Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.mft
File: vPVGNoDRS2RYax1bRlZjvLV35pM.mft (raw, json)
Hash identifier: J+DyRF1VhbTbW0ktS2ugGiTdoRpcYEf4GqPN410Kijs=
Subject key identifier: A5:00:CB:03:0D:4B:70:E4:D3:07:12:67:9D:EA:1A:76:1A:6D:E9:D4
Authority key identifier: BC:F5:46:36:80:D1:4B:64:58:6B:1D:5B:46:56:63:BC:B5:77:E6:93
Certificate issuer: /CN=bcf5463680d14b64586b1d5b465663bcb577e693
Certificate serial: 0197C4C9CA9C483EC2035F199875378D506D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vPVGNoDRS2RYax1bRlZjvLV35pM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.mft
Manifest number: 15BE
Signing time: Tue 01 Jul 2025 07:00:48 +0000
Manifest this update: Tue 01 Jul 2025 07:00:48 +0000
Manifest next update: Wed 02 Jul 2025 07:00:48 +0000
Files and hashes: 1: uVkbwn7y_5MMeq7i0JNXRtOhxHs.roa (hash: ENXYHNx7P9jtVpFvO/C3/8L3MM9tHfB0gwOuIrKil9g=)
2: vPVGNoDRS2RYax1bRlZjvLV35pM.crl (hash: PQ0csD/qit50YjW4aj4IQSBOUY+cNBgIhjYscoiFlLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vPVGNoDRS2RYax1bRlZjvLV35pM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:c9:ca:9c:48:3e:c2:03:5f:19:98:75:37:8d:50:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcf5463680d14b64586b1d5b465663bcb577e693
Validity
Not Before: Jul 1 07:00:48 2025 GMT
Not After : Jul 2 07:00:48 2025 GMT
Subject: CN=a500cb030d4b70e4d30712679dea1a761a6de9d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:59:09:91:5b:2a:1d:85:ff:89:08:14:fe:12:
26:8f:98:c7:27:ea:db:2b:b3:48:b2:c5:0a:18:ec:
c8:7a:ce:f8:67:29:32:cd:e4:58:7e:df:1e:2d:f5:
14:75:c1:8b:f1:44:3e:6c:78:2e:5f:65:0f:2d:53:
08:64:82:ea:b8:c7:07:10:f6:55:0a:ae:f4:e2:df:
e1:7a:58:0b:bd:01:be:a4:d0:23:dc:a5:b0:35:31:
93:f5:91:48:f6:53:e1:2d:8d:8f:8a:c1:6f:15:e2:
c2:c8:6f:23:a3:3d:b1:f7:61:ac:9c:e7:d7:ca:cc:
91:2e:a7:f6:46:de:5e:ac:63:dd:8d:e4:2c:96:1c:
73:74:80:d3:c1:1a:e6:6e:c3:e8:f9:a5:41:00:41:
b6:84:d9:a7:cf:2f:c7:14:64:c0:6a:a0:a4:a0:77:
32:a5:18:f1:c6:06:c7:79:03:ca:a8:b3:b0:95:09:
65:99:ec:07:a7:0c:e6:cb:1c:9c:b6:7f:9e:51:4b:
a6:e4:fd:02:77:da:e9:c2:6a:62:d2:52:92:e8:34:
8d:21:d2:1e:c0:8e:4f:10:42:b7:6c:59:0c:4d:b6:
9c:39:e9:8a:06:a7:f3:8e:f8:64:fc:fe:c4:d6:e8:
00:ec:cd:91:8a:af:b0:f1:d5:f7:38:4c:8d:e9:a9:
9a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:00:CB:03:0D:4B:70:E4:D3:07:12:67:9D:EA:1A:76:1A:6D:E9:D4
X509v3 Authority Key Identifier:
keyid:BC:F5:46:36:80:D1:4B:64:58:6B:1D:5B:46:56:63:BC:B5:77:E6:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vPVGNoDRS2RYax1bRlZjvLV35pM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:a4:9c:2e:42:8c:35:29:52:b0:cf:42:05:32:b4:77:64:88:
3f:d4:9b:dd:75:2e:bf:4b:63:5a:e3:7e:38:09:92:dd:39:d0:
06:6e:a2:43:e7:cc:66:95:34:0b:d2:53:b0:fd:c2:7e:bb:37:
08:a4:40:e8:0b:71:6d:03:c8:3a:48:38:79:f0:3c:21:5e:58:
1f:0f:35:2e:81:4e:7a:97:22:3d:52:00:19:ce:ab:54:7c:8d:
e1:ee:7c:24:53:11:48:08:30:e4:5f:93:3a:ed:f5:ca:e3:59:
32:15:ee:d8:fb:8e:85:d7:e2:c0:2b:ee:2a:90:e6:69:d0:63:
da:64:8d:23:06:c3:eb:cd:9b:2b:00:31:11:33:b7:75:d8:9c:
79:1e:9e:6b:69:00:b8:de:bb:6e:d4:6a:4e:c0:23:c8:d7:58:
b2:72:b6:9b:78:53:a8:cc:33:7d:51:ae:e0:1d:0f:ad:61:4c:
4b:f9:13:f6:92:c7:95:e2:52:1f:a0:9e:22:d9:72:03:af:4f:
f2:8e:8b:dc:a0:6e:6b:30:54:fd:b1:56:5c:7f:72:8e:bc:6c:
29:a5:d1:60:6b:da:92:37:84:94:10:b9:8b:86:e9:ba:f9:fa:
d1:8e:1c:dc:e8:41:89:e9:d8:ca:b1:3d:94:e0:27:ba:8a:b8:
31:5b:96:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 15:04:12 2025 by rpki-client