Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.mft
File: vRFtNbEck4IzrLrfXXwtWyxtAVQ.mft (raw, json)
Hash identifier: QPXAHkfk9cA16T8ghkuED3FOI1snoFrj7iFXdKbOtsc=
Subject key identifier: 7F:22:99:22:3D:7B:2B:81:F9:EB:3B:5E:DE:32:7B:D0:B2:FB:D5:2F
Authority key identifier: BD:11:6D:35:B1:1C:93:82:33:AC:BA:DF:5D:7C:2D:5B:2C:6D:01:54
Certificate issuer: /CN=bd116d35b11c938233acbadf5d7c2d5b2c6d0154
Certificate serial: 0197B7B36C0CBF69B01C55807F8041DD8A14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vRFtNbEck4IzrLrfXXwtWyxtAVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.mft
Manifest number: 0BBB
Signing time: Sat 28 Jun 2025 18:01:18 +0000
Manifest this update: Sat 28 Jun 2025 18:01:18 +0000
Manifest next update: Sun 29 Jun 2025 18:01:18 +0000
Files and hashes: 1: Z6Q9yfl3feHtt8qjeJosNh_6sQk.roa (hash: GwOmbcb5vlCx0Hzj3NGEHPu2R7jhNAhkCt0fTS4A/18=)
2: vRFtNbEck4IzrLrfXXwtWyxtAVQ.crl (hash: msFlyPG4VMSEAcCM3tqWmlQu7DGf37ez9zGrRotfYbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vRFtNbEck4IzrLrfXXwtWyxtAVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:6c:0c:bf:69:b0:1c:55:80:7f:80:41:dd:8a:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd116d35b11c938233acbadf5d7c2d5b2c6d0154
Validity
Not Before: Jun 28 18:01:18 2025 GMT
Not After : Jun 29 18:01:18 2025 GMT
Subject: CN=7f2299223d7b2b81f9eb3b5ede327bd0b2fbd52f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:50:42:d0:32:84:17:bd:4e:a1:ee:a9:b1:ec:
92:f6:0a:bf:12:27:92:5d:8e:83:c3:31:be:f0:6b:
32:b5:71:ea:91:b1:66:3d:15:4f:ae:2e:1d:5b:5a:
20:c9:a5:3c:b6:fd:5d:68:c4:15:85:f0:fd:28:ea:
fe:97:ec:84:98:3d:3a:3e:59:3f:c7:92:64:35:66:
4d:23:1c:e0:46:64:35:84:d6:90:27:61:f3:fd:63:
f3:1f:c1:8d:28:c4:da:48:e7:57:ea:9f:5d:32:c3:
3b:95:5f:82:9b:ff:db:08:02:e4:08:f4:d9:db:8c:
19:65:25:ad:61:56:30:5b:d2:f5:1a:c1:65:73:d9:
bf:46:70:aa:2f:54:6c:30:09:dc:67:ba:18:82:4f:
4c:06:b2:0c:ba:90:2e:54:6c:b8:ff:18:18:02:84:
03:5a:8f:0f:3b:f3:e0:47:1a:91:c5:e6:49:79:4d:
1f:d6:ff:28:44:d9:5a:35:ea:44:94:f5:d2:9a:a0:
7c:57:e3:f6:0b:3b:cd:06:09:c9:ce:84:26:f7:47:
8f:76:71:68:55:46:86:b4:6c:c4:7b:a5:99:ac:51:
37:5e:6b:66:af:70:6c:8e:ce:d5:66:70:df:4c:ee:
08:63:1e:33:82:c4:a0:31:ab:18:23:53:57:20:f7:
04:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:22:99:22:3D:7B:2B:81:F9:EB:3B:5E:DE:32:7B:D0:B2:FB:D5:2F
X509v3 Authority Key Identifier:
keyid:BD:11:6D:35:B1:1C:93:82:33:AC:BA:DF:5D:7C:2D:5B:2C:6D:01:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRFtNbEck4IzrLrfXXwtWyxtAVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:87:39:a1:27:aa:1f:45:cf:f6:b0:a1:70:96:44:a7:df:58:
48:3e:fe:2f:b4:2e:a3:e1:fa:c5:87:f9:ba:18:20:98:01:94:
af:1c:29:92:56:47:56:28:fa:78:ad:b4:eb:0f:16:4b:2f:7f:
16:61:20:5c:ae:07:c8:1a:6f:05:e4:8d:04:43:9e:47:3e:4e:
37:ed:69:7d:0e:33:08:bc:3b:32:3c:e5:44:a3:4f:7f:b2:cc:
e9:b5:7e:1f:1a:d2:73:76:d6:a5:a2:3d:6f:0b:84:22:5f:6f:
1b:d9:61:00:50:5d:30:0c:25:df:2d:cb:dc:d4:0f:63:7e:9b:
57:19:b2:d0:47:9d:a6:a4:8f:d6:14:3c:27:d0:89:23:fc:4e:
da:c1:b2:71:d8:f5:16:05:13:5b:d2:61:aa:22:73:bd:23:1f:
96:dc:10:78:62:64:0c:5b:bb:65:f4:d5:5c:8e:64:7c:56:f9:
e4:9b:6d:61:65:2d:f6:a5:e2:4d:a0:c7:ec:d7:a0:6b:78:9b:
fa:2f:a0:d8:7a:47:06:38:81:75:ef:3d:ab:ce:f7:9e:7c:bc:
00:4a:b7:6b:f5:c6:32:bb:2d:c2:76:1a:8b:5b:76:11:9a:7f:
84:dd:91:39:f5:44:6d:c4:63:ac:cb:04:c0:88:9f:31:c2:27:
f1:d5:5f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:28:59 2025 by rpki-client