Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.mft
File: vj908rbk4o6f9so8yjpdeMosrWo.mft (raw, json)
Hash identifier: aX/0rkFopWYS5lsRZiaixLwl5vKi0mJcLsXtOMYtYdE=
Subject key identifier: 1E:2A:DF:06:09:2F:3A:C9:D2:B7:59:C6:83:56:6C:9C:B1:7D:E7:81
Authority key identifier: BE:3F:74:F2:B6:E4:E2:8E:9F:F6:CA:3C:CA:3A:5D:78:CA:2C:AD:6A
Certificate issuer: /CN=be3f74f2b6e4e28e9ff6ca3cca3a5d78ca2cad6a
Certificate serial: 0197B70E885F5BA9512D5A3A2E3B48648282
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vj908rbk4o6f9so8yjpdeMosrWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.mft
Manifest number: 0922
Signing time: Sat 28 Jun 2025 15:01:12 +0000
Manifest this update: Sat 28 Jun 2025 15:01:12 +0000
Manifest next update: Sun 29 Jun 2025 15:01:12 +0000
Files and hashes: 1: XeXaIv0GnCQWCewZa3XGZvVcOuU.roa (hash: IlSm1MC8XpLI7JpFnpnOEj3N8KdmO1O/PRbAlZC1Yqs=)
2: keiUHgNWXQG1tCnd_1r6jW3ByFc.roa (hash: UWHI9ulMx4qU9scGVCWFH3JBiygO7K8ZUkSeDS3PRRY=)
3: vj908rbk4o6f9so8yjpdeMosrWo.crl (hash: 8dHc14L+Ru3mcO0jzgj4ff03dCjJKnTPMYB7cPeNYOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vj908rbk4o6f9so8yjpdeMosrWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:88:5f:5b:a9:51:2d:5a:3a:2e:3b:48:64:82:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be3f74f2b6e4e28e9ff6ca3cca3a5d78ca2cad6a
Validity
Not Before: Jun 28 15:01:12 2025 GMT
Not After : Jun 29 15:01:12 2025 GMT
Subject: CN=1e2adf06092f3ac9d2b759c683566c9cb17de781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:0b:d3:3c:9c:82:49:ee:98:70:c9:23:12:3c:
f9:aa:9d:29:da:ac:7a:f5:0d:cc:00:fc:be:10:f1:
c1:7b:73:e2:a1:e9:98:21:7f:03:14:a5:f6:05:33:
7a:da:33:80:53:b3:d5:42:98:89:4c:41:a3:87:92:
1c:6e:31:12:f1:a0:11:65:d4:4f:c7:7c:d3:6b:c4:
c2:4f:c8:11:5f:19:1d:9c:7a:a4:ae:fd:4d:9d:2c:
0d:9b:2c:a9:9a:ef:9e:d0:57:0c:a4:93:e4:dc:d5:
44:1d:95:27:4a:6d:53:d6:52:3b:b1:6c:ce:93:c3:
a6:93:5c:6a:ed:1b:63:dd:99:bb:32:e3:60:65:9e:
e9:f8:91:e2:a4:32:b3:69:3a:05:65:43:e3:70:5e:
51:1b:79:b2:7c:aa:d5:20:b5:f5:be:b6:42:c9:77:
6c:67:87:25:f2:28:bc:7a:fc:d5:ad:60:09:3d:0c:
0f:f7:e9:da:1d:03:87:69:cc:44:d1:34:2c:a4:5f:
84:b0:a1:d1:33:cd:e0:78:d3:77:de:1d:31:ee:cc:
e3:13:21:46:c9:97:58:5f:98:ba:a9:e7:1a:91:6e:
13:88:2b:b5:d5:a2:b2:78:69:d9:46:c7:f2:b2:de:
de:87:a1:1f:20:ae:8b:b5:05:1d:2b:1f:21:1c:52:
b2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:2A:DF:06:09:2F:3A:C9:D2:B7:59:C6:83:56:6C:9C:B1:7D:E7:81
X509v3 Authority Key Identifier:
keyid:BE:3F:74:F2:B6:E4:E2:8E:9F:F6:CA:3C:CA:3A:5D:78:CA:2C:AD:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vj908rbk4o6f9so8yjpdeMosrWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:2b:02:0a:d5:a6:f4:d1:82:9e:23:23:54:05:b3:08:dc:90:
a2:a7:4f:9a:ea:08:34:93:de:d4:9f:e0:f6:b0:17:f5:6e:95:
4c:2c:94:ec:1b:c4:e1:ab:6d:07:4d:d2:d0:e7:33:bf:b4:0f:
a2:71:d9:e3:43:4b:61:93:65:9a:93:9f:ac:3d:bd:9b:b5:0d:
3f:21:6d:c9:0d:1e:96:7b:e4:94:ca:11:e7:77:d1:c2:eb:02:
5c:6f:e7:cf:dc:ef:e0:7e:bd:c8:7d:b8:60:a6:87:b7:21:c1:
68:0f:ae:7c:94:97:21:b8:13:bb:59:1b:4c:f1:eb:2b:7f:6a:
ab:68:6f:e5:8a:6c:66:37:1f:43:2f:84:8d:c8:ca:7d:8e:ac:
fd:be:23:72:2b:d1:ac:68:6b:ae:d7:d9:1d:7c:f2:cb:66:d6:
f0:4e:e0:66:ca:a2:58:67:95:53:ac:31:7c:ee:15:e8:f8:23:
6b:63:08:64:ef:ad:b1:d4:8a:6b:15:9e:67:3b:f8:2f:f1:c9:
7d:54:27:f4:cd:ea:4c:0b:f7:21:0a:e1:9c:90:8a:3f:fd:ff:
a5:78:02:5d:10:ce:a8:d2:0d:3c:bc:d9:fd:99:6e:a4:2f:5d:
4f:8f:a5:74:35:b8:7d:45:38:fb:cf:7e:ee:1c:ef:72:21:81:
a2:d7:33:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:56:54 2025 by rpki-client