Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.mft
File: runVCGNpB2p412FjizKoqbjvcOc.mft (raw, json)
Hash identifier: uolJ9I/cDWOJ9GLbLtiEHcNn55H/h5jIwmL4vKnz0g0=
Subject key identifier: CA:A1:DC:A5:4E:2D:1E:D0:8E:29:CA:93:7A:C5:F1:BC:53:3A:1F:16
Authority key identifier: AE:E9:D5:08:63:69:07:6A:78:D7:61:63:8B:32:A8:A9:B8:EF:70:E7
Certificate issuer: /CN=aee9d5086369076a78d761638b32a8a9b8ef70e7
Certificate serial: 0197B9D8A447945FB9893289E8E3A724AC45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/runVCGNpB2p412FjizKoqbjvcOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.mft
Manifest number: 15B7
Signing time: Sun 29 Jun 2025 04:01:12 +0000
Manifest this update: Sun 29 Jun 2025 04:01:12 +0000
Manifest next update: Mon 30 Jun 2025 04:01:12 +0000
Files and hashes: 1: TI9bfzfYT_e9UXoNSSRvZ0SIvco.roa (hash: ysZXRJJDaCEwr01HXDnbPPBij8sh3z42AGc9cvU+Xhg=)
2: runVCGNpB2p412FjizKoqbjvcOc.crl (hash: KcAMgDdfxqJxvxZuPwgwbQru7GMlaC/5bFV2jt6ShSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/runVCGNpB2p412FjizKoqbjvcOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:d8:a4:47:94:5f:b9:89:32:89:e8:e3:a7:24:ac:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aee9d5086369076a78d761638b32a8a9b8ef70e7
Validity
Not Before: Jun 29 04:01:12 2025 GMT
Not After : Jun 30 04:01:12 2025 GMT
Subject: CN=caa1dca54e2d1ed08e29ca937ac5f1bc533a1f16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:31:47:ea:43:c7:c7:b7:9e:f3:d5:e4:79:f3:
7e:ef:bd:10:9f:00:48:30:98:91:fb:9f:59:85:22:
06:22:56:e9:52:42:b1:18:37:35:07:d9:eb:28:ae:
fd:70:62:2f:03:4e:b2:34:ff:b3:26:b8:bb:52:e6:
43:97:da:49:c5:33:7f:1d:91:d1:51:20:53:98:48:
a7:5e:af:1d:2f:c3:86:e4:54:a7:3d:75:34:44:26:
bb:4e:24:ec:63:39:bb:d0:a9:10:ea:2f:d1:fa:f3:
b5:fd:65:92:90:a2:59:0d:1c:8b:e0:69:9d:14:d3:
c4:71:7b:35:33:ab:da:b6:c6:6e:ec:d0:fd:29:53:
df:71:71:67:fc:5f:b2:fe:b8:f0:cf:f8:1e:73:0c:
27:df:55:5c:e2:a4:a1:c5:48:0a:ee:aa:cd:fc:2d:
84:49:90:39:25:a6:a7:9f:ca:a0:98:ac:7e:38:7e:
87:6a:9e:1c:06:d6:93:80:e0:29:0c:c4:b6:6a:ca:
70:1a:f5:d7:eb:df:ed:6e:7c:fe:06:b2:89:85:b9:
b9:ac:a3:50:f0:33:d6:45:1f:51:c7:22:c5:f6:b1:
76:83:51:13:34:f5:29:db:ec:b1:89:a8:75:3f:47:
5c:0f:18:c1:93:ed:b0:89:a1:c9:65:ea:37:90:39:
ae:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A1:DC:A5:4E:2D:1E:D0:8E:29:CA:93:7A:C5:F1:BC:53:3A:1F:16
X509v3 Authority Key Identifier:
keyid:AE:E9:D5:08:63:69:07:6A:78:D7:61:63:8B:32:A8:A9:B8:EF:70:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/runVCGNpB2p412FjizKoqbjvcOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:13:cb:c0:4e:cc:e9:28:a0:b3:a2:3e:60:92:56:23:9c:6b:
87:1e:00:dd:2b:2d:2b:e0:c0:74:a5:c8:9d:da:75:3b:6b:3f:
9b:3b:7f:fe:c2:31:d8:3a:24:78:0d:d9:62:c6:a8:30:c2:e5:
e7:fd:76:5a:10:bb:d3:6c:bc:44:ad:a4:dc:7f:95:87:cb:67:
4a:01:c8:e5:57:9a:48:53:36:3a:ad:97:69:50:75:97:98:59:
d3:61:5d:b8:da:8e:b5:cb:4f:e8:9b:e0:d7:c4:87:ea:1b:11:
17:5d:93:8a:90:22:1e:9d:f5:24:d7:ec:32:9e:49:fc:fd:b2:
29:61:e2:2d:ba:0e:15:e8:10:7d:93:80:42:e1:2b:ce:af:9b:
c0:6c:e2:1f:4d:83:2b:4e:2f:f9:5f:f5:de:f4:6e:18:ba:44:
a9:b0:eb:ba:a0:bc:3b:2c:43:ef:b6:8a:ca:30:f7:dd:98:d5:
c6:13:dd:d4:c0:1f:16:af:77:a4:18:b7:52:66:1e:3a:75:43:
d7:b3:0b:70:05:06:b4:d9:b7:a6:0e:97:0f:27:e5:9c:3d:3a:
b3:89:bf:ee:ad:07:db:bf:83:cb:40:28:28:87:f1:93:0e:60:
08:c9:be:2a:87:8a:11:3e:3a:56:0b:d6:1e:1b:00:00:24:90:
26:37:aa:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:12:06 2025 by rpki-client