Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft
File: vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft (raw, json)
Hash identifier: gKKvonxWjLFK11UmoSMwj7xkbO8GzlfhNCMrRi8w3XE=
Subject key identifier: F5:5E:D7:B3:78:F4:8A:3F:49:40:84:75:E0:54:39:EB:0E:B5:2F:24
Authority key identifier: BF:20:E6:4B:18:83:1B:C9:85:27:CB:E0:E1:06:7C:1A:95:D1:68:7D
Certificate issuer: /CN=bf20e64b18831bc98527cbe0e1067c1a95d1687d
Certificate serial: 0197B7EA3BF58826F52A0C12969426163149
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 19:01:10 +0000
Manifest this update: Sat 28 Jun 2025 19:01:10 +0000
Manifest next update: Sun 29 Jun 2025 19:01:10 +0000
Files and hashes: 1: QGrvcoxIsYHGrK6BrR6dYV6XkJM.roa (hash: sWNP0/965vZch5nrsrQ4iKgd5GS8sH4fFHr8G2MSO3w=)
2: vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.crl (hash: tN/qnOXzh0HgVUhlQa3bi54YNFWiLrcfmGWS/bVkiU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:3b:f5:88:26:f5:2a:0c:12:96:94:26:16:31:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf20e64b18831bc98527cbe0e1067c1a95d1687d
Validity
Not Before: Jun 28 19:01:10 2025 GMT
Not After : Jun 29 19:01:10 2025 GMT
Subject: CN=f55ed7b378f48a3f49408475e05439eb0eb52f24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1b:fd:18:6b:36:e9:26:88:fb:37:9b:d8:af:
bc:f8:93:36:82:5b:ba:0e:77:f5:92:9c:e4:de:e4:
ce:5c:16:14:88:5a:76:47:43:b0:80:f3:c1:b7:42:
a2:78:af:48:06:19:33:e5:7a:02:8e:40:1f:05:bc:
04:0e:47:87:2f:5e:bb:7a:0f:04:3c:01:a6:4d:e5:
34:38:ad:39:ca:3f:48:d4:e1:73:57:8b:bc:84:af:
8e:4d:a3:77:9e:0a:c7:49:09:1e:e1:0b:c4:27:c6:
d2:ad:a9:cc:d5:12:56:07:aa:23:cf:d3:d2:07:3c:
2d:29:ef:f4:85:3d:2d:f4:e1:8a:60:28:06:9a:17:
65:91:c2:72:32:54:16:16:9a:1c:67:e0:1b:b8:62:
77:f8:5d:ad:eb:e4:da:9f:9b:c9:fe:dc:36:86:b4:
d1:6d:43:f6:9e:2f:e0:43:35:a9:02:1f:86:80:5e:
bd:e2:88:8b:d7:3c:38:ed:0b:1d:01:b2:e8:cc:46:
6a:39:04:41:5c:f5:28:32:23:27:2e:45:31:98:99:
d6:c0:6b:b6:29:11:a5:7b:f2:72:b4:89:ed:e1:b2:
c1:c7:ca:e6:bc:09:87:74:60:ec:1e:54:78:dd:b4:
9f:15:cc:d7:46:f1:04:26:3f:3d:33:f2:c2:4a:a1:
83:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:5E:D7:B3:78:F4:8A:3F:49:40:84:75:E0:54:39:EB:0E:B5:2F:24
X509v3 Authority Key Identifier:
keyid:BF:20:E6:4B:18:83:1B:C9:85:27:CB:E0:E1:06:7C:1A:95:D1:68:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:6a:c7:0e:9c:4a:4b:f6:ab:67:30:70:32:77:57:6e:1b:6e:
de:d3:48:65:45:09:25:c7:f5:d2:54:dd:6f:45:31:b5:bb:94:
50:b0:e8:26:fe:d1:7b:3f:a0:07:ce:eb:16:cf:f4:7f:ea:c7:
4e:ab:69:13:3a:d0:23:3f:31:10:43:f9:11:41:88:bd:37:21:
18:c4:0a:8e:e1:05:e2:aa:d7:f7:ba:df:5e:58:b1:d2:b3:ae:
72:cf:92:95:bb:fc:90:20:aa:9f:fa:b1:71:6b:64:72:ee:ff:
e1:43:26:c0:52:22:dc:58:b4:29:1c:aa:60:73:db:3c:31:7d:
4f:15:13:64:f0:51:d4:72:ab:5c:0b:22:0c:62:82:5a:d9:47:
d6:d1:ee:cb:d9:f3:ce:a3:e2:be:0e:f1:53:78:68:03:ee:04:
78:7f:03:e6:50:3c:4e:2a:b7:13:8a:07:a5:4c:6f:fd:c1:ec:
32:c6:70:d8:e6:2c:be:be:c8:a1:a4:3d:fb:7e:88:37:33:8c:
aa:79:9a:29:b7:09:1f:f4:90:c0:84:94:ea:c3:07:b1:e5:da:
df:7a:5d:c1:36:3c:3c:bd:2d:b2:b4:77:89:79:bd:03:9b:68:
aa:aa:f6:81:ce:06:8d:ae:cf:e0:9b:ed:f7:95:b1:73:47:93:
3b:d9:2a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:14:53 2025 by rpki-client