Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft
File: vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft (raw, json)
Hash identifier: zZOL19TvntdT7RD/dwh+qQlM6y9qvSjj4mKfX98IwgY=
Subject key identifier: 14:CF:F7:0A:07:B0:E4:47:FB:EB:46:1A:3D:65:60:FB:11:77:26:82
Authority key identifier: BE:CE:C5:31:E5:C3:77:56:B8:28:66:3F:9C:C2:0A:D6:21:77:13:AC
Certificate issuer: /CN=becec531e5c37756b828663f9cc20ad6217713ac
Certificate serial: 0197B7B3196E9BD313AD0C5992C6057C6239
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vs7FMeXDd1a4KGY_nMIK1iF3E6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft
Manifest number: 0EE4
Signing time: Sat 28 Jun 2025 18:00:57 +0000
Manifest this update: Sat 28 Jun 2025 18:00:57 +0000
Manifest next update: Sun 29 Jun 2025 18:00:57 +0000
Files and hashes: 1: _d2EFT-OpH3an9-ei2qvPBIPUiU.roa (hash: vjR4Zv9+5SsZfFKRbF6P42t9rz0q1nIneBSdni9L3pM=)
2: ciNzVE1_d0-QMInDSswN3EHLVNg.roa (hash: Wmjyk4Nl2dmeXznw2MTEjEcjFaiybhooG5LGrJ1VKM8=)
3: vs7FMeXDd1a4KGY_nMIK1iF3E6w.crl (hash: AMEYAt/vAJx5GIPJVD6wyMghpz1ZIrQQPqJMpIZIPkA=)
4: yAQLvR2REqCYEITifDYxhFTzX4k.roa (hash: uZgm/9JfNjYwGkoXS3hlL76KCjtvK/3swtvi79WEUbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/vs7FMeXDd1a4KGY_nMIK1iF3E6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:19:6e:9b:d3:13:ad:0c:59:92:c6:05:7c:62:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=becec531e5c37756b828663f9cc20ad6217713ac
Validity
Not Before: Jun 28 18:00:57 2025 GMT
Not After : Jun 29 18:00:57 2025 GMT
Subject: CN=14cff70a07b0e447fbeb461a3d6560fb11772682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:36:6e:81:0a:53:d6:a6:60:46:f4:57:07:01:
8e:8b:99:9c:9a:c5:c7:ac:2a:c1:b4:4f:d5:93:ab:
70:75:93:e8:a9:c5:61:2e:3e:76:5d:ea:65:c0:4c:
73:15:3a:f7:84:65:e4:19:cf:37:11:14:c1:a9:6f:
da:f1:00:75:bc:9e:6f:a5:4f:c6:2d:d1:dd:40:5b:
06:3c:ce:37:9e:d7:8d:b7:9f:b4:e5:39:3a:0e:f8:
bc:d5:36:a6:8d:d9:84:d0:31:f6:35:b2:b2:45:b8:
5b:8a:9a:f1:7d:18:e0:41:a8:c0:49:c3:f5:cb:6e:
d6:41:0b:f5:5f:07:f8:7a:cf:4d:59:63:d3:83:44:
cc:e3:54:ac:90:ed:f4:cb:a6:57:b7:ac:82:24:47:
34:96:4a:26:83:07:5b:04:91:d4:22:00:5d:78:34:
77:f4:ea:16:26:b2:01:f0:6c:16:cf:b6:43:20:4d:
96:58:4c:9f:9f:a6:df:19:c9:71:de:7a:25:ec:10:
4b:17:5d:3c:ed:bb:03:35:61:a7:4f:fe:30:8d:c4:
48:4e:c5:53:73:d6:3e:1a:b2:05:b8:a2:0f:c6:e0:
82:6c:50:41:9c:20:39:4b:8c:75:7e:35:eb:fa:f8:
e8:b4:05:32:2f:d5:ff:75:fb:7c:8a:ac:ac:c8:b3:
86:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:CF:F7:0A:07:B0:E4:47:FB:EB:46:1A:3D:65:60:FB:11:77:26:82
X509v3 Authority Key Identifier:
keyid:BE:CE:C5:31:E5:C3:77:56:B8:28:66:3F:9C:C2:0A:D6:21:77:13:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vs7FMeXDd1a4KGY_nMIK1iF3E6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:ee:a8:0b:8c:d6:4d:5d:a7:39:8a:90:a5:1c:31:65:fd:ba:
89:51:7c:36:76:db:21:b6:41:a7:65:32:a1:80:4e:bc:16:f3:
60:a9:2d:78:0a:65:16:ed:7b:b8:ad:96:0a:5a:cb:4b:e9:47:
2f:1c:fd:4b:76:79:c4:b2:a5:16:1f:13:2b:a3:20:96:e4:0b:
89:c2:d5:6f:fa:c2:63:7a:f5:9e:b5:fb:cd:33:19:ec:ec:65:
51:d3:e4:36:ab:a0:ae:d6:22:fa:7e:ce:58:ac:54:b1:1f:63:
55:e8:b6:32:54:1d:59:bd:f7:18:fe:b7:30:5b:43:9c:02:ef:
e8:f8:d4:52:55:3c:ed:b1:23:90:c2:9f:e0:81:4e:48:32:7d:
5e:c6:46:26:ce:e3:95:7d:de:91:e9:34:86:b9:9d:57:9e:04:
82:d7:ac:4f:60:ae:1a:31:a7:86:a1:bd:b2:d5:e5:11:ce:81:
99:e0:eb:6d:e3:15:6e:77:0c:51:7f:74:95:b5:20:6a:64:e2:
30:11:c3:6d:a1:a0:a2:2d:94:af:f5:1a:12:21:d2:58:e0:78:
0d:91:9f:17:91:82:48:e6:74:cb:0c:af:b6:2f:79:7f:02:20:
6b:7d:67:f4:d0:3f:ff:eb:56:48:f8:23:25:d2:b8:f6:24:c8:
be:a0:0c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:56:49 2025 by rpki-client