Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
File: vJxAOtAH4qJCprCQYaPBo2CmTVo.mft (raw, json)
Hash identifier: gwdVSwOVnZN0p6yAGMY29DaiY/ttH/JpxhHE1bN3U/o=
Subject key identifier: F8:77:C0:45:00:BA:90:88:CC:EC:51:20:50:90:DF:3D:B6:53:63:CC
Authority key identifier: BC:9C:40:3A:D0:07:E2:A2:42:A6:B0:90:61:A3:C1:A3:60:A6:4D:5A
Certificate issuer: /CN=bc9c403ad007e2a242a6b09061a3c1a360a64d5a
Certificate serial: 0197C0B608034455FC01CDB09E75086ACE9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
Manifest number: 0802
Signing time: Mon 30 Jun 2025 12:00:44 +0000
Manifest this update: Mon 30 Jun 2025 12:00:44 +0000
Manifest next update: Tue 01 Jul 2025 12:00:44 +0000
Files and hashes: 1: c4jk7gKONHNQDGzC6dsv2q8s7vI.roa (hash: a6L74Wo+bnsgWub76o3PYF/fgomhfzvN3TtRHLCaboU=)
2: tPkC9g1rh0B-WDtzyBxNorqbjqo.roa (hash: 3UTyjNkmps78kxWwCRVUmx8qZWeL7ho0lCKlGDqKCwQ=)
3: vJxAOtAH4qJCprCQYaPBo2CmTVo.crl (hash: bCTP3/oZ6p8a/5oFH4ZfegnHQgfbxdiG55BhGxDhU70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 12:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:b6:08:03:44:55:fc:01:cd:b0:9e:75:08:6a:ce:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9c403ad007e2a242a6b09061a3c1a360a64d5a
Validity
Not Before: Jun 30 12:00:44 2025 GMT
Not After : Jul 1 12:00:44 2025 GMT
Subject: CN=f877c04500ba9088ccec51205090df3db65363cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cb:81:c2:a5:5b:19:d0:4b:8e:57:53:1d:0c:
fe:93:5f:a8:99:08:2d:50:e9:43:27:2d:05:a7:58:
61:0f:9c:19:bf:fa:31:87:8c:99:ae:73:f2:6e:f7:
b0:c3:c8:6f:50:50:de:9c:f3:2c:e4:84:01:2e:28:
b3:61:61:05:d9:ea:79:88:a1:6f:11:62:8e:b4:3d:
e6:af:ff:7b:98:21:47:a4:03:2b:74:5e:c5:62:6c:
72:af:0a:f1:b7:ec:ff:77:4a:dd:cb:49:97:bf:c4:
ed:dc:c1:94:cc:89:59:6f:0d:d5:b1:86:1f:34:80:
86:19:83:cd:87:dc:13:db:46:ee:12:ba:54:c0:4d:
f6:7b:b6:e9:23:ff:1d:db:1f:9e:a9:e4:77:11:f1:
c6:b6:55:7f:04:84:95:b0:b6:7c:66:29:26:96:a3:
15:4c:cf:89:27:e0:1d:0b:3a:91:2b:0e:48:77:1c:
c0:3b:ed:c9:fa:e2:3a:e7:60:33:42:3a:ac:0b:12:
23:12:cf:12:56:6a:4a:b8:20:70:97:b7:74:33:8a:
85:6a:47:a4:23:b3:02:9a:b3:05:f4:7e:8c:d9:19:
c2:6f:15:30:72:3e:49:6f:ec:67:3b:4a:8b:34:69:
33:78:3f:2e:00:22:37:a8:3a:0d:fc:ce:47:2c:14:
ae:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:77:C0:45:00:BA:90:88:CC:EC:51:20:50:90:DF:3D:B6:53:63:CC
X509v3 Authority Key Identifier:
keyid:BC:9C:40:3A:D0:07:E2:A2:42:A6:B0:90:61:A3:C1:A3:60:A6:4D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:d4:f9:4d:6b:32:91:62:f5:71:ad:75:9a:49:02:f9:33:f9:
68:80:d6:13:2b:1f:ea:46:f4:4f:3a:13:94:2b:5f:4c:31:f9:
4e:e5:f3:56:85:79:93:1d:82:40:2e:19:22:b9:5e:63:9c:a4:
9c:57:38:be:a2:41:9b:74:8b:db:7e:1c:ea:92:8a:b9:b2:33:
b7:17:41:fc:84:e8:be:13:d3:02:9c:01:38:16:e3:4f:27:de:
26:61:1f:93:17:7d:64:ee:e5:b8:7a:8d:ab:55:0d:1c:d3:9e:
08:33:aa:fc:d3:d9:f8:94:72:99:81:5a:6b:61:e6:b8:c9:36:
d5:5f:ca:97:69:99:9a:15:16:58:87:ef:89:82:9b:4b:aa:d0:
04:94:97:55:3f:11:db:d2:31:dd:46:6c:e2:56:49:ef:05:46:
78:0c:57:43:7f:4e:2f:3d:1e:9d:59:c9:5d:1d:8f:c4:68:42:
9f:8a:9b:71:5c:f3:10:30:ff:cb:66:c6:04:78:8d:aa:5e:f4:
c0:30:63:a3:2a:af:3c:5a:50:c5:16:1b:e6:f3:f7:98:b7:03:
ac:3a:6a:bd:4b:e4:55:3c:46:5f:b9:f9:da:3a:13:65:31:d4:
6c:fa:25:84:25:c6:99:f4:27:84:d5:ba:2a:ec:25:ed:91:54:
76:5a:ce:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 20:00:43 2025 by rpki-client