Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.mft
File: vu8TjGK4F0xqgIMG7aV-koBd6YU.mft (raw, json)
Hash identifier: +TxN4hlU7SafDkkrKUtB5VM/tV04yt7E9n6A22pcQyc=
Subject key identifier: 79:96:CD:1C:33:EA:1D:B0:19:9F:9D:3B:0B:E2:B0:13:10:23:B2:65
Authority key identifier: BE:EF:13:8C:62:B8:17:4C:6A:80:83:06:ED:A5:7E:92:80:5D:E9:85
Certificate issuer: /CN=beef138c62b8174c6a808306eda57e92805de985
Certificate serial: 0197CACC5AD9700E48F24E48521D35CE05ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vu8TjGK4F0xqgIMG7aV-koBd6YU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.mft
Manifest number: 01DA
Signing time: Wed 02 Jul 2025 11:01:19 +0000
Manifest this update: Wed 02 Jul 2025 11:01:19 +0000
Manifest next update: Thu 03 Jul 2025 11:01:19 +0000
Files and hashes: 1: l_d8GmTWs7fC-DqkKIN-YYLDZHQ.roa (hash: bn8+7DUFYeBX/KvUpOKKsXGjyr0Z1jGCfiXQ85NTHVY=)
2: vu8TjGK4F0xqgIMG7aV-koBd6YU.crl (hash: aAdAuMGAqZPAjfd9frehKbq5ZBGEpjqDNtX/qUDVvAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vu8TjGK4F0xqgIMG7aV-koBd6YU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:cc:5a:d9:70:0e:48:f2:4e:48:52:1d:35:ce:05:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beef138c62b8174c6a808306eda57e92805de985
Validity
Not Before: Jul 2 11:01:19 2025 GMT
Not After : Jul 3 11:01:19 2025 GMT
Subject: CN=7996cd1c33ea1db0199f9d3b0be2b0131023b265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:95:04:1c:48:c7:12:27:57:e4:88:84:dd:5d:
7a:59:48:dc:c1:d9:da:60:21:f8:a0:5b:f3:dd:d7:
22:b0:df:46:97:f0:62:27:49:f5:f0:ea:b1:22:66:
e8:d9:08:61:be:b2:e7:b1:55:ad:ff:30:8b:ad:29:
9f:53:7d:88:ea:5b:6c:3d:ce:d8:02:43:18:09:63:
4f:1c:09:b8:14:3c:00:ad:68:48:0a:f5:48:c7:27:
3c:d6:fa:be:b2:60:22:f0:7d:04:91:35:ca:a0:24:
f9:4d:dc:a7:c3:b0:b2:8c:a4:cd:66:90:34:07:62:
0d:6d:db:bf:7f:b8:d6:3a:d0:97:77:39:87:53:70:
86:d1:25:1c:a0:77:e4:67:4b:78:10:6c:58:2d:9b:
35:32:a4:f2:58:c1:1d:d5:cf:4b:18:01:b3:cd:b2:
f7:02:2d:d1:94:87:36:4f:df:c7:b0:41:73:b4:21:
56:5d:26:bd:c2:92:54:ac:c7:49:ce:ea:55:4e:1a:
33:5c:12:a1:f9:0f:ea:23:ee:d3:3c:1a:48:a5:0a:
4b:88:c2:c4:31:c9:94:5d:bb:71:96:62:f0:53:5f:
08:3b:69:68:de:ff:5e:dd:21:4f:9f:d0:70:ee:29:
2d:b6:f5:a7:72:bd:73:0b:2b:62:c5:cc:26:87:23:
81:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:96:CD:1C:33:EA:1D:B0:19:9F:9D:3B:0B:E2:B0:13:10:23:B2:65
X509v3 Authority Key Identifier:
keyid:BE:EF:13:8C:62:B8:17:4C:6A:80:83:06:ED:A5:7E:92:80:5D:E9:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vu8TjGK4F0xqgIMG7aV-koBd6YU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:eb:13:c4:84:ed:7f:64:bc:ca:62:91:6f:14:c5:13:f9:3e:
40:d4:cd:fa:7d:79:23:49:27:b2:93:4e:b1:02:b7:41:de:c3:
20:20:55:50:79:22:57:34:e9:60:1c:1f:3c:e3:fb:cd:5c:6b:
af:fc:1f:18:cb:a9:a6:5f:0c:e3:3c:be:2a:01:4a:34:42:84:
32:f8:95:b7:fe:ac:33:04:36:f3:bb:ef:ea:10:07:d4:61:ad:
6f:27:cd:86:30:a5:d0:cd:de:83:6f:70:0c:84:96:c8:47:00:
6b:99:ca:a2:b3:2f:73:0d:24:16:b0:9e:2f:c4:70:94:ca:7b:
00:b1:48:10:59:79:91:d4:62:a5:fd:91:d9:2a:91:5a:35:9e:
94:04:22:e7:8d:9a:45:2b:e9:fe:3d:56:ee:34:fb:67:b1:94:
e8:99:b4:c9:25:4f:4a:fa:bf:88:5f:9a:55:ce:41:1f:9d:21:
95:4d:bd:ed:95:fa:b4:8a:6d:61:e9:fe:c8:0b:51:38:98:fd:
65:66:3d:95:97:b9:f5:11:ec:f1:e1:e8:cf:e5:28:1e:34:a0:
d2:85:96:b7:62:65:d4:54:d9:4b:6c:16:4c:dd:14:88:68:27:
ed:a0:f7:75:a9:43:0f:df:1d:43:9b:0b:ad:df:a2:02:b2:88:
b5:b4:5e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 13:07:43 2025 by rpki-client