Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
File: i542u2_vkyj1GOSxBfwhLBUqjGg.mft (raw, json)
Hash identifier: NxK2sCOsXIlqqvJEu6MV0wRTt1nkul5d7UJvy9xGc9Y=
Subject key identifier: 31:D4:E8:D5:A2:FB:1E:48:F3:23:16:4D:69:ED:33:F1:C4:DF:63:88
Authority key identifier: 8B:9E:36:BB:6F:EF:93:28:F5:18:E4:B1:05:FC:21:2C:15:2A:8C:68
Certificate issuer: /CN=8b9e36bb6fef9328f518e4b105fc212c152a8c68
Certificate serial: 0197BA7D0C5815800579FDDD0B10BE83ACA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
Manifest number: 15B9
Signing time: Sun 29 Jun 2025 07:00:46 +0000
Manifest this update: Sun 29 Jun 2025 07:00:46 +0000
Manifest next update: Mon 30 Jun 2025 07:00:46 +0000
Files and hashes: 1: I1KraudGgIPbGqrokKSi33-L_jY.roa (hash: L9033CVRp8ri3N0mtJw6UMfr2TqSPrf8oAPr6Y4O13o=)
2: i542u2_vkyj1GOSxBfwhLBUqjGg.crl (hash: JLwRITMiR4sQs7HsHalNm3osb/ssSDP4cI/7IBCl6XE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7d:0c:58:15:80:05:79:fd:dd:0b:10:be:83:ac:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9e36bb6fef9328f518e4b105fc212c152a8c68
Validity
Not Before: Jun 29 07:00:46 2025 GMT
Not After : Jun 30 07:00:46 2025 GMT
Subject: CN=31d4e8d5a2fb1e48f323164d69ed33f1c4df6388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6a:40:09:ce:10:14:c1:e4:26:5a:d7:38:c6:
84:10:1e:db:75:5b:2f:f6:75:1e:8e:a5:b3:1a:5c:
32:f2:20:a1:48:59:3c:f9:a1:70:df:d4:ab:31:84:
1c:1a:2d:d4:50:83:25:6c:1c:8a:ef:a6:11:3c:44:
26:54:85:a0:cc:a1:aa:1d:57:d5:a9:fe:72:84:50:
83:39:eb:f2:9d:cb:47:5a:9f:9a:05:b3:59:17:09:
a3:d7:d9:c0:98:cc:f8:af:e1:4a:c0:0b:77:fa:f5:
42:d1:bb:d1:08:37:c0:03:52:93:f7:cc:50:e1:98:
91:1e:89:99:28:bd:15:7c:41:47:1c:fd:d3:92:0b:
1e:3b:c0:07:a0:dd:b8:16:05:b7:ee:3f:3d:f3:45:
ca:9d:18:2c:7b:16:30:6c:9d:e0:90:c1:3c:ef:ba:
63:af:a5:4f:6e:47:5a:ff:55:70:ba:a0:b9:8c:0c:
20:1c:7a:a6:b1:c5:18:83:e1:5f:c2:98:45:9e:15:
f9:a2:39:98:ed:8b:d4:79:bb:70:ef:a5:61:c7:83:
ba:a3:0d:2b:b1:33:24:34:e6:8f:64:fb:21:e4:ea:
be:9e:e2:c2:6d:49:23:35:59:ef:8d:6b:fa:51:33:
74:15:84:0b:da:81:c6:dc:f5:56:a8:fc:54:e8:bc:
a2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:D4:E8:D5:A2:FB:1E:48:F3:23:16:4D:69:ED:33:F1:C4:DF:63:88
X509v3 Authority Key Identifier:
keyid:8B:9E:36:BB:6F:EF:93:28:F5:18:E4:B1:05:FC:21:2C:15:2A:8C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:66:20:44:9b:16:ff:b1:e0:5c:d2:7a:f7:26:a0:00:00:af:
64:33:7c:f3:e7:a5:9d:71:6a:51:44:da:e8:61:5c:6a:ec:07:
cd:11:d9:c7:64:58:b5:31:e2:48:f8:63:f8:6a:7b:57:5f:c7:
64:79:a5:d0:44:f1:41:ca:23:13:a4:4f:e8:2b:4c:a4:be:84:
b8:3a:18:e1:65:fe:ee:b1:71:27:aa:a4:fd:d6:2e:19:21:46:
66:63:a0:6d:6b:b2:80:cc:75:89:77:74:64:94:69:45:f6:ab:
f1:66:fb:eb:7c:ed:21:ca:07:0e:26:22:39:32:d9:01:f2:4c:
f1:70:f1:02:88:fb:61:fe:b5:cb:58:4f:d1:fb:9f:72:9e:af:
2a:64:e5:83:28:b6:fc:10:e2:4f:fe:80:81:0a:27:62:f3:c8:
e7:5b:db:fd:2a:e6:36:3c:60:ca:73:9a:c1:8c:5d:e7:f5:ff:
88:fd:7a:d6:61:dd:c5:d3:49:a9:76:45:6f:3c:b8:56:64:d5:
58:25:ba:4e:c0:6f:85:da:e3:00:71:41:ae:3a:38:81:1d:f0:
47:73:30:c9:ef:3a:1e:13:f9:2e:ab:76:d6:33:e6:20:6b:e0:
0a:b6:4e:72:ec:c0:c7:95:d5:67:62:48:de:f1:d8:aa:8c:2f:
e4:86:93:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:29:44 2025 by rpki-client