Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/91592e-aebe-42b6-8082-6fd67a92f18f/1/_-vVS_BapQ7OnFJtDNVd5ivbEfs.mft
File: _-vVS_BapQ7OnFJtDNVd5ivbEfs.mft (raw, json)
Hash identifier: k13kFj3AdKCrcCyprMt/o0FMYgw4OHJGRiw/VMKdWBM=
Subject key identifier: 85:43:4C:54:F8:82:E8:8A:9B:A1:A4:B5:C1:F8:1D:60:16:02:29:54
Authority key identifier: FF:EB:D5:4B:F0:5A:A5:0E:CE:9C:52:6D:0C:D5:5D:E6:2B:DB:11:FB
Certificate issuer: /CN=ffebd54bf05aa50ece9c526d0cd55de62bdb11fb
Certificate serial: 0197B6A1C56C86BB11853AC8CC7B6E755F2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-vVS_BapQ7OnFJtDNVd5ivbEfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/91592e-aebe-42b6-8082-6fd67a92f18f/1/_-vVS_BapQ7OnFJtDNVd5ivbEfs.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 13:02:24 +0000
Manifest this update: Sat 28 Jun 2025 13:02:24 +0000
Manifest next update: Sun 29 Jun 2025 13:02:24 +0000
Files and hashes: 1: JL56luCvuDGX5I8C7rCb_vRgTps.roa (hash: VNaKz+fumiDvVVA3InCplAYx5jTevb5UEEZ//o1jyAo=)
2: _-vVS_BapQ7OnFJtDNVd5ivbEfs.crl (hash: f37CVCodC7+Orol6emTWesl0DSqBz6dzX3vJJQYm6ZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/91592e-aebe-42b6-8082-6fd67a92f18f/1/_-vVS_BapQ7OnFJtDNVd5ivbEfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/91592e-aebe-42b6-8082-6fd67a92f18f/1/_-vVS_BapQ7OnFJtDNVd5ivbEfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_-vVS_BapQ7OnFJtDNVd5ivbEfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:c5:6c:86:bb:11:85:3a:c8:cc:7b:6e:75:5f:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffebd54bf05aa50ece9c526d0cd55de62bdb11fb
Validity
Not Before: Jun 28 13:02:24 2025 GMT
Not After : Jun 29 13:02:24 2025 GMT
Subject: CN=85434c54f882e88a9ba1a4b5c1f81d6016022954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d7:de:55:39:a3:6c:2a:3b:a5:2f:e8:29:9f:
d1:1b:5d:4d:13:23:02:83:80:b9:39:a2:95:92:5d:
16:80:16:8c:82:4f:23:9e:d3:0d:ce:55:d9:8c:dd:
70:33:46:72:eb:13:37:f2:af:90:2c:76:0d:91:67:
15:09:c6:0a:13:1a:51:8b:f3:c1:e9:dc:1d:11:ab:
31:2e:2a:de:05:7f:27:1a:f8:52:97:f1:b9:b9:da:
6f:c9:ad:89:b2:a6:57:1d:06:dd:6a:ce:06:fb:b7:
eb:f3:0f:a7:a2:77:af:71:83:08:2a:c7:fd:29:d2:
fa:10:e9:9a:ac:e6:5e:08:a0:ef:aa:23:59:5b:2b:
a7:25:41:51:17:67:2f:09:f4:d7:64:3d:cd:d9:22:
18:5a:5c:28:b6:46:8a:4b:5e:15:ef:b8:cb:c3:d7:
a6:a1:95:b9:33:55:db:9e:ea:b7:a1:33:66:ce:51:
df:f4:65:66:dc:59:62:f7:f0:82:0f:ab:ea:25:8b:
26:3a:02:82:8b:48:f8:ed:ae:9c:6e:42:ec:93:38:
5b:07:92:5c:e6:da:88:e5:05:53:91:62:d3:e5:ab:
40:72:23:e7:ce:41:1e:d8:8e:4c:6c:26:c2:f2:cf:
92:3e:d3:b7:d7:56:c3:60:e1:c8:ec:79:a5:9e:20:
cb:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:43:4C:54:F8:82:E8:8A:9B:A1:A4:B5:C1:F8:1D:60:16:02:29:54
X509v3 Authority Key Identifier:
keyid:FF:EB:D5:4B:F0:5A:A5:0E:CE:9C:52:6D:0C:D5:5D:E6:2B:DB:11:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-vVS_BapQ7OnFJtDNVd5ivbEfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/91592e-aebe-42b6-8082-6fd67a92f18f/1/_-vVS_BapQ7OnFJtDNVd5ivbEfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/91592e-aebe-42b6-8082-6fd67a92f18f/1/_-vVS_BapQ7OnFJtDNVd5ivbEfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:09:11:28:e8:ba:63:ee:7b:f0:bb:09:e1:18:f6:43:a2:41:
dc:e1:51:13:15:b6:2e:75:2c:a3:3e:2d:67:58:20:0d:34:74:
28:1c:10:b8:8e:45:0e:a1:9a:4f:9e:09:20:85:20:76:b4:f7:
df:a2:a5:85:c8:21:f9:a6:94:d4:7d:8a:ba:08:71:65:2e:f9:
0b:4e:17:a3:a0:8a:7b:1f:c2:82:95:0c:3e:51:28:1c:d8:f8:
b3:55:0a:29:b3:68:71:5c:13:1e:06:e6:99:6e:89:de:7d:08:
3e:db:de:8c:1b:53:ae:cb:d2:91:67:a4:b8:ed:42:c0:1e:c8:
32:07:00:26:62:db:e8:8c:44:32:5f:4b:58:57:03:84:74:f9:
82:f8:25:1e:8a:2c:9c:56:86:c8:6c:58:41:9b:bb:ba:a3:5f:
94:21:6c:72:ee:a3:70:16:35:8d:aa:ac:b7:77:26:d7:9a:93:
b9:4e:67:4c:cf:c2:f9:1c:4f:d7:b5:d5:61:f4:20:0f:ca:7a:
b1:3a:0e:0b:59:34:6b:8e:c7:6c:a4:26:4f:cd:77:4c:9e:25:
e4:f9:8a:06:11:61:3d:74:0b:86:f5:81:6e:b0:3d:4a:d3:c5:
9f:39:3e:73:05:ed:84:6e:c0:35:33:f5:19:0b:6a:f9:75:7c:
26:02:57:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:55:50 2025 by rpki-client