Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/vIPChDwWSbAFTJEST-4DEUCV4WM.mft
File: vIPChDwWSbAFTJEST-4DEUCV4WM.mft (raw, json)
Hash identifier: 0cwS040mHJdGdpcww67HiVZncEBCxqXC1MYO9cKryE4=
Subject key identifier: C8:90:1D:85:6B:B9:A3:D8:FD:A5:EC:16:63:54:96:30:C5:B5:51:9A
Authority key identifier: BC:83:C2:84:3C:16:49:B0:05:4C:91:12:4F:EE:03:11:40:95:E1:63
Certificate issuer: /CN=bc83c2843c1649b0054c91124fee03114095e163
Certificate serial: 0197B6A1AB4711F8C16DB8BA7A3598283D32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIPChDwWSbAFTJEST-4DEUCV4WM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/vIPChDwWSbAFTJEST-4DEUCV4WM.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 13:02:17 +0000
Manifest this update: Sat 28 Jun 2025 13:02:17 +0000
Manifest next update: Sun 29 Jun 2025 13:02:17 +0000
Files and hashes: 1: SyfvPrUk0EqUlUibCeR9AFkwGwg.roa (hash: zvu0Xkf7wJgRiFUAHEOyER7LyU5jW8xnRDY/dZI92fo=)
2: vIPChDwWSbAFTJEST-4DEUCV4WM.crl (hash: 3FIcL98oo1u9iml1qaMpkcnD7m8h8bjamOsA+5nafOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/vIPChDwWSbAFTJEST-4DEUCV4WM.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/vIPChDwWSbAFTJEST-4DEUCV4WM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vIPChDwWSbAFTJEST-4DEUCV4WM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:ab:47:11:f8:c1:6d:b8:ba:7a:35:98:28:3d:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc83c2843c1649b0054c91124fee03114095e163
Validity
Not Before: Jun 28 13:02:17 2025 GMT
Not After : Jun 29 13:02:17 2025 GMT
Subject: CN=c8901d856bb9a3d8fda5ec1663549630c5b5519a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:79:0c:ae:ae:b9:20:6b:f8:c7:b6:ef:97:36:
dc:44:d3:9b:e3:cd:92:05:60:cc:22:6f:d7:c9:f8:
83:c4:b9:e9:44:92:74:ff:7e:29:9b:dd:05:5a:ac:
56:09:95:c5:5c:e0:e0:a2:56:ee:2e:67:6e:64:38:
c0:6e:53:9e:17:40:a7:49:80:94:08:23:f2:39:f0:
07:b6:bc:53:f1:d5:ec:a2:ea:97:51:e0:e1:5a:a6:
47:3a:06:ba:d3:f7:d5:22:66:03:fe:58:b2:0a:35:
d2:db:92:7e:50:a0:75:d3:c0:b2:8c:b7:f5:7f:6f:
cb:34:74:f6:5d:0c:5a:89:40:9f:81:7a:aa:8a:03:
17:d0:f7:98:05:6d:a2:85:12:21:0d:16:c4:e3:62:
b3:00:a6:32:76:a8:3b:8a:85:ab:fd:56:1e:23:06:
82:ca:7f:71:90:b5:d2:e6:5e:1e:e3:8d:41:e2:fe:
a5:68:ec:d5:58:ee:09:ca:f2:7d:0d:84:db:90:b1:
90:66:6a:7f:4c:4d:fd:6f:1c:4c:7a:c1:66:fe:3a:
4f:0b:6c:41:4d:3c:74:4b:b9:16:18:80:68:f1:e3:
87:b2:fb:eb:69:81:d1:c2:8c:f1:e9:d5:af:d9:63:
79:3f:cc:1c:90:83:9a:e4:7e:a1:09:3d:28:25:36:
12:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:90:1D:85:6B:B9:A3:D8:FD:A5:EC:16:63:54:96:30:C5:B5:51:9A
X509v3 Authority Key Identifier:
keyid:BC:83:C2:84:3C:16:49:B0:05:4C:91:12:4F:EE:03:11:40:95:E1:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIPChDwWSbAFTJEST-4DEUCV4WM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/vIPChDwWSbAFTJEST-4DEUCV4WM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/vIPChDwWSbAFTJEST-4DEUCV4WM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:1e:1f:83:bc:d3:eb:7e:0e:55:a3:07:ec:88:b2:5e:83:cf:
99:f3:32:26:63:90:6d:bf:cf:47:c4:4c:04:45:68:d9:f5:8d:
37:e6:07:81:9b:07:67:03:63:e8:01:89:a9:3a:76:50:fd:bc:
bc:ce:7c:9b:64:2a:ea:0f:b0:f3:e7:2b:3a:88:43:fd:b9:16:
89:79:1a:57:96:4c:e8:83:d5:ff:4f:49:82:13:b3:57:e0:05:
0d:69:b1:69:36:88:0f:fd:2c:63:53:40:12:68:df:a3:29:78:
35:7a:97:0a:1c:fa:c3:cb:9b:0e:26:2d:b9:c5:05:b2:03:24:
f1:bd:07:d4:3d:f9:cf:34:19:e8:e1:55:81:db:48:74:78:df:
1c:17:f6:5e:0e:e0:d7:ed:e8:1b:4c:53:d8:9a:53:49:2e:87:
3f:05:5c:6d:30:6a:46:06:a7:4f:af:d8:61:ee:f2:42:26:1c:
bc:9f:cf:0a:a8:91:7a:19:b9:56:72:14:8c:47:2d:57:47:c0:
1b:b2:08:7e:14:a5:d2:ca:7d:54:72:2a:55:a3:da:18:82:c5:
46:47:d8:cf:48:3a:47:ae:2f:81:b1:80:47:f3:65:d9:c4:7e:
f6:7a:d2:6f:69:88:86:47:28:c2:8b:f1:66:07:e8:81:cc:63:
ee:f1:d1:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:33:13 2025 by rpki-client