Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.mft
File: vGY8bnedrpvbBGhU8Yn-jFw8MuE.mft (raw, json)
Hash identifier: 652YFM1j9BAdfemJlNNE0XKqVXgHkRXp+MBK0BOMUlo=
Subject key identifier: 03:58:B7:E2:B5:AE:7A:52:EC:3B:87:44:C0:93:51:7E:4E:37:99:F5
Authority key identifier: BC:66:3C:6E:77:9D:AE:9B:DB:04:68:54:F1:89:FE:8C:5C:3C:32:E1
Certificate issuer: /CN=bc663c6e779dae9bdb046854f189fe8c5c3c32e1
Certificate serial: 0197B88FDF864928D69A1A843F5999C59A2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGY8bnedrpvbBGhU8Yn-jFw8MuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.mft
Manifest number: 0BE7
Signing time: Sat 28 Jun 2025 22:02:05 +0000
Manifest this update: Sat 28 Jun 2025 22:02:05 +0000
Manifest next update: Sun 29 Jun 2025 22:02:05 +0000
Files and hashes: 1: 5xqkx7rxr0A4ZoZWTCOMeWbUwt0.roa (hash: 4Hck3JY+pm1ENmjLoSNCLwI2ygQA04QrM7UO64TPQ/E=)
2: Tf-7kei6W8Gb1yTlztC-z7hqkGM.roa (hash: A3Jg7NsFsBNEFPdV1BOzgwIAFoCzktMr6ou5P5ENzQU=)
3: vGY8bnedrpvbBGhU8Yn-jFw8MuE.crl (hash: FfuraURL5HMVeerOj8ievSettY6kGQtqCi4oDgVkny8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vGY8bnedrpvbBGhU8Yn-jFw8MuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:df:86:49:28:d6:9a:1a:84:3f:59:99:c5:9a:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc663c6e779dae9bdb046854f189fe8c5c3c32e1
Validity
Not Before: Jun 28 22:02:05 2025 GMT
Not After : Jun 29 22:02:05 2025 GMT
Subject: CN=0358b7e2b5ae7a52ec3b8744c093517e4e3799f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b9:a1:07:73:7b:47:2c:ef:39:40:07:61:86:
d9:fb:45:da:76:bf:d6:06:01:f8:dc:1a:7c:91:a5:
a6:4c:25:0b:87:31:e3:4c:24:ef:d2:28:11:d3:69:
ce:c4:3e:96:5a:37:c5:a6:73:1d:08:82:f7:21:ca:
aa:a2:42:c4:f7:35:47:5f:3c:af:69:5d:be:df:c0:
fe:dd:bb:67:89:84:ea:98:a8:b1:40:18:81:8c:59:
1c:2f:2f:5c:ab:67:ac:bc:4f:e3:17:7b:5c:58:a2:
75:02:a3:95:21:2b:cc:3c:22:b0:c0:ac:1f:a3:1c:
38:e2:fb:f8:04:71:3d:ff:07:58:bf:e1:46:e5:ff:
2a:4e:e9:50:e8:8a:e2:5c:2e:d1:c5:10:93:f3:32:
fe:c5:2b:b0:79:91:45:13:cd:bd:f0:dd:dc:bc:1d:
ff:cd:96:fd:42:3c:35:8e:74:80:55:c9:a4:9e:b5:
4d:9c:6f:bf:0b:0b:d1:4d:24:c0:23:5c:4c:c3:81:
d6:b4:e0:4e:aa:01:9b:03:b8:a8:27:f5:bf:35:a0:
33:36:92:53:0b:ea:7e:45:67:2b:9b:6b:09:59:84:
da:81:ba:16:6e:3e:17:24:f6:69:d3:d8:a2:da:2f:
b9:ee:06:f4:b1:68:3d:7c:f2:1d:5e:be:91:d6:bc:
56:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:58:B7:E2:B5:AE:7A:52:EC:3B:87:44:C0:93:51:7E:4E:37:99:F5
X509v3 Authority Key Identifier:
keyid:BC:66:3C:6E:77:9D:AE:9B:DB:04:68:54:F1:89:FE:8C:5C:3C:32:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGY8bnedrpvbBGhU8Yn-jFw8MuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:e9:3e:56:93:9b:40:37:ed:59:de:25:47:5b:bf:84:5f:a5:
9a:da:f8:ab:08:f6:9e:6c:79:a4:85:4b:6e:c6:dd:1c:62:8b:
7f:bb:f6:c1:61:ef:48:b8:2f:5d:3f:6b:3e:07:95:37:e7:d2:
ef:ad:36:6e:0c:a7:66:6e:a5:4f:b6:ed:24:81:48:4c:0a:c1:
63:79:70:d8:bb:0d:d1:00:2a:61:4c:c0:07:88:27:d2:7f:50:
3f:8a:a2:ef:ff:81:25:b6:59:f4:1e:6a:82:cd:44:9f:92:5b:
11:04:9b:92:64:fc:47:82:e5:1e:06:74:31:1f:be:13:44:a0:
75:df:c2:28:2c:59:a7:1f:09:20:98:d2:c1:5c:9e:a3:c8:63:
27:28:03:aa:18:a0:37:98:d6:1c:01:c8:05:df:09:12:3f:f2:
e6:c1:5f:f9:ea:c7:77:78:5c:91:d1:46:f6:86:4c:b6:d7:a9:
ac:af:0f:04:e7:b6:ba:c6:84:6a:02:5d:86:5b:8e:04:77:18:
c7:33:89:d5:70:df:b4:56:c8:57:e2:3b:97:f6:1e:15:fb:e1:
ed:02:3c:64:0f:b6:3d:07:7c:19:ca:29:f7:7a:03:58:03:8d:
ef:41:bf:40:d4:c7:cd:a7:00:cf:03:ba:f8:6d:64:b7:e0:22:
32:f3:61:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:50:13 2025 by rpki-client