Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
File: vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft (raw, json)
Hash identifier: EuGwDG8y8dYxpUDov5p8DqThtoXDyiYJ5FlGJpjrwbg=
Subject key identifier: FA:39:50:70:2B:06:C9:88:71:72:1B:40:AB:0F:56:9E:58:64:33:67
Authority key identifier: BC:44:3F:7A:AE:47:E0:AB:38:BC:F8:D5:36:CC:A6:03:50:D1:72:70
Certificate issuer: /CN=bc443f7aae47e0ab38bcf8d536cca60350d17270
Certificate serial: 0197B8C58D400AAC4F9DE78C8E5F24DE7F2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
Manifest number: 09C1
Signing time: Sat 28 Jun 2025 23:00:43 +0000
Manifest this update: Sat 28 Jun 2025 23:00:43 +0000
Manifest next update: Sun 29 Jun 2025 23:00:43 +0000
Files and hashes: 1: 4zZX5zJWUsfZ5zmG6bPbMr0lvbs.roa (hash: Qk/9tkVuHYR7bI8BB1K5v6WoVgCSt0kT7wqGusdLxvQ=)
2: Cd4rO-Hjh_1s-LE7zVhil5Tbff8.roa (hash: 1HerR65Yb0tTxX+akt3GL/BhgF51Uoa+ZBuv4yRBK4o=)
3: vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl (hash: YCG6TxjgBIPclxq0W6UJDSFAyADIzqjy5eU6hiajEJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c5:8d:40:0a:ac:4f:9d:e7:8c:8e:5f:24:de:7f:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc443f7aae47e0ab38bcf8d536cca60350d17270
Validity
Not Before: Jun 28 23:00:43 2025 GMT
Not After : Jun 29 23:00:43 2025 GMT
Subject: CN=fa3950702b06c98871721b40ab0f569e58643367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:27:90:74:81:39:b8:b8:06:19:4f:9e:8d:8f:
27:77:b3:fb:3c:d0:6e:44:f6:d6:f8:3a:6c:5e:a1:
1e:07:58:06:6f:ae:7f:71:36:02:f1:40:f4:4c:b5:
6a:38:43:ff:ed:21:5a:ad:6a:e5:7f:18:c5:02:5a:
01:cc:91:73:fc:31:14:7f:4e:f5:76:b9:6f:1a:c7:
a1:6b:32:7c:92:31:93:da:47:d0:66:10:8f:ca:9f:
8a:39:73:df:e2:2a:f4:9b:37:2b:18:ce:b1:18:f3:
c6:98:10:5b:08:64:42:d6:0d:52:ff:59:f8:6e:75:
f4:89:96:26:74:37:68:e9:4a:68:dd:da:db:c2:c1:
17:33:87:69:5b:35:e4:b2:6f:fa:a7:5b:f2:24:b9:
81:f7:59:48:d5:08:10:15:e4:f6:1e:df:5d:5e:b0:
26:e8:39:df:1c:30:01:fc:dd:a2:39:f2:e7:c5:7a:
c4:5e:e6:af:ae:9f:b6:43:41:59:ad:7d:b7:c1:7a:
b5:b8:cd:6b:32:e5:82:94:ed:ac:c2:0e:8e:1d:c5:
0d:1d:0a:86:50:f0:c8:87:04:13:0d:6a:cd:0b:1e:
ad:04:1b:e1:08:be:c0:11:a7:b4:d7:62:e0:d7:98:
bb:89:ee:f5:ac:64:85:f8:7d:7b:49:6c:a1:00:86:
c8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:39:50:70:2B:06:C9:88:71:72:1B:40:AB:0F:56:9E:58:64:33:67
X509v3 Authority Key Identifier:
keyid:BC:44:3F:7A:AE:47:E0:AB:38:BC:F8:D5:36:CC:A6:03:50:D1:72:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:0d:59:ad:fe:a3:ca:a1:3e:1e:58:a2:d5:fd:b6:9e:72:e7:
28:1e:1a:3d:a4:d5:f9:e9:df:8b:b8:7f:50:b0:bd:76:3d:3b:
08:4b:6f:d6:06:a5:2f:d4:34:c9:e4:f3:46:61:ab:52:e9:75:
4f:48:3e:98:32:3b:d1:dc:63:ed:6a:3d:86:a3:17:89:4c:bb:
8e:a4:41:80:38:ba:07:91:d4:55:44:d9:71:20:05:97:92:40:
60:0d:0b:9e:55:11:2c:ed:ff:de:91:b4:11:4a:2e:b7:f6:f7:
1b:e3:14:48:c1:e3:8b:73:4d:29:dc:96:11:6b:88:9d:5e:1a:
ad:dd:0f:03:70:3e:6f:bb:fa:45:6d:fc:e2:12:6b:93:4c:fa:
06:5e:d2:6e:04:9b:6a:01:c1:c0:73:ea:d3:4c:f7:15:e9:df:
56:ae:90:75:62:5e:7b:99:c2:37:81:18:33:15:a1:78:83:c4:
04:9b:b6:7f:f2:b9:85:8c:2c:ad:83:bb:0e:eb:3f:82:c4:ac:
27:40:c1:79:95:61:25:09:6a:88:47:80:af:7d:f8:37:91:e0:
a5:a4:65:11:85:43:e0:fb:84:0b:50:20:91:8b:88:71:58:42:
25:a4:86:bf:50:e1:f0:00:d2:11:03:fb:d9:05:b1:21:10:4b:
a8:51:bd:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:08:37 2025 by rpki-client