Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft
File: vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft (raw, json)
Hash identifier: XGMPuPyH3yG/EDntramsLAIGwsQkKPkoyueDzGocXpA=
Subject key identifier: 0E:CA:E8:7C:3C:12:FE:C3:BA:9A:79:95:18:C7:76:EE:B4:E7:ED:2A
Authority key identifier: BD:73:74:7F:78:BD:32:8D:0A:E1:C8:91:71:B3:81:AA:19:01:1A:CE
Certificate issuer: /CN=bd73747f78bd328d0ae1c89171b381aa19011ace
Certificate serial: 0197CCF15EC26FC86212E7AE9A342904B93D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft
Manifest number: 55
Signing time: Wed 02 Jul 2025 21:00:59 +0000
Manifest this update: Wed 02 Jul 2025 21:00:59 +0000
Manifest next update: Thu 03 Jul 2025 21:00:59 +0000
Files and hashes: 1: D98Ck1_qKOXalzx0pMS_FarSGM8.roa (hash: u49BF5lQyjsLl1bn3ULD3SUQ9N/pcixaCTatnIvy4v0=)
2: tCV34_eFEm-bBTr3p-Dum9J6ZzA.roa (hash: lJs/8jun541iQ5FmJ+SShA8Wi27D6ss5N6YmTLmASl4=)
3: vXN0f3i9Mo0K4ciRcbOBqhkBGs4.crl (hash: ti1yVCVHbB5VudOd151J+6idkt/EOpQBWxNEoRo/XMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:f1:5e:c2:6f:c8:62:12:e7:ae:9a:34:29:04:b9:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd73747f78bd328d0ae1c89171b381aa19011ace
Validity
Not Before: Jul 2 21:00:59 2025 GMT
Not After : Jul 3 21:00:59 2025 GMT
Subject: CN=0ecae87c3c12fec3ba9a799518c776eeb4e7ed2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a7:63:c7:c1:e6:52:43:81:24:48:53:6f:a5:
49:f2:41:82:f1:6b:bb:bd:2b:d7:5f:f7:c6:a2:b5:
04:eb:98:66:94:82:64:8d:8f:c1:9e:3a:dd:07:13:
7a:e0:dc:c6:d8:7a:60:32:ea:a3:9d:be:84:2e:be:
f6:0a:b2:ed:57:70:cb:b0:86:84:fb:69:f6:27:d9:
8a:16:eb:77:17:e2:b9:be:b3:1c:a3:52:30:6a:f7:
81:71:7f:e7:75:7a:8b:14:e4:a4:56:21:75:16:73:
e5:90:9e:bd:96:26:24:67:31:3b:f5:39:4e:f1:83:
8c:62:6b:06:c2:c8:28:46:b3:3a:aa:22:90:2a:b1:
a0:71:41:81:d0:5b:66:c8:7f:fc:5b:83:3f:0c:84:
9c:75:51:59:cf:cd:20:cf:dd:a1:da:e5:08:72:63:
74:ec:1e:b4:32:d3:f1:2a:5c:96:3b:58:79:91:c4:
9d:f2:39:40:5a:f5:60:82:7b:eb:2f:d5:29:f6:dc:
82:62:37:4f:34:b2:cc:3d:ff:0a:50:54:da:bc:45:
31:73:a7:96:2d:61:d4:58:a9:77:b1:04:26:2c:70:
3b:d4:6e:7e:0c:23:a2:f4:6e:c3:69:44:b3:26:09:
8d:6a:ea:5f:bf:19:55:0f:8a:9c:ea:c8:15:35:93:
3e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:CA:E8:7C:3C:12:FE:C3:BA:9A:79:95:18:C7:76:EE:B4:E7:ED:2A
X509v3 Authority Key Identifier:
keyid:BD:73:74:7F:78:BD:32:8D:0A:E1:C8:91:71:B3:81:AA:19:01:1A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:3e:40:f6:eb:d8:d8:d7:23:99:4e:72:e8:d8:3d:aa:02:78:
41:b4:ea:dd:b4:46:5c:c5:d1:40:7a:91:24:c1:21:94:ff:72:
e0:c1:cd:ec:2c:7d:2e:08:38:87:4a:50:cf:84:27:f8:3e:48:
25:ee:f2:3d:fa:db:37:0d:bf:cb:08:71:c7:48:31:76:2c:b4:
8f:12:36:80:08:3b:7e:6f:cb:6a:13:e0:bc:20:7f:d3:7b:69:
2e:c0:d4:cd:b7:84:57:fb:78:b8:21:9b:db:7e:4a:1e:16:bd:
73:a2:8d:91:38:01:2e:57:07:5e:72:da:ec:90:75:58:c6:b7:
b0:ac:a7:51:f1:d1:84:31:fe:67:81:ce:bd:ef:0d:9a:38:ff:
4b:7c:8b:27:70:0d:b7:e4:49:8f:66:ba:a9:a7:e8:b6:3e:13:
a1:7e:5b:ff:e1:3e:a0:70:08:6e:76:96:34:57:3f:3b:61:6d:
8e:31:6a:4a:75:e0:f6:f4:35:be:d2:f1:58:e9:da:9c:34:93:
65:db:bf:2c:cb:61:c7:47:fb:c9:d3:8e:0e:31:f3:e3:1c:da:
37:77:71:c9:ee:cb:23:1d:91:9d:6b:c1:7c:68:ff:17:c0:24:
b5:62:61:3d:e6:64:20:e8:48:22:27:05:40:2c:9a:a8:dc:37:
30:c6:d2:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 23:20:57 2025 by rpki-client