Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3cd45f-0b79-43b7-a9e6-c0bcedb34274/1/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.mft
File: vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.mft (raw, json)
Hash identifier: Aa8EEHfd1lfTofoSzENHrJCrUfEypsp+/sfmaiO1Axs=
Subject key identifier: BC:15:65:13:74:75:39:43:82:3B:02:9F:D6:78:19:CF:46:D6:A7:15
Authority key identifier: BD:A1:E5:5F:74:4E:14:12:BD:75:3F:D2:77:B7:74:08:DC:DF:8C:B4
Certificate issuer: /CN=bda1e55f744e1412bd753fd277b77408dcdf8cb4
Certificate serial: 0197B77C7ABCE57389BF6B3BBEA7941B02BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3cd45f-0b79-43b7-a9e6-c0bcedb34274/1/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.mft
Manifest number: 0FA0
Signing time: Sat 28 Jun 2025 17:01:17 +0000
Manifest this update: Sat 28 Jun 2025 17:01:17 +0000
Manifest next update: Sun 29 Jun 2025 17:01:17 +0000
Files and hashes: 1: A6rb1dzlDcV8JbvloxjZ9srng9Y.roa (hash: p6jxR8xYwMN0t2VYMZkdONNHxcFxVga3IwawawK72KQ=)
2: vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.crl (hash: l66hRaBdo0ee7UwjCWWqvqGs36Ontc/epJNsWk/0M+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3cd45f-0b79-43b7-a9e6-c0bcedb34274/1/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/3cd45f-0b79-43b7-a9e6-c0bcedb34274/1/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 17:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:7a:bc:e5:73:89:bf:6b:3b:be:a7:94:1b:02:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bda1e55f744e1412bd753fd277b77408dcdf8cb4
Validity
Not Before: Jun 28 17:01:17 2025 GMT
Not After : Jun 29 17:01:17 2025 GMT
Subject: CN=bc15651374753943823b029fd67819cf46d6a715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:dd:f5:46:14:dc:4e:af:76:09:f3:3d:cb:e5:
b3:16:49:d9:fc:0c:41:ae:17:61:84:67:3d:d7:e9:
1b:2b:4c:54:d4:01:bb:4f:3a:c5:4f:a2:a5:d5:1a:
c7:55:59:9c:91:f7:72:0f:46:fc:9c:b7:84:fc:5e:
ca:d3:93:fa:fa:32:e5:e5:29:61:1a:3b:aa:63:01:
e9:ec:ed:8f:cd:61:04:de:ac:1a:c2:c6:a7:a3:c6:
43:f4:51:81:18:96:37:71:d4:f3:e9:01:75:a9:92:
2c:3e:2a:3f:51:29:45:ed:b5:0a:2a:5d:25:d6:2f:
e1:1d:0a:56:28:b4:0b:10:56:5a:e4:5b:32:5c:ac:
be:40:77:62:bc:b7:4c:97:0b:ff:01:b9:1b:3e:94:
3e:df:e0:5e:98:d9:ce:b1:1c:b0:91:05:61:25:82:
cf:1d:ea:44:ba:8f:ec:67:f9:f9:7a:2a:36:b2:39:
da:d9:68:a9:77:57:f4:bb:2d:43:34:6e:4e:7e:0a:
61:76:0f:e7:1e:15:87:b4:e4:68:ee:1f:3d:93:d9:
54:5e:12:3e:7e:81:68:61:30:91:d1:7d:f1:1f:c4:
51:3a:52:71:db:46:9f:9b:08:35:c4:fa:7c:f0:03:
de:96:4d:72:61:90:76:f0:6f:8b:13:3c:7f:c2:e8:
1e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:15:65:13:74:75:39:43:82:3B:02:9F:D6:78:19:CF:46:D6:A7:15
X509v3 Authority Key Identifier:
keyid:BD:A1:E5:5F:74:4E:14:12:BD:75:3F:D2:77:B7:74:08:DC:DF:8C:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3cd45f-0b79-43b7-a9e6-c0bcedb34274/1/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3cd45f-0b79-43b7-a9e6-c0bcedb34274/1/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:c2:48:5e:bf:18:32:e5:30:1d:e6:e5:91:b2:23:05:d3:27:
e9:1d:a5:af:c1:ee:64:ef:bf:b5:7c:cb:32:64:38:f8:41:1e:
42:84:f3:7c:b9:51:e4:12:a3:68:42:18:1a:0a:21:c0:e1:d8:
2e:57:98:ff:92:f4:de:14:1b:60:98:60:c6:81:d0:7f:5d:dd:
d6:22:dd:9b:96:18:c0:c4:f7:83:25:27:d2:12:0b:1d:7f:a4:
cc:e9:fb:64:64:e2:e7:35:fa:25:a1:a8:fb:c6:79:ed:dc:99:
ad:66:56:b3:07:6c:c0:4c:00:dd:60:0e:be:0d:ca:cf:dc:7e:
bf:cc:80:b2:0f:03:22:92:ec:dd:db:5f:b7:9c:b4:5b:4f:54:
c4:e8:2f:94:cc:71:33:29:02:f9:54:4a:f1:04:27:2b:22:03:
a0:36:71:a3:f6:c0:e8:1f:5e:17:4f:3f:6b:fa:4c:e7:69:74:
87:bd:8f:e4:4b:9f:c3:68:e4:d7:0f:9f:80:20:b5:02:1d:73:
32:62:b2:a2:76:74:21:a4:8e:43:81:da:f6:d2:8d:64:71:38:
fb:32:f2:58:15:5c:bf:f8:25:04:44:68:25:0c:c6:c7:49:11:
f6:5c:28:17:63:3e:c2:1b:54:d9:a9:ae:57:84:df:53:c4:aa:
9f:ca:01:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:29:47 2025 by rpki-client