Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/vIo7xH0TyD99HPcqE34AZvg9Bgg.mft
File: vIo7xH0TyD99HPcqE34AZvg9Bgg.mft (raw, json)
Hash identifier: SsZa8j7rMa323NtdOjLudW2HOK4iBgw9jZQB/ebf7NE=
Subject key identifier: 13:DE:1D:2D:BD:65:50:A4:45:18:6F:25:C4:F8:DA:3C:44:E1:EA:D8
Authority key identifier: BC:8A:3B:C4:7D:13:C8:3F:7D:1C:F7:2A:13:7E:00:66:F8:3D:06:08
Certificate issuer: /CN=bc8a3bc47d13c83f7d1cf72a137e0066f83d0608
Certificate serial: 0197B88F2BB897DCF86AD6A67E0071AF2C0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIo7xH0TyD99HPcqE34AZvg9Bgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/vIo7xH0TyD99HPcqE34AZvg9Bgg.mft
Manifest number: 15CD
Signing time: Sat 28 Jun 2025 22:01:19 +0000
Manifest this update: Sat 28 Jun 2025 22:01:19 +0000
Manifest next update: Sun 29 Jun 2025 22:01:19 +0000
Files and hashes: 1: gphbKzpx6tWGj_zsNbx2el-xjBw.roa (hash: EGV6JtWjWAcUe3P+wNKh2PddbSFnyVdKJ948XnlhOEI=)
2: ndKmZul4TmrLysbdAHv2TdPx3YI.roa (hash: MA6ve6ns46O8nAHaLW/ESCUujJDx6mhMBRqi1sXugZw=)
3: vIo7xH0TyD99HPcqE34AZvg9Bgg.crl (hash: xv+W1SrWuUWII0IEWNIcCha3vF9Oo/JV2Yd8Krx1yns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/vIo7xH0TyD99HPcqE34AZvg9Bgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/vIo7xH0TyD99HPcqE34AZvg9Bgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vIo7xH0TyD99HPcqE34AZvg9Bgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:2b:b8:97:dc:f8:6a:d6:a6:7e:00:71:af:2c:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc8a3bc47d13c83f7d1cf72a137e0066f83d0608
Validity
Not Before: Jun 28 22:01:19 2025 GMT
Not After : Jun 29 22:01:19 2025 GMT
Subject: CN=13de1d2dbd6550a445186f25c4f8da3c44e1ead8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:18:bd:61:b0:cc:2e:f4:97:05:2f:ee:0b:7c:
34:53:46:3a:39:30:f5:b6:a6:05:ff:69:42:9a:f5:
8a:c0:2a:50:6e:cd:cc:28:ee:66:e9:5b:7a:f1:fe:
a5:9c:ca:b6:cd:3a:18:c2:99:99:c3:1f:fb:9f:d1:
05:af:44:36:ee:05:af:33:fc:4e:31:d4:31:a5:26:
ba:37:28:ea:db:21:c7:3e:f2:9a:b8:11:6c:1e:71:
99:34:60:a4:3e:eb:d5:b5:8c:9b:0d:29:61:24:c3:
00:65:98:f9:b5:f3:72:f5:59:83:56:fe:33:2a:1f:
a0:df:ae:72:9a:1c:5a:4a:1a:01:17:39:c4:2e:4e:
de:d1:f1:d4:71:d1:ce:33:49:7b:d6:8f:2a:17:22:
2a:79:e4:3d:3b:ef:b9:8e:4d:54:15:cd:bf:fc:3e:
98:65:02:d5:44:d0:0c:46:b5:c6:f0:37:38:89:52:
d6:d9:a0:ed:ca:82:42:50:f8:fc:11:0d:39:bf:de:
a7:10:85:6f:ec:ec:f3:ff:de:99:49:03:7a:07:8c:
6e:e5:69:db:2c:b0:b4:1a:b2:42:b1:07:69:94:fc:
b0:8e:0e:77:62:8e:ec:49:b8:4a:9f:18:8d:8e:02:
61:56:f0:22:6e:e2:fa:cd:22:2c:31:82:10:76:b8:
7a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:DE:1D:2D:BD:65:50:A4:45:18:6F:25:C4:F8:DA:3C:44:E1:EA:D8
X509v3 Authority Key Identifier:
keyid:BC:8A:3B:C4:7D:13:C8:3F:7D:1C:F7:2A:13:7E:00:66:F8:3D:06:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIo7xH0TyD99HPcqE34AZvg9Bgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/vIo7xH0TyD99HPcqE34AZvg9Bgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/vIo7xH0TyD99HPcqE34AZvg9Bgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:62:20:78:85:18:71:ab:a0:ce:02:83:cf:89:62:3b:56:c1:
44:2d:39:c3:b7:19:71:2e:f0:9a:48:ae:02:8f:98:59:7b:42:
e9:82:af:1e:2c:d2:52:56:f4:ae:ba:5a:c0:15:d4:7f:82:14:
2c:58:15:a2:cd:b8:b2:af:21:1b:04:a7:42:53:74:13:4f:e2:
6b:55:af:7f:4d:51:27:5a:29:57:72:90:9f:04:04:50:ec:c4:
d1:5e:13:14:7d:3e:47:f0:a7:a0:69:b2:07:c9:34:18:44:ee:
f1:d5:e0:c0:d0:1f:b4:6e:b8:b2:61:ac:a3:45:43:d8:3e:14:
89:d7:33:82:23:a5:34:eb:7d:83:45:02:05:21:52:ad:cc:14:
94:89:83:7f:4a:18:b2:1c:28:85:3e:13:36:64:dc:22:59:16:
a5:16:68:f2:8c:b1:33:4f:8c:61:75:82:18:ef:7d:8f:20:cd:
ec:7e:59:a7:1c:c6:76:48:45:58:1e:af:7d:e6:88:ef:04:37:
2f:d5:1e:67:a0:55:8f:1d:ba:5c:bc:91:a8:da:cc:49:13:9c:
5b:6b:55:68:b9:ac:ec:58:55:fc:0d:75:aa:dd:88:98:85:6b:
01:f6:96:a6:20:c1:d5:fb:5c:e8:05:7b:af:9f:95:1c:2d:40:
4b:5b:80:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:00:48 2025 by rpki-client