Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
File: vDEkfzWabUktyZQ64PAPyL4hbHg.mft (raw, json)
Hash identifier: ZbLB0BtHd7vyTewzrG7jdscePai2V7DhlwrnYmY3/1c=
Subject key identifier: 96:E5:9D:D0:87:BF:4A:1F:2F:63:B3:45:2C:AB:4C:34:A2:30:55:25
Authority key identifier: BC:31:24:7F:35:9A:6D:49:2D:C9:94:3A:E0:F0:0F:C8:BE:21:6C:78
Certificate issuer: /CN=bc31247f359a6d492dc9943ae0f00fc8be216c78
Certificate serial: 0197C2A555BE2BC0E5BC3DE07F75B58DE5C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
Manifest number: 15BD
Signing time: Mon 30 Jun 2025 21:01:44 +0000
Manifest this update: Mon 30 Jun 2025 21:01:44 +0000
Manifest next update: Tue 01 Jul 2025 21:01:44 +0000
Files and hashes: 1: OTqu6ofFTyzK0xc5jrx6KgXbQ7M.roa (hash: McteydyUGW+LpPCexm+O1QefOp1oYc2XsREa8UjCVIA=)
2: dKgonROO4xpKslqbxO1osnY3m3M.roa (hash: Hl3GLighJnfdP7Jed7jsC0ysJmCVrDY4pvlKDvOdEYc=)
3: vDEkfzWabUktyZQ64PAPyL4hbHg.crl (hash: Ds5yjvRsl1d9+q2xub9A8JZLZtjGOe2JD2HtNgQFzec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 21:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:a5:55:be:2b:c0:e5:bc:3d:e0:7f:75:b5:8d:e5:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc31247f359a6d492dc9943ae0f00fc8be216c78
Validity
Not Before: Jun 30 21:01:44 2025 GMT
Not After : Jul 1 21:01:44 2025 GMT
Subject: CN=96e59dd087bf4a1f2f63b3452cab4c34a2305525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b1:42:d7:89:a7:fb:3f:50:6f:c1:d6:6f:96:
89:5e:6d:b1:d4:4b:ca:25:fc:ca:9e:c6:90:c8:d8:
9d:f0:cb:3f:7a:19:be:d7:1f:d4:2d:bf:82:4f:30:
f4:58:3f:ba:6f:28:4c:9a:22:23:c1:db:8b:e3:70:
68:ff:51:b4:c8:72:4a:9d:e2:a4:5c:83:7f:7c:08:
7f:22:1f:a2:87:10:47:8e:a9:73:42:4c:9a:03:38:
77:24:ab:cc:57:9c:15:80:42:17:bb:a9:69:54:ca:
cd:23:c3:b8:0f:00:30:18:b7:90:f4:d4:d6:21:8f:
60:ae:7f:ee:2a:21:89:47:fa:fd:6b:04:31:c4:ad:
50:09:db:70:48:52:a1:81:00:26:b2:91:d3:97:06:
ef:80:b1:91:fa:6a:52:86:c0:0c:b1:fc:9c:f4:f1:
70:40:c6:54:1b:43:e5:ed:94:9b:1a:66:d5:75:2a:
93:13:4a:67:69:1a:58:ce:48:59:52:c6:6b:99:7f:
62:92:db:18:b1:86:9b:c2:4f:91:a7:f7:48:55:00:
1a:f9:25:6a:7e:85:d6:45:6a:79:40:16:b9:df:1d:
8f:30:a8:4c:e0:ab:91:ff:9b:36:41:51:e6:42:8b:
5c:f4:ee:4e:a9:f2:46:ce:5e:ab:08:16:1a:f7:b2:
0a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:E5:9D:D0:87:BF:4A:1F:2F:63:B3:45:2C:AB:4C:34:A2:30:55:25
X509v3 Authority Key Identifier:
keyid:BC:31:24:7F:35:9A:6D:49:2D:C9:94:3A:E0:F0:0F:C8:BE:21:6C:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:d6:65:92:d4:1b:27:09:ec:61:6b:f4:76:d3:8f:85:9d:6f:
96:3f:9b:fd:fc:d7:aa:b7:fd:f6:39:c7:63:2e:dc:90:a5:83:
29:01:66:67:36:29:3d:42:b5:57:91:0a:9f:55:fe:cb:8b:0e:
59:38:ee:c4:5f:8c:52:fd:77:ff:55:8c:5e:33:ad:57:6a:92:
1b:9c:90:d1:e0:85:8c:6c:8a:a6:58:33:30:51:3a:1c:6e:89:
9b:3a:96:c5:5f:d8:96:47:ab:40:3b:57:0e:c3:63:5f:5e:db:
75:f5:8b:b3:e0:b3:a3:6b:e0:85:f2:e9:b5:b3:d1:b1:f9:bf:
be:39:9c:21:ad:09:97:cb:29:42:8c:cb:dd:13:19:e9:cf:7e:
dd:fb:06:36:7f:d7:16:d8:cc:32:89:cb:f9:7a:44:f0:e4:7e:
17:02:7b:72:aa:47:31:28:0d:bc:cf:a3:fb:07:7b:2d:ad:26:
08:6d:c6:97:1f:c9:0b:1b:fa:59:f7:81:0f:f8:14:41:a2:a9:
fe:fc:ec:4d:95:9e:ca:28:b2:55:43:1e:02:2e:0a:97:de:71:
39:74:95:dd:d9:e9:37:c9:47:09:9c:c1:05:5b:d8:19:7d:0e:
82:eb:b0:d1:0a:fe:cf:25:03:c8:2d:89:6b:5f:a0:13:91:cd:
e8:32:48:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 07:06:18 2025 by rpki-client