Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.mft
File: 1-vcGbaCaViJCYORuom3Jyx26jjc.mft (raw, json)
Hash identifier: CBpO//c/5yn941NeIsXTre18ZXK1qa/F2cbYrz+JgmQ=
Subject key identifier: 2F:11:5F:2D:AA:30:36:46:AC:19:8B:24:61:EF:43:EB:89:BE:19:18
Authority key identifier: FA:F7:06:6D:A0:9A:56:22:42:60:E4:6E:A2:6D:C9:CB:1D:BA:8E:37
Certificate issuer: /CN=faf7066da09a56224260e46ea26dc9cb1dba8e37
Certificate serial: 0197B70EDE2C83F091B87BE9985D1921FEA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vcGbaCaViJCYORuom3Jyx26jjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.mft
Manifest number: 10F9
Signing time: Sat 28 Jun 2025 15:01:34 +0000
Manifest this update: Sat 28 Jun 2025 15:01:34 +0000
Manifest next update: Sun 29 Jun 2025 15:01:34 +0000
Files and hashes: 1: 0npgtCw2cniYZRSczr6L1wq2NDE.roa (hash: 7qLMTW4Hb0+zjkcR3VjQ/z+HhWTfAgpVarVUL4CErX4=)
2: 1-vcGbaCaViJCYORuom3Jyx26jjc.crl (hash: T+xZ8nXeNzZfUhk6Q1HCyzBeFChT5RXzXwP1KdZo4sU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-vcGbaCaViJCYORuom3Jyx26jjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:de:2c:83:f0:91:b8:7b:e9:98:5d:19:21:fe:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf7066da09a56224260e46ea26dc9cb1dba8e37
Validity
Not Before: Jun 28 15:01:34 2025 GMT
Not After : Jun 29 15:01:34 2025 GMT
Subject: CN=2f115f2daa303646ac198b2461ef43eb89be1918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4a:bb:f1:d8:01:93:27:3c:45:77:ba:4a:52:
5a:9d:40:b1:bd:e3:66:89:c4:24:4d:d8:29:9c:06:
a2:83:a5:58:f8:2f:5e:d3:05:64:5f:f5:96:16:f1:
60:31:16:cd:ce:c0:d0:4a:bd:f9:a8:52:f5:1f:e3:
25:04:04:ee:aa:47:58:3f:e2:fb:a5:08:d4:0c:8c:
77:d8:cc:80:32:91:d0:9a:95:68:37:5f:ce:23:65:
30:92:cb:ce:9e:8c:f9:cd:ec:86:6a:6e:2b:66:73:
76:f9:3b:df:a8:ee:b0:87:c3:3b:9f:6d:87:06:31:
75:3a:0c:3d:8a:22:43:92:ae:bf:d4:12:93:11:1e:
81:0d:fd:fe:63:7e:d0:86:4c:d4:96:70:fc:cd:4e:
49:28:e3:17:56:4f:c4:fe:ba:73:c6:dc:d5:d2:cd:
98:ef:cf:92:cc:8c:4b:d4:58:14:61:7f:96:f1:a9:
87:e8:43:d3:ae:fc:76:32:88:ea:cc:39:91:76:d8:
0f:c5:b6:14:96:92:d1:26:db:f3:60:bd:4c:eb:3a:
b6:01:ec:8f:e4:bb:5e:49:10:f9:ec:e7:d0:d8:a9:
46:4f:34:fa:15:b2:47:e8:f4:5c:29:fa:e5:76:07:
78:ff:84:68:3b:67:ef:ab:0d:48:c7:f3:f7:a6:d0:
67:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:11:5F:2D:AA:30:36:46:AC:19:8B:24:61:EF:43:EB:89:BE:19:18
X509v3 Authority Key Identifier:
keyid:FA:F7:06:6D:A0:9A:56:22:42:60:E4:6E:A2:6D:C9:CB:1D:BA:8E:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vcGbaCaViJCYORuom3Jyx26jjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ff:b6:0c:27:ac:1b:1b:22:10:40:70:30:b8:68:5a:23:12:
5c:3d:01:f4:0d:1a:31:d3:3f:34:ae:55:cb:dc:28:a6:ad:24:
5c:65:fa:3b:46:e5:8f:ff:16:7d:08:6e:22:20:b7:7d:02:83:
8c:65:ea:37:c6:14:a6:21:32:ff:28:c8:08:88:5c:a9:fb:07:
4d:00:5b:7e:0e:dc:bd:de:33:20:c8:7f:2f:3f:66:d1:73:64:
83:b9:bb:21:ed:87:cc:9b:16:d4:0c:c0:6c:67:12:2c:92:af:
de:a5:c6:82:ed:c9:b2:be:20:5c:e3:fe:78:b7:cf:58:7f:83:
7d:a6:ba:81:09:f3:fd:74:ff:08:82:43:ae:dd:d8:7f:7f:9a:
c2:f3:ea:7e:76:67:5f:95:08:82:fa:8a:e8:47:96:70:b6:22:
54:16:e3:2e:c7:9c:ef:99:a7:19:90:92:ad:5f:02:62:3e:0e:
a6:fa:6f:33:6a:97:e2:d0:ee:09:89:71:88:a5:90:16:b5:54:
24:43:f1:e5:b4:e8:6a:d0:64:8d:89:d7:8c:fb:d1:bb:01:b1:
93:a2:09:9a:fa:94:2f:77:e4:d5:cf:50:46:f5:9a:14:6f:13:
7b:84:0a:be:1a:a0:bb:ac:1e:70:e4:56:e0:38:b2:43:37:bc:
e7:c7:fb:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:30:21 2025 by rpki-client