Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
File: _vkYxakzDbvm7uF8uaHWL7yFW94.mft (raw, json)
Hash identifier: OcLRjzyfdBACGuHCyeKx1LS7zbYNTNlNzp81pZ9Ir24=
Subject key identifier: EC:C4:5D:F6:44:BE:D3:FE:7F:F2:EF:A2:E9:B6:15:25:7E:7C:3A:CB
Authority key identifier: FE:F9:18:C5:A9:33:0D:BB:E6:EE:E1:7C:B9:A1:D6:2F:BC:85:5B:DE
Certificate issuer: /CN=fef918c5a9330dbbe6eee17cb9a1d62fbc855bde
Certificate serial: 0197B6D785140F104E40F3605611E1A347E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
Manifest number: 08DA
Signing time: Sat 28 Jun 2025 14:01:07 +0000
Manifest this update: Sat 28 Jun 2025 14:01:07 +0000
Manifest next update: Sun 29 Jun 2025 14:01:07 +0000
Files and hashes: 1: SMgRC4CuBXV__0uh7hMZJPp526I.roa (hash: q90cjV8xUyFwL4y2m0KAQvnLqB0y5wCNss55Rkz0PM0=)
2: _vkYxakzDbvm7uF8uaHWL7yFW94.crl (hash: MjEUZ093UiJ7L+eDn2KuIFQMf86n1RyIG94LXkFbKaI=)
3: nhbcHBf3KyDRfxTTz6M2nv3FDrc.roa (hash: Zxdw2e4bDTlf7LQ65Hz/8o5/IiJ9rQjv2vVBLW/NpXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:85:14:0f:10:4e:40:f3:60:56:11:e1:a3:47:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fef918c5a9330dbbe6eee17cb9a1d62fbc855bde
Validity
Not Before: Jun 28 14:01:07 2025 GMT
Not After : Jun 29 14:01:07 2025 GMT
Subject: CN=ecc45df644bed3fe7ff2efa2e9b615257e7c3acb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:37:50:33:f6:5e:c2:ac:90:93:b1:a8:78:d7:
d8:66:83:c3:3d:4c:21:c5:29:dd:15:d2:b0:42:31:
1e:93:3d:ec:1f:d0:51:e2:cb:50:10:46:f8:ca:2c:
e3:d3:88:8c:02:dd:21:da:e8:66:d1:f4:65:07:2f:
bb:c2:3e:32:8f:c6:5d:c5:66:40:95:05:99:fd:20:
51:ba:d9:af:33:bf:3c:c5:71:20:2e:4c:38:37:7a:
65:67:71:a4:4c:01:f0:bd:eb:07:02:46:a4:44:dc:
67:73:49:10:26:24:99:97:89:74:81:fb:64:3e:eb:
06:be:f0:d0:2f:ac:ac:66:cc:fb:78:1a:b3:a4:3a:
73:de:2f:3a:00:d0:ff:d7:f1:64:a1:7b:67:a7:cb:
35:18:9e:3f:2e:08:d1:4c:e5:96:ba:82:19:81:38:
34:13:e2:00:a9:8d:0c:49:a2:0f:c2:7a:85:9f:b7:
89:50:75:6f:86:de:1b:51:a8:53:8c:3c:14:a1:e4:
5e:7e:79:4b:03:57:5a:4f:64:20:fa:52:b9:26:e9:
69:36:ba:05:d6:44:73:06:04:58:d1:d7:d4:d1:67:
73:f6:6c:63:45:eb:13:cf:8c:3c:ba:f0:64:d0:03:
38:58:d0:32:32:24:68:84:9b:25:4c:6a:89:be:d6:
de:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C4:5D:F6:44:BE:D3:FE:7F:F2:EF:A2:E9:B6:15:25:7E:7C:3A:CB
X509v3 Authority Key Identifier:
keyid:FE:F9:18:C5:A9:33:0D:BB:E6:EE:E1:7C:B9:A1:D6:2F:BC:85:5B:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:12:09:8a:1a:45:bc:f2:c0:7f:52:67:eb:e7:74:14:3b:31:
9d:0e:8e:8e:ce:f7:68:28:76:10:c1:7b:9e:89:f0:4c:c0:ac:
c4:2e:b1:07:7f:a7:f1:c6:56:71:c5:f5:22:58:39:65:7f:e5:
c2:78:4f:67:9f:d5:ce:c5:8e:b2:7d:49:4a:40:32:a3:1a:62:
95:c3:f1:37:c9:ee:95:5a:e4:41:73:54:76:68:ee:9f:f4:e1:
4f:27:80:c9:75:f9:a7:6d:01:71:b0:a0:db:81:ba:bf:84:a8:
55:25:fa:71:22:8b:d2:16:a4:98:4b:c2:63:38:29:13:68:b8:
a1:80:b4:ec:57:8a:d3:0b:75:7a:9c:40:b9:47:bb:f2:b8:ab:
0c:ab:a3:42:d1:91:15:c1:e4:bf:cc:93:d5:da:80:d1:2a:54:
c5:61:04:5a:c7:70:c0:31:a2:17:93:b3:32:2b:f9:32:16:02:
69:ee:48:ef:2a:48:91:77:8e:11:fa:b6:ec:4d:65:fc:c9:dc:
2f:7a:d7:7e:78:67:6d:4a:a5:ec:61:51:57:34:b2:78:6e:4f:
b5:37:bc:92:a1:8e:89:62:00:0c:84:78:e5:41:c4:e9:18:94:
e0:90:25:49:74:4a:c8:f8:64:c0:aa:5a:73:10:c3:28:85:02:
e1:dc:47:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:32:51 2025 by rpki-client