Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.mft
File: vkjMNUiL2ebzErIPx2oQJy8M3to.mft (raw, json)
Hash identifier: 8JEqx0j32/OAJ5kZH9lXfl73CnnGHfvwmd7siqHYqZY=
Subject key identifier: 99:C4:76:05:5E:31:CF:27:04:8D:9B:2B:D6:F6:0C:74:E3:BD:D5:05
Authority key identifier: BE:48:CC:35:48:8B:D9:E6:F3:12:B2:0F:C7:6A:10:27:2F:0C:DE:DA
Certificate issuer: /CN=be48cc35488bd9e6f312b20fc76a10272f0cdeda
Certificate serial: 0197B6D72CF4E5A05A96F9BFC8FF80C7576A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkjMNUiL2ebzErIPx2oQJy8M3to.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 14:00:44 +0000
Manifest this update: Sat 28 Jun 2025 14:00:44 +0000
Manifest next update: Sun 29 Jun 2025 14:00:44 +0000
Files and hashes: 1: YmYarA5XO8juvrriR0BtAqIdcCU.roa (hash: J8e/3PBcMoffAup3qudGNq5pMDjkvtJSIDtohCQMO8M=)
2: vkjMNUiL2ebzErIPx2oQJy8M3to.crl (hash: /Jnv/jZwWP2F4Ns932VrzouC5ky/eFS28kbHV5L6NRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkjMNUiL2ebzErIPx2oQJy8M3to.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:2c:f4:e5:a0:5a:96:f9:bf:c8:ff:80:c7:57:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be48cc35488bd9e6f312b20fc76a10272f0cdeda
Validity
Not Before: Jun 28 14:00:44 2025 GMT
Not After : Jun 29 14:00:44 2025 GMT
Subject: CN=99c476055e31cf27048d9b2bd6f60c74e3bdd505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7a:dc:c3:43:b9:6d:b9:69:54:3b:24:86:c9:
99:73:75:6c:a2:2e:f3:94:20:46:1a:72:76:0b:02:
87:0a:f8:29:c7:4c:14:be:58:86:d7:88:c2:7c:e8:
31:09:05:2d:40:c4:56:b1:53:bf:05:55:45:0c:a0:
24:a9:15:39:54:a9:3b:03:e5:1d:52:f0:43:c9:c6:
f3:6e:99:74:79:22:68:1a:3d:a6:15:92:d6:4a:3e:
20:dd:37:ab:07:a0:36:74:36:22:cc:42:bc:62:1a:
37:dd:4f:c7:e8:af:e4:f1:d5:c9:35:dd:45:b4:24:
30:65:2c:ed:02:d4:f0:02:b8:91:c5:3e:78:d7:bf:
0d:f9:f0:fd:66:9f:98:31:69:a8:69:48:8f:db:a5:
50:bc:5a:c7:69:f5:02:ea:63:1a:c7:58:45:e8:ba:
fc:eb:08:c2:40:ae:2c:d4:62:bb:65:97:5c:50:3a:
bb:39:37:60:12:0a:d7:10:fd:77:0d:ca:de:c9:92:
3e:26:ef:5a:cd:f1:9b:a0:11:db:26:43:a2:88:04:
34:6e:3f:0e:04:62:dd:6d:9c:fe:de:51:c8:94:26:
0c:f3:29:f0:40:fe:a5:c8:83:95:00:ce:79:d9:ba:
ab:98:93:3e:82:28:73:a7:1a:fe:47:7e:e5:14:61:
98:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C4:76:05:5E:31:CF:27:04:8D:9B:2B:D6:F6:0C:74:E3:BD:D5:05
X509v3 Authority Key Identifier:
keyid:BE:48:CC:35:48:8B:D9:E6:F3:12:B2:0F:C7:6A:10:27:2F:0C:DE:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkjMNUiL2ebzErIPx2oQJy8M3to.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:b9:e5:36:be:98:74:ea:65:42:b5:ac:23:25:90:dc:b2:66:
99:8f:6d:3e:45:31:e1:5a:9f:dd:ce:70:4f:c5:db:17:fe:6b:
bb:9a:29:b7:7c:f9:25:d9:cd:51:37:5c:6e:71:e6:be:61:9b:
e0:d7:35:04:50:d3:49:51:c6:1c:5a:db:e8:c0:19:b6:9d:df:
07:39:20:3f:04:40:c5:66:cc:9c:d9:11:c1:4f:42:2b:24:b9:
be:f8:23:a7:20:c1:a4:e7:06:2e:05:5b:f4:5b:fd:bc:ab:f0:
57:53:ef:59:b2:33:b1:3f:ab:d5:b2:0e:ad:03:fe:cd:de:79:
2d:73:8e:37:1e:3e:89:b9:f6:95:a3:66:98:79:6c:f1:20:0a:
6a:23:ce:b2:38:98:f6:cc:24:7e:26:a3:37:22:3e:1e:51:5a:
ea:b6:74:f1:b8:8a:af:88:49:52:b8:7b:7f:27:23:a5:51:76:
12:e4:68:da:fd:32:42:5b:25:14:fe:e7:c8:c3:5f:58:41:5d:
60:82:bb:ee:65:b2:11:5e:63:ba:d6:16:a6:d6:dd:66:31:6a:
46:af:34:01:61:ab:f8:c5:d5:51:99:7b:9a:7f:b9:87:8e:a7:
b7:63:69:d5:9f:59:4c:e7:4f:e3:d8:5c:92:45:b7:26:09:f5:
de:c9:e6:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:39:37 2025 by rpki-client