Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.mft
File: vfW3EvLkkywcAwMS0ZSll4g_PV4.mft (raw, json)
Hash identifier: kcDp1dX1fxUDuSHxDbwaZTu93jIHpYv/XMMnHvHAm30=
Subject key identifier: 32:40:B3:2B:E7:5C:0F:E0:C0:4B:DC:3F:90:2A:58:E5:66:1D:4B:07
Authority key identifier: BD:F5:B7:12:F2:E4:93:2C:1C:03:03:12:D1:94:A5:97:88:3F:3D:5E
Certificate issuer: /CN=bdf5b712f2e4932c1c030312d194a597883f3d5e
Certificate serial: 0197B6A19FBC72E7A29F03D26D240F47F003
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfW3EvLkkywcAwMS0ZSll4g_PV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 13:02:14 +0000
Manifest this update: Sat 28 Jun 2025 13:02:14 +0000
Manifest next update: Sun 29 Jun 2025 13:02:14 +0000
Files and hashes: 1: BBvcU1rTQglpBpaZ0QSgMGmSs3Y.roa (hash: CTLLrnC8K2O/r8N1tX8rlBGB23cEp0OueaV8H2QNefc=)
2: vfW3EvLkkywcAwMS0ZSll4g_PV4.crl (hash: d8w8t1hyubprCDX2UQdJU8/QJoBtagYV+/rOt3lwQ/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vfW3EvLkkywcAwMS0ZSll4g_PV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:9f:bc:72:e7:a2:9f:03:d2:6d:24:0f:47:f0:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdf5b712f2e4932c1c030312d194a597883f3d5e
Validity
Not Before: Jun 28 13:02:14 2025 GMT
Not After : Jun 29 13:02:14 2025 GMT
Subject: CN=3240b32be75c0fe0c04bdc3f902a58e5661d4b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5d:00:ca:fe:f0:bc:2e:1c:20:39:66:ee:95:
92:fb:ce:6b:7e:34:b1:ed:f3:43:34:7b:6f:71:21:
db:53:fa:3b:17:f6:28:e1:7e:3d:78:82:2f:56:34:
d6:45:3b:9c:b4:3a:26:c3:90:a1:0f:7b:06:ca:b7:
22:b7:c0:4a:84:5b:5d:49:2c:38:23:2b:8c:2e:02:
5b:ea:c6:1f:db:df:30:00:eb:3f:d4:c6:e8:9f:c2:
f9:ee:a4:c3:0e:cd:a0:e8:50:c7:46:22:14:fc:f2:
f5:f0:31:6d:a5:d0:fe:32:aa:46:0f:72:29:09:1f:
41:00:76:01:91:6a:35:9f:25:d1:33:f5:ad:2e:62:
98:83:6a:fa:53:7a:af:d6:b5:9e:0f:1f:32:bc:8f:
22:9e:31:84:00:f0:b6:17:d8:7f:b1:07:63:a0:53:
d3:d6:c6:dd:4e:d6:e3:1f:73:d8:43:2e:91:5d:60:
60:8e:21:81:1f:fc:9c:2a:6e:3b:90:a5:44:bc:3a:
87:4b:e8:7d:6b:33:56:4f:a1:4b:e9:15:5e:6f:5b:
3c:a6:74:3a:a6:ba:a5:89:45:68:b5:81:fe:60:ae:
ad:f8:c7:70:c2:a7:f1:87:33:ae:cc:fb:50:5b:dd:
c8:9a:78:4d:34:b0:9f:a1:0a:94:8f:99:f7:5e:cd:
88:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:40:B3:2B:E7:5C:0F:E0:C0:4B:DC:3F:90:2A:58:E5:66:1D:4B:07
X509v3 Authority Key Identifier:
keyid:BD:F5:B7:12:F2:E4:93:2C:1C:03:03:12:D1:94:A5:97:88:3F:3D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfW3EvLkkywcAwMS0ZSll4g_PV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:cf:6a:7d:13:5e:d4:d5:b0:17:a0:b9:71:eb:26:70:8b:a3:
0f:0f:e1:d1:93:64:9d:4b:18:83:cc:20:4e:b7:35:58:cb:59:
9d:df:04:13:f1:4c:96:60:be:a2:fb:5c:1d:4e:0e:3f:f1:20:
18:e1:e4:30:6f:9f:2b:ae:4b:9d:e2:55:c3:cc:18:67:68:79:
1a:08:df:23:d2:71:2c:f0:d4:3e:96:ca:6f:0e:ff:85:f5:a4:
50:cf:80:49:f4:c4:ae:57:11:23:c9:9e:76:bf:62:69:eb:61:
2e:e9:b3:90:39:9d:5f:5f:51:20:82:91:ff:52:96:8b:43:c0:
c0:b7:fe:06:65:24:be:a0:49:34:fa:45:0b:6a:91:a7:08:e5:
bf:1b:c5:c8:b0:c5:94:b0:b7:ce:07:a6:2b:16:cc:f5:c6:83:
72:5f:05:9e:e9:1e:fe:03:6e:cd:db:70:34:c7:f1:11:6b:45:
d6:44:16:00:92:b6:ef:ea:34:ab:f3:d1:9f:7a:3c:a4:1d:2e:
4c:85:34:3c:38:7e:a4:22:e9:70:c2:64:48:18:63:1a:c0:77:
b9:02:57:7b:89:72:6c:05:8c:b8:e8:3a:6f:c8:95:61:4c:82:
c3:32:11:3d:4c:17:54:dd:36:53:bd:9f:46:e1:0a:93:05:59:
dd:67:23:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:58:05 2025 by rpki-client