Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft
File: vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft (raw, json)
Hash identifier: 4r+x2x73c8efbaKRGgxSZo73hDB4fa5moNDvhjcogUs=
Subject key identifier: 09:18:52:B8:FB:A7:19:7A:30:69:08:BD:DB:5A:CF:94:3D:0B:E7:3B
Authority key identifier: BC:20:D4:1A:D3:57:0E:D8:88:C3:B9:A3:95:84:3D:28:C4:BD:E7:0E
Certificate issuer: /CN=bc20d41ad3570ed888c3b9a395843d28c4bde70e
Certificate serial: 0197B70F243A21571D4A8BF959711C1BBE81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft
Manifest number: 15BA
Signing time: Sat 28 Jun 2025 15:01:52 +0000
Manifest this update: Sat 28 Jun 2025 15:01:52 +0000
Manifest next update: Sun 29 Jun 2025 15:01:52 +0000
Files and hashes: 1: 2_V6lJnSbHp-dXL7YMoo09f6snw.roa (hash: OhjwpaD5BnWeaMwPzsn2/JlXIUwI6tpxdz7vTY63lGM=)
2: vCDUGtNXDtiIw7mjlYQ9KMS95w4.crl (hash: ut6GL1gfibYEW9lNrLIP3MgQmVP7RcEuIpXaK/DFzB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:24:3a:21:57:1d:4a:8b:f9:59:71:1c:1b:be:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc20d41ad3570ed888c3b9a395843d28c4bde70e
Validity
Not Before: Jun 28 15:01:52 2025 GMT
Not After : Jun 29 15:01:52 2025 GMT
Subject: CN=091852b8fba7197a306908bddb5acf943d0be73b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c6:19:83:17:84:25:a0:ee:ba:44:ce:48:a2:
68:e2:56:78:b2:ef:8e:32:b0:2a:38:73:2b:9e:5c:
13:38:2c:ab:60:8b:f7:e1:a5:6b:d7:88:8a:b3:1c:
fe:43:70:d7:3f:1d:ae:40:df:ad:b9:7c:87:e6:fb:
5d:ed:0a:e0:5b:e8:19:0b:f1:e9:10:07:84:a7:91:
05:bf:44:bc:a6:79:4f:97:b5:74:0d:76:aa:95:84:
0b:6a:85:17:46:e4:68:ea:4b:a8:62:9d:d8:cd:33:
0c:bd:29:83:bc:d8:44:39:23:8d:42:e2:c3:11:90:
a0:00:04:b4:1b:0e:01:ae:32:f4:b3:4c:7d:cc:4e:
a6:6f:99:34:64:34:93:51:18:58:e4:e4:5f:48:ce:
f4:13:76:e2:73:7b:a6:b8:cf:ca:a7:95:a0:bb:78:
0e:f9:25:40:c0:fd:f7:1c:a3:b6:28:d5:42:2a:39:
a0:78:7c:18:43:4d:93:08:f4:29:09:1f:e9:f6:16:
21:4a:9d:20:7e:9e:98:83:e6:e1:0d:ad:71:e1:9b:
05:85:af:fc:04:91:e8:81:67:11:76:f0:fe:d5:15:
48:59:ea:66:a1:2c:ca:fb:b2:e8:a8:de:45:6c:7b:
f0:4d:63:8a:9e:7c:60:f6:bb:3a:bc:a0:26:97:fb:
ca:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:18:52:B8:FB:A7:19:7A:30:69:08:BD:DB:5A:CF:94:3D:0B:E7:3B
X509v3 Authority Key Identifier:
keyid:BC:20:D4:1A:D3:57:0E:D8:88:C3:B9:A3:95:84:3D:28:C4:BD:E7:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:32:7e:80:48:35:a1:01:a7:5c:88:7d:00:af:74:d3:d7:9b:
78:ac:c9:a3:cb:a7:c0:86:91:2f:e3:30:85:fc:7c:24:32:44:
52:9c:60:b0:ab:32:d6:70:04:bd:97:a6:11:c2:64:06:26:0b:
69:d7:c0:73:d9:94:c6:ae:da:28:5e:66:73:1c:17:34:12:17:
59:85:d9:ad:1e:cb:4d:4a:6b:7d:5e:b3:b9:da:48:d6:dd:aa:
50:93:97:2d:78:e2:b2:67:64:5d:2f:d7:cb:9e:bb:db:c1:62:
ab:c9:39:ed:2d:08:3f:50:1d:35:43:c5:78:10:dc:49:c8:e7:
2d:13:2b:d6:e2:72:11:62:1e:c2:05:8c:19:45:3a:23:ca:1d:
56:7f:d0:80:37:28:34:06:2a:38:4a:40:a2:ed:6d:02:7e:24:
83:ae:11:34:a0:54:95:ca:99:7d:54:7e:db:17:cd:10:01:b0:
47:01:cd:e1:5f:f3:29:34:88:55:a5:de:ef:e1:a3:d1:e8:a1:
9b:f6:7c:a3:bb:aa:a7:9e:8e:6d:67:c3:d5:ff:45:41:6d:0d:
00:5a:93:65:dc:03:54:33:67:31:a4:f8:1a:8e:10:55:23:7c:
e2:8b:f3:35:36:16:77:f1:c7:b5:ad:85:00:5e:21:f3:c3:27:
a8:0d:44:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:51:14 2025 by rpki-client