Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.mft
File: vvZlBYLADbslkc7cKYwM08WWirA.mft (raw, json)
Hash identifier: pPa/LSQAB4O8/VKfS+7RDyWTuAvghuryDNCtRo0lP7k=
Subject key identifier: C1:A3:11:7E:2B:C7:E0:6E:A1:42:34:E6:3C:D7:1B:F3:C8:60:7C:E4
Authority key identifier: BE:F6:65:05:82:C0:0D:BB:25:91:CE:DC:29:8C:0C:D3:C5:96:8A:B0
Certificate issuer: /CN=bef6650582c00dbb2591cedc298c0cd3c5968ab0
Certificate serial: 0197C64A9155E55DD7BBDA5597DC12108AC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vvZlBYLADbslkc7cKYwM08WWirA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.mft
Manifest number: 1490
Signing time: Tue 01 Jul 2025 14:01:04 +0000
Manifest this update: Tue 01 Jul 2025 14:01:04 +0000
Manifest next update: Wed 02 Jul 2025 14:01:04 +0000
Files and hashes: 1: VJcY17IQh2BSqR-lhhdapfFR2Jg.roa (hash: 42V4cyYK1j/bnIgnYxXURiJulSqpvLBcVAwt2BGPORo=)
2: vvZlBYLADbslkc7cKYwM08WWirA.crl (hash: 1dY2TYQOknxPuThzAWKHWuwTQ7tTdvy7AESeFkcbqGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vvZlBYLADbslkc7cKYwM08WWirA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:4a:91:55:e5:5d:d7:bb:da:55:97:dc:12:10:8a:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bef6650582c00dbb2591cedc298c0cd3c5968ab0
Validity
Not Before: Jul 1 14:01:04 2025 GMT
Not After : Jul 2 14:01:04 2025 GMT
Subject: CN=c1a3117e2bc7e06ea14234e63cd71bf3c8607ce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:70:7f:a7:bd:ff:12:b5:d1:43:53:2d:5c:d2:
a3:7d:af:4c:3a:e1:98:01:d9:8e:5f:6b:cf:ec:11:
42:ed:19:ca:08:a7:1b:60:5b:67:15:76:f6:e6:e5:
33:87:36:02:eb:fc:91:d4:5b:29:55:97:f2:bb:f4:
5c:c9:15:f7:82:d8:8e:88:5e:b7:fd:54:b2:e6:e2:
7d:fe:1a:19:cb:5f:3f:5a:09:d3:3f:fc:54:33:48:
f9:00:c3:5b:5b:84:02:31:1f:1e:dc:8d:bc:bb:14:
f9:b0:21:5f:18:f6:56:5d:a5:46:a7:89:b4:d8:8e:
89:5c:d9:07:be:3e:28:80:8e:d5:9e:ff:fa:d9:6f:
a8:da:df:3c:fc:78:24:90:b4:ba:3a:04:eb:3e:f8:
56:b1:81:74:8a:e5:8d:f5:0d:66:35:32:82:aa:6f:
eb:7e:c6:60:a2:ae:63:02:ce:ad:33:3c:86:61:89:
39:2c:4a:c1:76:fb:a6:0b:91:05:7e:53:48:3f:e6:
08:c7:60:92:41:3e:42:ac:1c:8a:87:6c:2c:dd:9d:
8f:8f:20:cd:5b:03:57:dd:50:54:0d:ed:2c:6e:03:
0e:0e:12:92:5d:9b:ed:af:2d:12:0f:a3:ad:42:2b:
47:79:15:00:e4:c0:74:ff:9c:02:4b:5c:5e:1b:fe:
1d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:A3:11:7E:2B:C7:E0:6E:A1:42:34:E6:3C:D7:1B:F3:C8:60:7C:E4
X509v3 Authority Key Identifier:
keyid:BE:F6:65:05:82:C0:0D:BB:25:91:CE:DC:29:8C:0C:D3:C5:96:8A:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vvZlBYLADbslkc7cKYwM08WWirA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:18:9e:30:bc:04:be:9b:1e:07:18:70:ea:82:c3:38:d0:d4:
d0:16:63:ae:b2:93:b5:8d:39:62:9f:4a:f0:9d:78:e1:fe:cb:
0c:f0:84:6c:6b:97:f0:3f:10:91:7a:07:e9:12:c9:7c:fb:7c:
b8:ce:dc:b6:4b:2a:b5:f1:95:45:38:9d:55:ef:65:22:f0:b9:
ff:7d:4e:82:9d:e7:6f:40:b2:e2:3b:e8:02:be:4a:e8:bd:6c:
16:f7:0f:38:de:67:73:8f:5b:47:01:37:a2:de:0c:bb:88:33:
c5:87:09:3e:e7:8b:8d:71:f7:83:06:68:f8:db:34:2a:98:de:
99:cd:ae:dc:4a:9e:03:d3:15:24:18:a3:49:b1:f6:40:4f:58:
05:25:23:53:94:94:ac:6f:7e:e3:bf:ff:c2:05:19:4e:d0:69:
97:5a:3b:5f:72:7c:68:e4:a4:68:99:82:2a:14:3a:91:e0:29:
d1:81:a6:2b:0e:19:03:a6:c0:20:de:2a:c1:67:69:58:16:67:
45:ed:c5:a4:7b:91:9e:a2:fb:29:0a:3e:a8:eb:d0:4c:16:d6:
45:ee:f3:42:61:7c:99:bb:48:a6:c9:ea:0a:1a:33:4a:c8:e3:
3a:bf:d0:73:c0:13:87:7a:33:76:78:72:7f:67:b8:c6:d3:dd:
f0:aa:33:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 15:26:46 2025 by rpki-client