Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
File: vjfHDxxn7KF3WnCckjXWovVVFrg.mft (raw, json)
Hash identifier: yHvr0h9hXzz0Mg8xRcU21WlRt25s853v6D63o8DO4PQ=
Subject key identifier: BD:4B:FE:FC:45:2F:15:88:42:CA:E5:28:E6:01:B3:D1:D0:70:9F:2F
Authority key identifier: BE:37:C7:0F:1C:67:EC:A1:77:5A:70:9C:92:35:D6:A2:F5:55:16:B8
Certificate issuer: /CN=be37c70f1c67eca1775a709c9235d6a2f55516b8
Certificate serial: 0197D39846A78853730D91BF19EDCAAE7F46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
Manifest number: 09C5
Signing time: Fri 04 Jul 2025 04:01:01 +0000
Manifest this update: Fri 04 Jul 2025 04:01:01 +0000
Manifest next update: Sat 05 Jul 2025 04:01:01 +0000
Files and hashes: 1: ct0pyOPI6fIxvI90voKvQ2P09kc.roa (hash: HL+IQFJP+wo1WUNFcjpb/00F+VP2TuCmZyFITiHM4E4=)
2: gW5vsz1XHWHAiEv2XrHiZAPT2LM.roa (hash: /LPDMtSPu0KMCf6GqHsTiZ0o1jWTrz0r+OipJeljVUk=)
3: smZrnk_Yoz0MEPZqDKnYUoP-Opw.roa (hash: 24G5yjs0ZUoqUy4OoFHxczQzhAIkELffXisqhuw+2DI=)
4: vjfHDxxn7KF3WnCckjXWovVVFrg.crl (hash: cnJrck8V7ylbaVKgGiD9+VJG802okKqI/ViEqql/DU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d3:98:46:a7:88:53:73:0d:91:bf:19:ed:ca:ae:7f:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be37c70f1c67eca1775a709c9235d6a2f55516b8
Validity
Not Before: Jul 4 04:01:01 2025 GMT
Not After : Jul 5 04:01:01 2025 GMT
Subject: CN=bd4bfefc452f158842cae528e601b3d1d0709f2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cf:0a:f4:dd:4a:0a:38:d6:63:d0:42:3c:4f:
e3:df:ed:15:b4:82:94:4a:85:7c:84:52:ee:0b:4e:
6d:b2:26:cf:2a:5c:38:05:15:2d:d3:8c:62:6a:ca:
58:10:b4:6d:ee:23:dd:13:c5:14:68:73:f5:ed:11:
df:2f:49:33:c6:5e:50:75:35:43:c5:98:c6:5e:45:
88:99:25:e7:ae:fb:83:9e:14:17:db:cf:3c:ec:44:
60:18:f1:5a:97:35:4d:a4:ee:02:c8:43:9f:23:6e:
bb:e7:97:05:cd:e1:e5:09:34:4d:06:e1:0e:75:03:
42:2a:80:21:a6:10:85:e0:4e:19:23:90:e5:82:8e:
23:5b:48:ec:47:2e:22:e4:66:ec:1a:79:89:4d:b3:
8d:33:6c:da:c4:49:6a:3e:92:24:19:0b:0e:ae:06:
ed:28:23:79:06:1f:02:eb:98:b5:95:04:d1:c7:b9:
f8:42:77:2c:95:92:e5:33:47:c2:33:1d:11:f0:ab:
21:2f:69:f9:ef:0b:24:7c:50:d6:90:8e:28:b8:50:
20:f1:cd:46:86:d3:48:1e:99:01:f4:b6:53:f3:ca:
af:18:9a:a5:49:ed:d9:84:02:36:97:96:ea:41:91:
6c:9f:cb:37:8d:c4:2d:76:58:d0:08:61:47:20:d9:
e1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:4B:FE:FC:45:2F:15:88:42:CA:E5:28:E6:01:B3:D1:D0:70:9F:2F
X509v3 Authority Key Identifier:
keyid:BE:37:C7:0F:1C:67:EC:A1:77:5A:70:9C:92:35:D6:A2:F5:55:16:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:d0:13:cb:69:85:1c:87:bc:16:7e:61:36:44:49:bb:37:d6:
56:e1:3d:23:7a:4c:35:c6:9f:56:5f:f6:04:5c:04:d8:c7:e8:
7d:02:8e:87:d0:ab:79:20:f7:d8:33:ac:40:33:8e:58:ef:4b:
83:9c:5f:d9:4b:a2:84:5f:cb:0a:ef:f0:df:ad:04:45:9f:88:
5e:7b:f5:11:4a:73:4d:d6:df:bf:c4:18:d1:d1:7c:48:cc:f1:
f0:8f:6c:bd:d8:6f:b9:a3:92:c6:7f:63:b8:d0:18:73:7d:21:
10:f7:64:35:d1:7e:bf:75:ac:34:89:15:98:6b:4d:ce:b4:1a:
dd:cf:b3:87:7d:4f:8f:5a:d4:f1:90:a0:97:61:52:a3:38:39:
33:2d:f0:64:65:57:17:27:87:4f:a8:46:dc:19:3e:16:9b:f9:
0b:6b:14:cd:9a:7c:b0:9c:5a:88:4a:56:ca:19:0b:19:6b:70:
31:64:3a:42:d0:b4:ba:fe:e3:9f:bd:d0:80:78:8b:61:e9:bf:
9c:da:07:6e:b1:44:55:2a:9d:ac:27:ed:b9:a7:25:67:28:d4:
50:c4:e6:5c:c3:44:ea:48:11:8c:c0:0d:68:f8:f7:a9:6d:ab:
e5:09:2e:c7:2a:a5:b6:fd:84:0e:92:35:fe:40:e3:75:7d:92:
01:3a:ad:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 06:52:50 2025 by rpki-client