Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.mft
File: vx1f6v05F0clv-S--RvSfHsvb5E.mft (raw, json)
Hash identifier: poiWeF/lFJ4NyY2jDhvFLK20My6JS6MG65Mnhlb063I=
Subject key identifier: D6:1D:87:63:1A:6B:B8:3F:45:81:B8:58:15:59:04:61:76:A9:53:EE
Authority key identifier: BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91
Certificate issuer: /CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
Certificate serial: 0197B745AE03BD3425648805F930D9FCA400
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.mft
Manifest number: 15E3
Signing time: Sat 28 Jun 2025 16:01:26 +0000
Manifest this update: Sat 28 Jun 2025 16:01:26 +0000
Manifest next update: Sun 29 Jun 2025 16:01:26 +0000
Files and hashes: 1: FBtv0zQKgpSJGVwmOiWrJgdZXTQ.roa (hash: jZyVvy/AnilHzUcrfJcn+M+uqzeksVwB5ieR7HcmZ3o=)
2: JLZHp3zugUr0BJKEkPLt_peuCWY.roa (hash: xqh8b79ZtGYi3X/2gVjxCLbm1mPbREjzpn3t3zp8STc=)
3: QBbKMrewUV5LysqmZYBRCD2P-aU.roa (hash: pyCMXVW0aDhN3pnl3u7Ja6A+yxwNB3DI3wsCXDY581k=)
4: WJYzgmcrcmILpqEG0aOvuAZFJSY.roa (hash: 6cn2iTDXSQqMon3jkehha+lFwjisWUfx0Tw++dlztuk=)
5: ZIR_yTw54Vg-opPAQLBsjCA0kZk.roa (hash: IWAm2sXCY8KxHtRY4zBKo5b13l+g7LnQAwj1OVOtgXw=)
6: a2N7ZqNTTwHGwfd7829psoPCAf8.roa (hash: l07jq1tDJlSMiPUaiQ9Tqz6dDSHfIb3Fw8fa48dds2M=)
7: laT6cLR_CsAMLDNRuHbw-QE9_Lg.roa (hash: /As0MXu+Jd4Zfmw66mysjQFz8bFMgrz+a8Z5fFD5uCE=)
8: vx1f6v05F0clv-S--RvSfHsvb5E.crl (hash: Jnc1hsRhSkeACAuWdpaMI9t5tfxUDBUjsTx1OT73gtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:ae:03:bd:34:25:64:88:05:f9:30:d9:fc:a4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
Validity
Not Before: Jun 28 16:01:26 2025 GMT
Not After : Jun 29 16:01:26 2025 GMT
Subject: CN=d61d87631a6bb83f4581b8581559046176a953ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5d:0b:c9:ff:87:23:5f:a0:48:c8:b5:69:6a:
1d:5a:cb:71:2c:c4:e3:64:f9:99:64:25:f0:12:dc:
a4:d9:a0:89:ac:d7:e2:30:76:74:63:e6:b6:07:ee:
4c:40:f9:76:32:36:1f:ec:6f:1c:b0:92:45:b2:de:
63:21:3f:5c:ea:eb:2e:98:ed:fe:4a:3f:cf:f5:a1:
a0:38:3b:0e:43:ca:93:65:c8:d9:94:55:56:af:1d:
f7:d3:9d:c7:9b:be:5b:76:4b:ae:b5:45:b2:29:2f:
4b:2a:43:02:85:60:3c:0b:4a:96:52:f5:ce:fe:ac:
a9:bf:83:84:ff:26:4a:87:ee:12:92:3a:40:70:d5:
03:c4:dc:af:1b:89:48:d9:a6:95:53:a3:f8:e7:9e:
30:1b:69:7b:1c:92:81:2e:25:09:0e:78:ba:56:19:
80:a1:5a:25:5c:ac:01:4a:2f:28:27:60:c9:58:48:
85:8b:1f:8f:98:db:61:f0:98:15:67:4c:54:67:6c:
e5:c6:95:6c:f9:e3:1d:27:3c:da:17:e6:c3:be:00:
cd:a6:65:ef:e0:02:f6:62:02:72:28:1d:be:9c:f8:
58:3a:4e:15:52:82:bb:5d:82:c9:0f:9d:0a:d0:86:
52:fb:34:af:c7:bc:91:f5:fc:19:bc:49:eb:e0:ed:
1f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:1D:87:63:1A:6B:B8:3F:45:81:B8:58:15:59:04:61:76:A9:53:EE
X509v3 Authority Key Identifier:
keyid:BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:1c:7e:8e:fb:a5:0d:4e:22:71:bc:c4:ee:47:15:d0:d1:27:
c8:fb:91:ad:09:07:45:b9:44:d8:f6:6f:83:84:6c:35:a3:47:
a4:9c:c5:bc:df:0d:71:99:73:1c:91:4e:48:a2:65:0b:82:e3:
78:13:53:99:69:57:a5:9e:9d:83:58:d2:eb:3a:df:7f:16:9c:
17:a1:96:7c:f6:5d:b8:02:66:7b:78:f0:f7:ff:01:0f:23:a2:
a3:cf:49:ee:f1:34:5b:20:1f:3a:8a:5f:f6:fc:ed:ce:09:76:
8c:bb:65:64:c9:7c:9a:d4:07:fa:d7:60:43:91:ff:ed:8f:bd:
6c:94:46:ae:b2:72:ec:7e:13:04:a4:09:c5:15:a2:92:1a:c7:
0c:b9:bc:51:4d:b4:b0:06:b4:70:18:f9:1a:26:2e:e9:eb:b0:
75:2d:fb:44:10:c8:d3:ae:6c:82:60:7d:33:39:3e:ed:04:1a:
c2:82:fb:b8:04:24:c2:aa:a5:cd:24:d5:f0:de:12:dd:49:a4:
9e:d5:e0:75:b7:15:98:f3:7e:ad:59:a2:4c:92:3d:f9:60:5a:
09:97:84:46:bc:90:96:c7:9c:6e:86:68:88:26:14:2f:81:8d:
66:ac:86:11:f5:c4:da:4f:a4:30:78:39:f0:37:ca:35:19:23:
12:dd:e2:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:25:51 2025 by rpki-client