Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.mft
File: vx9s1vq5XSQc2axfhfTQX53lj5s.mft (raw, json)
Hash identifier: y8DMI8NNfxZki/r7uCVyYRC7vfET4IZ+BKD4C6iOt4I=
Subject key identifier: 11:B0:73:30:D9:B1:FD:1A:36:84:7D:F9:14:5D:FE:93:CE:FA:25:47
Authority key identifier: BF:1F:6C:D6:FA:B9:5D:24:1C:D9:AC:5F:85:F4:D0:5F:9D:E5:8F:9B
Certificate issuer: /CN=bf1f6cd6fab95d241cd9ac5f85f4d05f9de58f9b
Certificate serial: 0197B6A0EA8ACB3F8CC82697B6C33CA520AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vx9s1vq5XSQc2axfhfTQX53lj5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.mft
Manifest number: 1391
Signing time: Sat 28 Jun 2025 13:01:28 +0000
Manifest this update: Sat 28 Jun 2025 13:01:28 +0000
Manifest next update: Sun 29 Jun 2025 13:01:28 +0000
Files and hashes: 1: EBHjm8uQ-LmD4evvwOZ6E0JwNQA.roa (hash: Tk02eWTtsJNpE3RvUJnaO0ovgb/O/tJmPY6vH9oMVtQ=)
2: vx9s1vq5XSQc2axfhfTQX53lj5s.crl (hash: raLkyUGrIh7nugE/Y8qms5f1nLxEhqjrYZ2tAkLDoD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/vx9s1vq5XSQc2axfhfTQX53lj5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:ea:8a:cb:3f:8c:c8:26:97:b6:c3:3c:a5:20:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1f6cd6fab95d241cd9ac5f85f4d05f9de58f9b
Validity
Not Before: Jun 28 13:01:28 2025 GMT
Not After : Jun 29 13:01:28 2025 GMT
Subject: CN=11b07330d9b1fd1a36847df9145dfe93cefa2547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:41:b3:31:a5:86:ad:cb:a3:00:4f:17:49:d4:
07:17:93:77:8b:11:2a:5a:33:96:5a:4b:36:c3:69:
15:b7:f8:bc:8f:a6:89:dc:cc:d4:6e:e6:e0:58:18:
03:fb:e2:c3:4f:31:b0:c1:80:b4:d6:fc:51:aa:78:
1f:35:0b:fe:a1:e4:c7:6e:24:80:34:c7:90:eb:f2:
3b:04:bc:e6:1b:7e:09:03:30:b8:19:53:2a:51:8d:
39:28:73:2c:43:ae:94:d9:a9:bc:4b:aa:2b:1e:6a:
4f:28:2d:e0:a3:1b:d6:90:1c:3c:2e:ba:5d:41:c3:
2e:4d:f5:6d:7e:64:d0:54:e6:41:f5:eb:8a:d6:8b:
15:7f:f2:66:68:f1:66:be:c4:d3:85:e2:cb:ad:45:
aa:48:a9:6f:ca:da:a8:f4:35:f1:21:41:0d:90:2a:
29:0c:bf:e7:a3:31:64:3f:6d:49:ef:b0:10:e6:08:
67:b5:bb:e2:a5:a2:5f:ba:22:98:59:c8:7a:c3:22:
4c:d2:7d:40:90:b7:60:47:ca:04:4c:3a:84:87:c4:
2c:8c:d4:7f:d6:71:14:ee:94:2d:b0:e5:1f:c1:84:
e8:57:47:10:e4:a1:8f:cb:77:da:24:76:73:bd:b6:
a9:4c:6d:a1:04:93:4e:bf:52:7d:cb:cb:38:2c:01:
02:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B0:73:30:D9:B1:FD:1A:36:84:7D:F9:14:5D:FE:93:CE:FA:25:47
X509v3 Authority Key Identifier:
keyid:BF:1F:6C:D6:FA:B9:5D:24:1C:D9:AC:5F:85:F4:D0:5F:9D:E5:8F:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vx9s1vq5XSQc2axfhfTQX53lj5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:32:e4:5b:f0:cd:59:42:50:cb:3a:8a:ad:a5:54:6f:75:b3:
0d:89:c2:0d:49:29:82:67:42:7e:ab:d1:cd:06:93:b8:59:1f:
71:f4:cd:3d:99:a7:23:69:c7:3a:f9:a5:8b:f3:a9:60:8d:fe:
e7:3e:19:7d:16:15:89:04:bd:b1:64:70:62:2a:be:7f:48:1d:
2c:db:c0:4a:72:c1:2c:99:00:cd:b3:f5:0c:62:7a:69:f1:5c:
df:21:cd:a4:97:49:9f:fb:e0:cc:72:04:5e:bc:41:b7:3d:c4:
06:33:e0:0c:bd:70:d9:47:09:4c:2a:1e:92:27:32:49:10:03:
5b:09:45:ec:aa:35:0d:1d:0a:a1:7b:94:34:83:26:6f:c5:cb:
ab:e0:ac:d5:25:b4:85:9e:78:4f:23:90:db:a9:e8:05:63:40:
e4:30:f8:44:a9:b4:39:9b:da:c9:5f:f1:93:8d:17:4a:0a:f8:
5b:f6:0a:4f:8c:ff:67:87:09:b3:99:12:49:b4:e2:c7:1a:b1:
e0:0e:6c:a5:14:89:fd:7a:a9:64:72:60:c1:e0:1a:44:25:d3:
a7:2c:d7:59:a9:47:7e:99:eb:c7:8c:56:24:c5:46:06:a3:98:
6d:73:a0:be:11:a5:aa:6b:8c:bf:42:a2:af:0c:ed:3f:fa:12:
ae:8d:20:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:49:26 2025 by rpki-client