Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.mft
File: vIwagDL1fyKwFFSmXvMt6ndJbQs.mft (raw, json)
Hash identifier: TUu7ZMpVynZHNNKe0yBzgf+ao0KKGjdxXzOXeiyA+qM=
Subject key identifier: 77:EC:D4:CD:32:E1:57:E0:5D:AD:49:D9:E7:E3:70:67:9D:C4:41:CA
Authority key identifier: BC:8C:1A:80:32:F5:7F:22:B0:14:54:A6:5E:F3:2D:EA:77:49:6D:0B
Certificate issuer: /CN=bc8c1a8032f57f22b01454a65ef32dea77496d0b
Certificate serial: 0197B9338982767D81BBC3425E11D4756C98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIwagDL1fyKwFFSmXvMt6ndJbQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.mft
Manifest number: 08EA
Signing time: Sun 29 Jun 2025 01:00:51 +0000
Manifest this update: Sun 29 Jun 2025 01:00:51 +0000
Manifest next update: Mon 30 Jun 2025 01:00:51 +0000
Files and hashes: 1: 87EiEbuhBkMDFm619edEsUyoB7Y.roa (hash: iu5N7p/QfYR3g8fpVRiIN4OpWGAgMRa+uUZVim92tYw=)
2: hhHnsqFssAy3cZ6p2eic8J_5Jkg.roa (hash: 4+RUythcb8WdsV0R43hgKvkcYTcHEmIS4/pDs5LGxZk=)
3: vIwagDL1fyKwFFSmXvMt6ndJbQs.crl (hash: 2rZUgaEbedp9emODdy2xhFn3dYNSoFHKgle2jlAFejU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/vIwagDL1fyKwFFSmXvMt6ndJbQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:33:89:82:76:7d:81:bb:c3:42:5e:11:d4:75:6c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc8c1a8032f57f22b01454a65ef32dea77496d0b
Validity
Not Before: Jun 29 01:00:51 2025 GMT
Not After : Jun 30 01:00:51 2025 GMT
Subject: CN=77ecd4cd32e157e05dad49d9e7e370679dc441ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:78:62:27:e1:b1:37:eb:92:b7:31:7f:23:27:
43:46:7e:49:ac:39:a4:fe:d5:5c:3b:97:3b:39:9f:
c5:2a:7b:8f:60:d3:49:18:1a:fa:e0:d7:1c:d6:bb:
7b:db:32:98:65:79:4f:1b:f4:74:50:91:29:ca:8c:
f0:a1:b7:db:36:f5:72:ea:e4:03:84:51:5b:17:e7:
36:20:78:28:4d:13:c8:89:9b:16:0d:4c:d3:6d:fe:
88:c7:c9:90:f5:5e:2a:37:a4:06:59:f8:b7:9c:2e:
62:46:24:93:06:ba:8a:17:84:23:9a:c2:d4:56:2a:
06:1a:cc:76:86:95:2f:89:64:8d:30:70:c8:35:93:
6c:94:db:26:6c:b4:2f:0c:96:7f:fc:58:09:02:0f:
7f:19:59:0d:88:2e:ab:9c:1b:2b:fe:a5:33:fa:fd:
37:6a:77:7e:34:c6:2a:f0:8f:f5:ca:d4:8e:6f:4c:
b5:88:37:84:47:e4:49:1a:a5:5c:32:1d:7b:cb:87:
be:31:d7:dc:f1:95:b9:1f:ec:0e:83:8c:e6:9a:4c:
f1:ac:76:f2:99:d5:23:5f:7b:1f:65:a8:80:99:80:
88:f3:9b:59:39:49:02:d8:73:19:6f:6f:4b:89:49:
b5:98:87:4a:8a:a6:6a:29:04:d1:1a:f2:8a:fb:50:
00:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:EC:D4:CD:32:E1:57:E0:5D:AD:49:D9:E7:E3:70:67:9D:C4:41:CA
X509v3 Authority Key Identifier:
keyid:BC:8C:1A:80:32:F5:7F:22:B0:14:54:A6:5E:F3:2D:EA:77:49:6D:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIwagDL1fyKwFFSmXvMt6ndJbQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:37:75:91:7a:36:0d:2a:fd:f7:84:31:4a:10:6f:c4:76:70:
21:4a:23:f0:ef:17:c7:bb:e9:ff:a4:5f:90:96:8d:64:82:b8:
b7:f9:28:84:74:90:70:e7:6a:b6:0f:a5:88:52:06:25:2e:e3:
13:f0:89:bc:10:5b:db:4e:c7:4c:70:85:6f:b6:bc:89:bd:1a:
f6:7c:21:e4:99:76:76:34:b5:87:6e:e1:d3:99:0d:32:16:8c:
67:4d:4b:64:52:c9:fd:7e:2d:54:10:c2:aa:13:59:ea:79:a6:
42:ab:e2:98:20:02:a8:73:11:d8:3a:d0:0f:2b:55:b5:66:6c:
e2:a2:2d:88:97:83:b9:24:9a:8f:46:af:06:a8:2f:d3:16:f6:
7e:84:11:79:e4:a2:b1:f5:93:f5:fd:01:e8:1a:66:3d:3a:48:
f9:5d:ba:ab:06:c7:55:6a:c0:d2:36:50:33:4b:8b:cf:64:f3:
05:f5:ee:0e:45:7e:be:e7:f8:35:98:38:15:f9:ac:f0:c8:db:
0b:94:64:ed:30:07:9e:7d:3f:65:ad:94:d4:be:0c:c0:3d:9b:
a5:71:0f:2b:f3:7e:22:5d:2d:e4:e0:30:7d:9f:b6:08:03:c5:
37:5b:ef:ab:08:98:63:7d:3c:c1:3c:18:c2:f4:97:7b:1f:4a:
b2:26:06:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:22:05 2025 by rpki-client