Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.mft
File: VnGQhUeGoWr6aw7HjfsGIKuqz-8.mft (raw, json)
Hash identifier: 1taZDPDKN7vzdZ+U86xRsRRgNy6+mUIh2kp1KVrpFRk=
Subject key identifier: 63:BC:BA:E8:4E:FF:9F:68:A9:EA:6A:9B:AF:00:D6:81:34:03:89:C4
Authority key identifier: 56:71:90:85:47:86:A1:6A:FA:6B:0E:C7:8D:FB:06:20:AB:AA:CF:EF
Certificate issuer: /CN=567190854786a16afa6b0ec78dfb0620abaacfef
Certificate serial: 0197C68203825E13782962848BC7A5CACB7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VnGQhUeGoWr6aw7HjfsGIKuqz-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.mft
Manifest number: 15C3
Signing time: Tue 01 Jul 2025 15:01:38 +0000
Manifest this update: Tue 01 Jul 2025 15:01:38 +0000
Manifest next update: Wed 02 Jul 2025 15:01:38 +0000
Files and hashes: 1: GQ1DSO1of_qyrqxkPQTC0ENKnfg.roa (hash: nTd0zjLE6XtOMPZyttCDWktzUnkCfLfuxFOPmZBOHEs=)
2: VnGQhUeGoWr6aw7HjfsGIKuqz-8.crl (hash: Y9B6SUPxwWpupG/M2zY2Gt6h2DwotH35bmxQYhjww0Q=)
3: qdba9XlB-cPjFIeLPK89fH4z7YE.roa (hash: 1JK31mC2SxxDKOuDPCP+7Ar2oTz/PPCsc7D4ztv27uI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VnGQhUeGoWr6aw7HjfsGIKuqz-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:82:03:82:5e:13:78:29:62:84:8b:c7:a5:ca:cb:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=567190854786a16afa6b0ec78dfb0620abaacfef
Validity
Not Before: Jul 1 15:01:38 2025 GMT
Not After : Jul 2 15:01:38 2025 GMT
Subject: CN=63bcbae84eff9f68a9ea6a9baf00d681340389c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:93:99:43:91:df:46:3b:e0:6e:c2:5d:88:ef:
64:6b:52:31:ce:ae:e2:69:e5:0b:0c:20:e8:be:60:
22:92:9c:1b:23:04:d4:da:06:1b:f5:16:56:8e:59:
97:b2:6a:59:ac:fa:fe:54:90:70:91:14:cb:87:2b:
5f:7f:5b:0d:03:f7:8a:09:a1:90:c6:90:c5:55:ec:
19:53:36:bf:37:7b:b8:fa:eb:7f:28:fc:53:95:f5:
11:1e:f0:ef:d0:54:d5:2e:70:70:60:90:84:a6:09:
50:ff:c2:c7:ae:62:f3:ee:18:e2:6d:ef:bb:9a:d8:
ee:42:3a:06:54:cc:85:b6:b5:50:db:97:f0:d6:81:
d8:ed:d6:33:d3:fc:e8:38:e2:69:27:2b:83:c4:a4:
5f:b4:9e:17:a6:95:d7:de:ba:20:95:cc:64:71:3d:
fd:e7:95:7e:31:95:39:21:a5:59:ae:ea:6c:b0:f9:
94:35:7a:5e:ed:bd:15:72:71:12:4e:25:bf:77:89:
3a:4b:bf:19:ae:54:45:72:b9:68:72:a6:f9:64:c2:
db:43:78:10:a5:f1:b7:0f:4e:d7:f0:42:f5:bf:bd:
a4:a1:31:aa:c4:c5:3a:3e:76:5f:67:4f:2f:ec:26:
c1:68:7e:36:76:5d:98:da:96:98:e9:93:25:9c:a4:
f2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:BC:BA:E8:4E:FF:9F:68:A9:EA:6A:9B:AF:00:D6:81:34:03:89:C4
X509v3 Authority Key Identifier:
keyid:56:71:90:85:47:86:A1:6A:FA:6B:0E:C7:8D:FB:06:20:AB:AA:CF:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VnGQhUeGoWr6aw7HjfsGIKuqz-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:28:bc:02:b3:fd:6e:e3:2a:87:81:1f:d0:cd:e8:58:64:d9:
d5:10:bd:01:87:bb:d3:96:6c:3a:85:eb:4d:2b:99:64:18:f1:
68:c8:c5:ab:51:d3:a2:0e:83:c2:7e:c6:16:6b:91:34:53:61:
48:59:b2:09:d7:dc:ff:f4:85:2a:76:6e:fb:c3:e2:a8:80:5b:
07:8b:43:2f:cf:3d:65:63:95:c1:db:8d:a4:c8:2f:28:4e:db:
ad:71:5b:93:d5:1e:e4:96:97:c5:0a:13:d0:fe:e4:2c:fa:d7:
dc:ce:4d:99:d9:3b:9e:0a:76:83:43:e1:11:c9:c8:2d:dc:29:
61:bd:64:af:b6:1d:4e:b8:40:ec:27:ec:da:3c:31:61:ea:97:
c3:b5:f3:fb:55:bd:fe:b3:c3:d9:70:ae:6d:7c:19:bf:d3:2a:
bb:b5:f3:14:08:c3:63:b3:ba:7b:2c:e8:df:4e:d3:df:df:d2:
43:2c:bb:3c:4a:1d:b5:a4:1d:15:3d:90:c7:af:2f:24:ce:3a:
09:f8:3f:c3:c4:03:fd:70:7d:22:a0:1f:56:c9:16:85:0a:b6:
41:a9:64:d4:9e:ad:1e:b6:db:29:51:55:79:a2:14:2f:e5:2e:
54:f0:ee:c9:bb:0c:25:da:3c:6e:94:75:88:5a:0a:90:a7:ed:
24:27:c8:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 17:23:06 2025 by rpki-client