a6:88:d0:f6:f6:47:00:77:63:
05:1b:dd:c9:49:a9:22:0c:c5:ef:52:b2:bb:f9:60:4b:38:cc:
20:e9:a8:88:4f:21:fc:67:b1:c0:17:ac:2f:ce:cc:ff:79:69:
0c:31:ec:94:84:c6:9f:42:65:44:b3:0f:f1:af:dd:b7:5d:16:
6f:40:fd:a3:4a:fa:09:92:4d:96:d6:26:46:e8:e0:a1:b8:26:
5f:ce:3d:6a:5c:0c:cd:23:31:f1:3f:40:d1:bf:1a:68:65:41:
d2:0b:af:a4:f5:71:d1:ca:56:f8:30:66:d0:d1:77:61:cc:b3:
0c:21:07:ab:32:a8:f6:e0:d6:1b:ac:ee:20:0f:95:76:6c:3a:
5d:47:27:20:c4:52:34:a2:0a:d9:c2:e8:a6:16:c5:6f:e1:d4:
d6:ff:0d:0c:e9:c7:5d:17:8d:7a:ab:24:21:18:90:80:14:1e:
b1:3c:8b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:22:01 2025 by rpki-client