Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/f2cd5e-fd1c-4b47-aa65-5e861165884c/1/vJjaCfCkWkCPW38brm2R4zM9VzI.mft
File: vJjaCfCkWkCPW38brm2R4zM9VzI.mft (raw, json)
Hash identifier: AZZReN4c3CYqRfhWrRbjeMTHaEJDxS4m39J2O2P6C6o=
Subject key identifier: 17:E3:6F:45:85:23:41:8B:79:F3:81:F2:67:AB:9B:3F:F0:DB:0D:A6
Authority key identifier: BC:98:DA:09:F0:A4:5A:40:8F:5B:7F:1B:AE:6D:91:E3:33:3D:57:32
Certificate issuer: /CN=bc98da09f0a45a408f5b7f1bae6d91e3333d5732
Certificate serial: 0197B70E5F0C7726F1731A0888E398D96084
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJjaCfCkWkCPW38brm2R4zM9VzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/f2cd5e-fd1c-4b47-aa65-5e861165884c/1/vJjaCfCkWkCPW38brm2R4zM9VzI.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 15:01:01 +0000
Manifest this update: Sat 28 Jun 2025 15:01:01 +0000
Manifest next update: Sun 29 Jun 2025 15:01:01 +0000
Files and hashes: 1: fxhyywtkkeQkBb1LWBBLmBYmdhw.roa (hash: JEDR1+B65jcWiXG9Txje4CaMRNTaWS3SE4CY6nIrNeE=)
2: vJjaCfCkWkCPW38brm2R4zM9VzI.crl (hash: fqqSWvc0DuHYVUAlec4Q+HZns4U/n3Br4hyW3Zek8oE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/f2cd5e-fd1c-4b47-aa65-5e861165884c/1/vJjaCfCkWkCPW38brm2R4zM9VzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/f2cd5e-fd1c-4b47-aa65-5e861165884c/1/vJjaCfCkWkCPW38brm2R4zM9VzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJjaCfCkWkCPW38brm2R4zM9VzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:5f:0c:77:26:f1:73:1a:08:88:e3:98:d9:60:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc98da09f0a45a408f5b7f1bae6d91e3333d5732
Validity
Not Before: Jun 28 15:01:01 2025 GMT
Not After : Jun 29 15:01:01 2025 GMT
Subject: CN=17e36f458523418b79f381f267ab9b3ff0db0da6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:17:c8:2a:12:f0:cc:1e:f2:a0:a1:a3:78:3b:
57:af:e5:68:47:33:d7:d3:82:b9:57:8d:6e:6e:2d:
5a:a3:0b:2c:00:aa:c1:ce:95:c9:b3:60:d8:3c:5b:
9a:84:06:3e:43:21:4a:e0:c6:c1:77:a6:6c:d4:ee:
96:6d:26:a3:a3:43:55:4b:19:0a:ba:a7:cb:61:e4:
0f:31:f8:4c:41:41:c6:31:67:d5:a9:eb:e9:e4:86:
43:32:3a:d9:6c:75:da:cf:46:5f:72:5d:21:48:d1:
d2:4d:99:23:a9:9f:da:33:f3:76:e3:9c:3b:ab:05:
37:45:3e:95:28:e8:8c:bd:d8:4b:d4:58:f4:08:c9:
f5:38:79:93:5f:c7:e5:d8:83:27:d9:bd:37:64:37:
dd:3f:0e:e8:6e:e1:62:42:92:79:8c:76:88:b3:76:
e1:b3:cf:fd:4e:88:2b:67:5f:53:d4:14:cc:77:ae:
75:5e:a2:e7:7f:00:e3:79:9f:57:97:4d:34:35:0e:
d0:69:7e:18:b3:59:a9:8e:bf:3a:46:f8:91:70:d9:
ac:72:d7:85:ae:f0:8c:36:58:9a:f6:51:b0:03:f2:
ae:f2:1a:67:bb:48:13:5b:55:64:d4:a9:cd:6d:5e:
f0:2f:d7:ec:80:b1:b9:11:2c:39:2e:95:cc:4f:9e:
be:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E3:6F:45:85:23:41:8B:79:F3:81:F2:67:AB:9B:3F:F0:DB:0D:A6
X509v3 Authority Key Identifier:
keyid:BC:98:DA:09:F0:A4:5A:40:8F:5B:7F:1B:AE:6D:91:E3:33:3D:57:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJjaCfCkWkCPW38brm2R4zM9VzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f2cd5e-fd1c-4b47-aa65-5e861165884c/1/vJjaCfCkWkCPW38brm2R4zM9VzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f2cd5e-fd1c-4b47-aa65-5e861165884c/1/vJjaCfCkWkCPW38brm2R4zM9VzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:70:f2:98:f3:a8:de:04:66:fa:b0:e1:cb:5a:ea:b8:bf:36:
b6:29:31:df:1c:d5:32:d2:e1:30:21:7d:6c:91:50:54:7e:71:
63:39:1c:89:12:2e:59:f7:38:26:48:84:ec:8c:94:bd:b8:0d:
05:f6:f6:9d:d5:63:7d:99:35:b2:08:e1:cd:05:24:72:f6:4a:
2a:f1:8f:12:cd:9b:86:71:9d:15:6b:d9:eb:16:fe:13:ff:bd:
40:da:c2:df:7e:1f:94:a9:12:28:e7:97:30:f4:aa:89:2a:9a:
ac:6f:55:db:9c:ed:3f:83:e5:1c:14:b3:4a:28:e4:e8:f4:0c:
86:fd:9e:f5:86:e1:c3:3b:f8:39:c9:47:7b:98:59:a3:d0:7e:
cf:6d:af:8b:0e:ba:dc:4e:b6:7c:03:c0:05:d5:4e:98:6d:23:
4e:da:2b:50:99:49:b3:ca:99:f5:9c:91:a5:b0:7d:61:b5:94:
95:1c:53:8a:ea:e3:39:fe:a8:83:1b:e8:24:b4:1a:e6:64:ab:
41:9a:93:cf:ea:9b:30:67:bc:e3:1c:bf:e1:1d:0d:9c:6d:8f:
c6:30:f7:1a:50:b3:af:66:40:f8:4f:b3:fd:79:67:e8:23:d3:
7a:47:61:49:1d:ba:17:90:96:95:31:b6:e2:1c:c1:66:41:ec:
f8:7e:e1:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:28:13 2025 by rpki-client