Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
File: vf89luiqFB0ixCQq7_eK9x74skQ.mft (raw, json)
Hash identifier: UIqkjIZUEhQz50tEYCaMnCtf0sjkFEsBQic3kdV3CDQ=
Subject key identifier: 21:C7:7F:45:CA:72:D4:60:BF:1F:22:6D:47:8A:14:C7:34:2C:DA:83
Authority key identifier: BD:FF:3D:96:E8:AA:14:1D:22:C4:24:2A:EF:F7:8A:F7:1E:F8:B2:44
Certificate issuer: /CN=bdff3d96e8aa141d22c4242aeff78af71ef8b244
Certificate serial: 0197C6817ECD2AF40D6922E96D6137727EDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vf89luiqFB0ixCQq7_eK9x74skQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
Manifest number: 1551
Signing time: Tue 01 Jul 2025 15:01:04 +0000
Manifest this update: Tue 01 Jul 2025 15:01:04 +0000
Manifest next update: Wed 02 Jul 2025 15:01:04 +0000
Files and hashes: 1: 41AytB41hodYM5wYhqpxuiF8N9s.roa (hash: OnxInRURjXFa44Bu3c4RrKsYyRXWI0CzeYkFHBMxcR8=)
2: vf89luiqFB0ixCQq7_eK9x74skQ.crl (hash: XewOadYKdGkjppy7pEi8axcW56OSeZIDhoGVogkv3is=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vf89luiqFB0ixCQq7_eK9x74skQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:81:7e:cd:2a:f4:0d:69:22:e9:6d:61:37:72:7e:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdff3d96e8aa141d22c4242aeff78af71ef8b244
Validity
Not Before: Jul 1 15:01:04 2025 GMT
Not After : Jul 2 15:01:04 2025 GMT
Subject: CN=21c77f45ca72d460bf1f226d478a14c7342cda83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:2b:1e:80:60:1b:6f:1a:ce:eb:67:42:7b:1e:
2b:ff:21:d2:b9:ec:58:08:41:3a:fd:f1:1c:4c:ee:
2d:5e:c7:67:02:0f:de:6e:ef:80:ac:f5:b8:dd:bc:
21:62:21:d1:80:c3:c9:6c:45:f7:68:a2:04:30:1b:
a2:3b:3a:a7:6e:9f:1f:8f:c9:87:a6:e2:85:d0:04:
ba:66:1f:c0:21:ac:7f:e3:f6:f3:6d:86:c7:0a:e2:
64:7b:33:4c:51:92:09:d9:0b:a9:06:e7:a9:5d:c8:
d2:a2:46:67:bf:7a:07:2e:72:ed:d1:af:18:1d:4e:
1f:c3:47:1b:36:7f:2a:26:ff:3b:e4:ad:c5:1f:65:
c3:4a:02:85:df:0e:b9:b2:a2:12:30:2e:87:54:ef:
40:38:f7:90:62:bc:f4:a9:ac:d3:b8:49:f6:77:cd:
5c:10:96:cf:c8:f0:06:27:86:43:ea:24:a1:01:62:
9a:dc:0d:05:70:16:80:fb:6a:33:d0:36:35:a2:6f:
bc:b8:d5:43:29:fc:f0:78:88:7b:54:4f:fe:71:52:
b8:6b:9a:d9:5e:26:32:98:20:d7:13:34:60:de:4c:
61:a8:51:55:94:16:5c:21:e8:f3:b0:2e:fc:49:f9:
52:89:b6:e4:b7:a9:5e:29:40:a8:87:8d:da:9e:1d:
8c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:C7:7F:45:CA:72:D4:60:BF:1F:22:6D:47:8A:14:C7:34:2C:DA:83
X509v3 Authority Key Identifier:
keyid:BD:FF:3D:96:E8:AA:14:1D:22:C4:24:2A:EF:F7:8A:F7:1E:F8:B2:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vf89luiqFB0ixCQq7_eK9x74skQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:f5:e3:d2:34:ec:16:12:e6:0c:b0:14:d1:2e:7c:a2:05:e6:
7e:69:de:fb:2c:33:57:da:f3:94:f5:30:b3:2b:dc:66:b8:ee:
8e:cd:e2:6d:b0:ec:93:4d:55:23:93:6c:e3:f5:91:80:c4:6a:
2d:f3:a8:47:bb:a9:a4:4e:a7:75:58:c2:e9:dc:83:2e:cf:98:
b4:88:59:54:c5:05:1d:48:fd:56:9a:f6:3c:02:86:ad:e2:90:
f6:87:91:19:13:8c:eb:bb:17:8f:38:57:06:8a:88:97:18:2b:
5d:a7:73:54:ff:0e:11:2b:21:d2:05:a5:80:86:e2:49:7d:41:
16:11:9a:dc:42:4f:89:02:b4:9f:97:80:13:8a:67:9d:e1:31:
9b:41:32:a3:3b:6f:93:4a:b7:c7:ef:b2:9c:8a:3f:dc:dd:e8:
8f:c3:ec:3e:fe:92:2a:7d:a9:33:f1:a7:6c:bf:3d:f4:be:91:
0d:dd:bd:78:1d:3a:ee:64:57:e0:ac:00:5d:e1:92:90:32:ee:
e6:2e:ab:2c:4d:1c:25:b5:c7:f0:59:4b:7a:db:bd:1e:de:6e:
f1:88:9e:4a:f1:4f:d6:d6:18:0e:4c:ae:c2:f2:ac:34:a7:d7:
1d:95:4b:e8:1e:96:50:37:43:47:34:66:fa:a2:a2:fc:b9:ff:
49:c8:82:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 17:50:46 2025 by rpki-client