Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.mft
File: vfyN37hBh58OUw3OO3-Fgn8MGT8.mft (raw, json)
Hash identifier: 2MlO5zrIxeDomarnRR5z1EmZQOLKn5o5o/hu2jx1ku4=
Subject key identifier: 67:10:78:15:78:31:6D:7B:B3:1C:AF:43:0D:B4:5E:20:D9:E0:2F:10
Authority key identifier: BD:FC:8D:DF:B8:41:87:9F:0E:53:0D:CE:3B:7F:85:82:7F:0C:19:3F
Certificate issuer: /CN=bdfc8ddfb841879f0e530dce3b7f85827f0c193f
Certificate serial: 0197B6A16B066FEA96965B226CF5206F78E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfyN37hBh58OUw3OO3-Fgn8MGT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.mft
Manifest number: 0535
Signing time: Sat 28 Jun 2025 13:02:01 +0000
Manifest this update: Sat 28 Jun 2025 13:02:01 +0000
Manifest next update: Sun 29 Jun 2025 13:02:01 +0000
Files and hashes: 1: evKF7Ghixw06TsX8m9WS1kttuTQ.roa (hash: C0t0ubGvyf/fMEfN+yYg9iML6okU33nNE7cYDrXAdGg=)
2: vfyN37hBh58OUw3OO3-Fgn8MGT8.crl (hash: lyDGKRxbrsJZvc9ErGETI/7Y2vDdCGqEX1d0rrzwSTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vfyN37hBh58OUw3OO3-Fgn8MGT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:6b:06:6f:ea:96:96:5b:22:6c:f5:20:6f:78:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdfc8ddfb841879f0e530dce3b7f85827f0c193f
Validity
Not Before: Jun 28 13:02:01 2025 GMT
Not After : Jun 29 13:02:01 2025 GMT
Subject: CN=6710781578316d7bb31caf430db45e20d9e02f10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b7:13:69:ad:48:5f:d9:8b:3d:51:6f:c9:cc:
07:57:ca:ea:0c:ab:74:75:8c:c2:23:ef:cc:a4:6b:
c0:b4:3d:d3:33:b3:80:cd:a3:4f:3e:fa:3e:92:be:
54:c6:b2:a5:e6:51:f9:15:9d:01:e9:4d:b2:39:bf:
8b:70:2f:c9:61:33:38:68:be:b8:83:db:8a:c2:1e:
d9:79:32:e0:c4:2d:63:70:39:ce:0c:9d:f1:60:af:
70:68:ef:76:31:ad:c8:67:4f:be:60:69:a4:5d:a9:
07:72:fb:8d:cc:13:91:72:ad:41:15:d1:63:df:dc:
bf:4b:2b:8b:4a:c3:b0:46:c9:21:81:c4:4d:fc:00:
89:2a:63:8c:b2:80:3e:ae:1b:1c:4a:c1:2f:68:f5:
40:fa:9c:32:53:e4:a8:86:c3:d1:e4:77:43:41:f5:
49:8e:16:a7:b8:b3:d5:04:93:ac:68:1d:62:ae:1c:
23:10:9e:e7:c6:27:7a:91:61:06:40:b6:19:30:21:
e0:75:e8:48:41:71:69:e0:33:4f:22:d0:3f:50:1d:
32:ea:c8:1a:97:66:98:27:cb:40:7b:3d:78:ba:19:
09:5d:b6:6c:17:f7:80:17:36:5b:b4:68:2a:59:a9:
90:f1:a1:01:57:ce:02:81:97:b3:5c:bf:0b:aa:49:
ea:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:10:78:15:78:31:6D:7B:B3:1C:AF:43:0D:B4:5E:20:D9:E0:2F:10
X509v3 Authority Key Identifier:
keyid:BD:FC:8D:DF:B8:41:87:9F:0E:53:0D:CE:3B:7F:85:82:7F:0C:19:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfyN37hBh58OUw3OO3-Fgn8MGT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:58:36:df:b1:e6:7a:67:df:7e:65:62:38:ea:1f:7d:3b:ea:
0a:c2:28:5b:6c:79:e8:34:ac:92:88:53:7f:0b:7c:34:82:36:
4f:b3:72:ea:85:42:55:f2:ab:eb:25:82:66:e7:5c:49:d0:b9:
ca:e7:2c:d7:d5:46:f5:b9:f3:24:76:c6:bf:54:43:cb:3a:94:
b1:66:3d:bd:de:5d:28:57:71:ed:78:28:45:a7:46:7d:72:fe:
ff:42:d1:14:63:5b:9d:47:64:b2:70:3a:6a:6f:8f:e1:58:d3:
c2:a1:8d:85:35:68:d8:57:2b:ba:dd:6f:b2:17:11:fc:c7:85:
84:8a:5d:8f:8b:be:01:59:89:b0:a0:fc:5a:9f:e4:e9:0a:0e:
15:24:a5:25:90:8c:bc:1d:0f:cc:1b:46:9e:5c:a2:5f:c6:ab:
f4:e6:3a:64:19:12:0f:92:7a:75:7e:49:1c:97:60:c6:6d:97:
9b:ba:2f:ca:dd:63:0d:74:cb:36:2d:47:b6:f3:b7:70:62:36:
a1:e8:4b:c2:59:4d:09:ad:a3:fb:6e:87:51:d9:57:cd:96:94:
5e:4a:8c:87:40:f4:02:b0:89:28:9d:2f:ee:6f:0d:3c:75:83:
9a:86:8f:6e:fc:4e:3e:fa:bd:26:8a:e8:d5:9a:f1:1a:3d:3a:
1d:79:23:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:36:49 2025 by rpki-client