Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.mft
File: vrfYT-FaMkPBAANHsJkLpGuzrkI.mft (raw, json)
Hash identifier: ex9kKxL3DFd3Zj4fvJyA9yYN/NYFNDk02CKPeiEeZLU=
Subject key identifier: FB:BB:2A:1E:73:DF:F0:4C:76:5B:D4:AE:EB:BE:05:38:74:27:9E:14
Authority key identifier: BE:B7:D8:4F:E1:5A:32:43:C1:00:03:47:B0:99:0B:A4:6B:B3:AE:42
Certificate issuer: /CN=beb7d84fe15a3243c1000347b0990ba46bb3ae42
Certificate serial: 0197B88F03C99211B8EE7517BDC0D11EA6FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrfYT-FaMkPBAANHsJkLpGuzrkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.mft
Manifest number: 05E7
Signing time: Sat 28 Jun 2025 22:01:09 +0000
Manifest this update: Sat 28 Jun 2025 22:01:09 +0000
Manifest next update: Sun 29 Jun 2025 22:01:09 +0000
Files and hashes: 1: 4JbsqghTrIDqYvxRn3KkEBvNEXw.roa (hash: tPrE7VB6YTkQk/rEZVSQYz48H4Rfa9ADrk+TF9kaYiY=)
2: vrfYT-FaMkPBAANHsJkLpGuzrkI.crl (hash: Do6RfkvuSlL0xZTv+YebZfIMi0FXn3W6F7zv39/zSI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/vrfYT-FaMkPBAANHsJkLpGuzrkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:03:c9:92:11:b8:ee:75:17:bd:c0:d1:1e:a6:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beb7d84fe15a3243c1000347b0990ba46bb3ae42
Validity
Not Before: Jun 28 22:01:09 2025 GMT
Not After : Jun 29 22:01:09 2025 GMT
Subject: CN=fbbb2a1e73dff04c765bd4aeebbe053874279e14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:21:f5:78:bf:31:ff:bf:35:94:a5:4c:29:42:
cb:57:ee:7d:cc:91:f9:c3:f8:47:32:64:1d:06:a7:
55:c9:2c:8c:36:c2:7e:c1:18:3f:69:50:8d:f0:5f:
e3:1a:f8:64:07:89:f8:fd:1f:23:b9:70:9b:16:ba:
3d:de:5a:95:18:84:fe:d1:e5:7f:70:c6:d3:fd:bd:
7e:d9:6c:79:42:27:9e:70:f6:f9:5c:74:56:04:76:
ac:18:a7:5c:c6:3d:80:42:c6:3e:46:fb:12:5c:36:
e9:3d:e3:d6:aa:f9:a0:40:65:96:2e:b2:1b:ff:1d:
ae:4f:26:fc:fc:71:76:cf:d2:b6:99:f3:16:e4:b7:
55:8a:d1:c7:24:31:96:cb:6e:03:4f:d4:0b:84:12:
c5:7f:45:e8:37:6b:4b:39:e9:54:01:73:e2:78:92:
42:59:6d:d6:5d:5c:88:4c:df:66:3d:e2:31:d7:2d:
2d:3a:40:c6:7c:36:c6:67:f8:70:28:76:88:5a:8e:
a3:99:dc:42:d8:e5:11:fb:46:d8:c5:0b:09:9c:a0:
08:3f:f7:ad:4f:c3:3e:73:5d:e1:ca:7e:a6:d2:7a:
eb:ee:a1:51:4d:34:20:54:23:fb:bb:82:44:c9:f0:
85:4d:75:48:51:64:0a:d2:36:d5:15:55:53:3e:05:
39:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:BB:2A:1E:73:DF:F0:4C:76:5B:D4:AE:EB:BE:05:38:74:27:9E:14
X509v3 Authority Key Identifier:
keyid:BE:B7:D8:4F:E1:5A:32:43:C1:00:03:47:B0:99:0B:A4:6B:B3:AE:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrfYT-FaMkPBAANHsJkLpGuzrkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:2e:2f:64:26:17:72:ad:28:a0:09:66:90:26:e4:44:9f:06:
d4:fa:a6:5e:94:1a:19:f3:c9:8f:6b:a6:9c:c4:ad:8a:e8:e3:
42:5c:53:ec:c7:f5:85:b7:6e:14:8a:75:51:68:94:2b:fe:24:
dd:8f:7d:93:d0:17:4d:f6:8d:e7:f8:7c:6d:6a:38:d3:7a:a5:
e6:ea:c6:8d:a5:19:ad:9d:81:47:3e:b6:78:1f:5f:64:5c:2b:
81:b9:ab:bc:ed:80:1a:1b:0f:c7:ed:27:bf:a9:bd:cf:f6:d4:
ce:ac:8b:8b:06:6e:60:0c:17:07:f6:c7:4e:47:1c:b4:3c:3e:
43:76:e5:f8:8d:c3:4c:41:a8:4c:cf:0c:83:04:27:d7:90:d5:
d4:2a:43:5d:97:a6:f1:47:ba:0d:c9:53:2d:5f:76:bb:ce:7e:
9d:8f:c5:ed:7b:37:52:eb:d3:da:0c:eb:06:87:bf:f5:ca:1e:
80:97:b8:3c:32:3f:01:cb:ff:96:0b:19:6d:4e:f1:cc:c2:59:
18:0d:37:24:48:29:f1:6d:2f:97:73:65:4b:9e:45:b3:2e:9c:
fa:f8:b0:a5:58:78:bf:39:56:5c:3a:d6:9e:54:5f:f6:5e:a4:
a1:b4:54:f1:6b:a2:b1:ae:27:98:ed:e0:e6:ae:33:6c:cf:79:
84:06:8c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:36:25 2025 by rpki-client