Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft
File: vZoDUhhk_eVxr63vAfMpdZg9H2I.mft (raw, json)
Hash identifier: 9dWn4eBNs2gonbiJ6bWLIUwnfZq7R++LcsbWIMAJqmw=
Subject key identifier: DF:99:CC:5E:65:5E:03:1F:95:62:1D:C8:43:20:8F:AE:73:AA:92:37
Authority key identifier: BD:9A:03:52:18:64:FD:E5:71:AF:AD:EF:01:F3:29:75:98:3D:1F:62
Certificate issuer: /CN=bd9a03521864fde571afadef01f32975983d1f62
Certificate serial: 0197B89009409BDFE60AB46AB334B76DDADB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZoDUhhk_eVxr63vAfMpdZg9H2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft
Manifest number: 9B
Signing time: Sat 28 Jun 2025 22:02:16 +0000
Manifest this update: Sat 28 Jun 2025 22:02:16 +0000
Manifest next update: Sun 29 Jun 2025 22:02:16 +0000
Files and hashes: 1: RJNuysFIW66Gw4c0piXvnXkEo9o.roa (hash: /TsRrqxKejX5cWBdLvn7sFDNt5iNj6A7iHaePoLLWJk=)
2: vZoDUhhk_eVxr63vAfMpdZg9H2I.crl (hash: e2yjdYH9/sG3JYiwm+7mk4c5O/63H8KqAW8O07k35Qs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZoDUhhk_eVxr63vAfMpdZg9H2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:09:40:9b:df:e6:0a:b4:6a:b3:34:b7:6d:da:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd9a03521864fde571afadef01f32975983d1f62
Validity
Not Before: Jun 28 22:02:16 2025 GMT
Not After : Jun 29 22:02:16 2025 GMT
Subject: CN=df99cc5e655e031f95621dc843208fae73aa9237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c7:1b:95:78:3a:f5:14:f7:8e:51:b3:85:13:
a7:5e:cc:ec:2b:9f:7a:e4:86:bf:34:ed:42:49:04:
5c:f5:26:47:d5:49:43:b3:38:4b:f4:bb:c8:53:f2:
a7:61:35:7f:08:88:bb:9f:bc:40:25:8a:58:06:a9:
3f:94:66:16:82:0c:d8:6f:dc:a8:1b:9b:1b:30:89:
03:5c:0f:3a:0f:e2:25:3a:cb:55:ea:46:69:2a:6b:
44:86:4a:fa:de:6d:42:b8:5c:cf:36:60:54:24:6c:
94:20:fd:1f:56:5e:2b:66:26:f9:30:5e:7a:59:c7:
7c:47:1b:c5:ab:db:f4:fb:e4:cb:b7:7e:39:d4:b1:
ce:16:fb:93:6c:58:f6:9b:2d:4e:fd:4c:31:12:f4:
23:4e:f5:9f:1a:7b:72:0e:26:6d:4f:f4:2f:85:85:
58:7d:ea:bd:67:37:8c:f8:85:37:83:f4:ed:2f:db:
cb:db:32:8b:7b:da:06:b6:02:7c:d3:f7:56:ba:8c:
9d:be:4a:6d:12:1e:47:7c:92:26:ff:da:a6:5c:b8:
e1:9c:eb:2c:66:dc:da:a3:05:66:e6:63:ce:bc:91:
45:47:2b:98:b8:0e:04:62:c2:ca:37:18:a9:fb:86:
4c:44:97:3f:ca:7e:4b:a7:0e:ac:94:d9:4d:cc:8f:
d0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:99:CC:5E:65:5E:03:1F:95:62:1D:C8:43:20:8F:AE:73:AA:92:37
X509v3 Authority Key Identifier:
keyid:BD:9A:03:52:18:64:FD:E5:71:AF:AD:EF:01:F3:29:75:98:3D:1F:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZoDUhhk_eVxr63vAfMpdZg9H2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:51:e6:fc:63:8d:40:69:6b:af:78:db:f9:73:49:2a:20:7a:
07:ce:d9:c5:07:44:23:4f:84:e4:0f:f1:41:a8:60:b7:7e:97:
ba:85:e3:5d:f4:a5:8c:5b:62:cc:3a:59:36:d6:bf:16:0c:3e:
af:f1:cd:43:43:10:78:bd:b7:90:ca:3c:ad:1a:97:5a:48:98:
4b:ff:bc:47:51:f9:f6:6f:4b:a6:94:ee:3b:14:75:88:26:f6:
84:0f:64:fc:5e:f3:e0:56:1c:89:d5:ce:57:81:ba:2f:cd:cd:
c5:59:ad:23:3d:0c:92:ec:5f:97:6c:f1:cb:2b:2b:0b:02:14:
df:d0:05:bf:8c:f9:46:7d:8e:c6:67:82:f2:6a:01:ec:cb:65:
64:2d:42:6d:11:b9:e1:72:c6:5a:a1:54:19:cc:cb:eb:09:c8:
3f:88:9e:94:4c:20:81:26:d6:a1:7a:56:53:c9:5b:bc:d1:0b:
c8:ba:af:b9:10:9d:2c:3e:9c:61:ac:f4:69:b2:93:47:d7:13:
ed:6a:70:d1:87:8a:ec:d8:f7:b6:49:a4:ea:be:c0:5c:90:c3:
5c:d3:45:a0:9c:b5:64:72:49:a9:be:fb:c1:31:3f:2a:c8:aa:
7e:65:14:ca:3e:a4:89:bb:50:82:92:5c:d8:ef:95:2f:38:1d:
59:58:e7:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:27:47 2025 by rpki-client