Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.mft
File: vEgmB2OhHnewtdfdICukzDAFOLE.mft (raw, json)
Hash identifier: er1p7wkKAE8pbOh2wbWcYQkQT03DSzi01pYuLNpf7j4=
Subject key identifier: 5D:21:AE:F3:12:74:3B:D9:D9:24:77:5E:D0:98:8B:1C:0A:28:40:A9
Authority key identifier: BC:48:26:07:63:A1:1E:77:B0:B5:D7:DD:20:2B:A4:CC:30:05:38:B1
Certificate issuer: /CN=bc48260763a11e77b0b5d7dd202ba4cc300538b1
Certificate serial: 0197B6A0A15C38B5B0E44D71389AC8B07159
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEgmB2OhHnewtdfdICukzDAFOLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.mft
Manifest number: 6A
Signing time: Sat 28 Jun 2025 13:01:09 +0000
Manifest this update: Sat 28 Jun 2025 13:01:09 +0000
Manifest next update: Sun 29 Jun 2025 13:01:09 +0000
Files and hashes: 1: SbG-TfF_crHX7bjktc6Jm6Mw08k.roa (hash: cILCavbni7VMAY2NB/vg63OOb75/V8DMaIDv6gy9of0=)
2: vEgmB2OhHnewtdfdICukzDAFOLE.crl (hash: 03IEc3UmL5I68Ioe8+oZ4qSaRw8iW7h6DIuroZ/2eec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vEgmB2OhHnewtdfdICukzDAFOLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:a1:5c:38:b5:b0:e4:4d:71:38:9a:c8:b0:71:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc48260763a11e77b0b5d7dd202ba4cc300538b1
Validity
Not Before: Jun 28 13:01:09 2025 GMT
Not After : Jun 29 13:01:09 2025 GMT
Subject: CN=5d21aef312743bd9d924775ed0988b1c0a2840a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:45:d4:05:5f:6c:2a:48:14:8a:80:83:47:b9:
e4:2d:31:d4:58:5b:83:1c:04:f9:4a:a3:2f:4c:50:
33:ce:e9:1a:f7:ed:9b:b9:27:91:07:97:c9:9a:dc:
a5:6b:58:4f:52:88:b3:5d:97:f6:30:8d:c6:44:6b:
ed:19:b3:7a:7c:3b:17:19:98:ee:c9:2d:a2:4b:da:
01:12:a8:7e:10:26:3d:7e:77:b9:a7:00:32:0f:c6:
1b:94:37:72:66:88:59:ed:49:90:e0:f8:2d:ed:ab:
a3:ea:b2:42:a2:59:0b:da:d6:f9:30:0e:91:77:8e:
6b:b5:b4:91:7c:06:2c:54:27:8a:84:6a:b5:c5:b5:
a1:b7:4b:f4:3f:32:60:a2:db:dd:05:37:31:e0:ce:
be:54:73:82:bc:58:b3:7c:c2:e3:39:c9:d0:6e:14:
95:73:81:0d:72:25:f1:37:23:2e:0a:88:3f:02:6c:
50:0e:b4:19:41:92:15:39:57:92:73:74:f0:83:cb:
1c:77:1a:59:57:58:6b:64:e3:8f:8c:ca:4d:4f:c0:
bf:45:3b:e0:46:42:9f:bc:03:e1:29:34:29:7d:74:
d1:22:a5:79:0a:d5:c9:2b:c8:53:e9:83:5b:2c:3e:
4a:41:9a:3d:60:68:05:0d:09:f1:8b:1a:46:a9:b4:
ef:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:21:AE:F3:12:74:3B:D9:D9:24:77:5E:D0:98:8B:1C:0A:28:40:A9
X509v3 Authority Key Identifier:
keyid:BC:48:26:07:63:A1:1E:77:B0:B5:D7:DD:20:2B:A4:CC:30:05:38:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEgmB2OhHnewtdfdICukzDAFOLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:17:a6:49:1f:76:3e:b0:89:57:dd:40:5a:e8:e7:16:2a:98:
21:c8:d3:4f:0e:95:ae:56:59:d7:8e:f3:c4:f0:3e:f3:4b:1a:
ce:73:93:74:40:52:fe:72:77:a6:70:97:50:7a:5f:e2:41:d0:
23:3f:60:81:b2:38:1b:24:f8:d6:14:90:9d:ae:b5:13:81:9e:
da:3c:d6:69:ad:ad:4a:74:c2:7f:3e:6a:86:25:92:75:3b:6b:
f9:85:d6:8f:0a:1f:6d:23:40:1f:5a:c1:28:df:4f:91:4b:bf:
92:e9:b2:8f:43:e8:82:09:f7:67:d3:dc:e4:36:52:82:cd:ec:
ce:f7:6b:d2:60:2a:d2:78:e6:82:a6:56:a8:e2:f7:fc:ed:9b:
f2:63:98:da:86:e8:05:b5:c0:ad:a5:97:fe:a9:f4:ca:13:10:
9f:9f:d9:29:f5:8f:00:9c:b1:c5:b2:13:41:c4:9f:1b:0a:44:
94:dc:34:fb:3d:b6:0d:73:3a:4d:61:b4:cd:a0:c1:62:1e:e5:
44:b6:a3:0e:c6:a5:2f:7b:57:2f:03:c3:89:db:86:19:85:02:
99:fe:01:7c:41:93:c9:93:cb:31:f1:87:57:b7:46:a8:80:b0:
12:2f:c7:eb:ee:04:57:e0:bd:23:1d:f7:0c:79:24:cc:28:d0:
9d:da:2d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:36:37 2025 by rpki-client