Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.mft
File: VqSYe_jGtM3WV7vC0KXhPptibLk.mft (raw, json)
Hash identifier: rK691KPcKSHtoFWAWAcjLuyWQ+RyZFFLEMiW8oflB9w=
Subject key identifier: D8:23:CF:D0:F1:69:00:C4:FB:11:D4:DA:39:3C:C8:61:48:8B:11:0E
Authority key identifier: 56:A4:98:7B:F8:C6:B4:CD:D6:57:BB:C2:D0:A5:E1:3E:9B:62:6C:B9
Certificate issuer: /CN=56a4987bf8c6b4cdd657bbc2d0a5e13e9b626cb9
Certificate serial: 0197BB21CC7636208EFBF4917D7165C3D65E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VqSYe_jGtM3WV7vC0KXhPptibLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.mft
Manifest number: 12CB
Signing time: Sun 29 Jun 2025 10:00:43 +0000
Manifest this update: Sun 29 Jun 2025 10:00:43 +0000
Manifest next update: Mon 30 Jun 2025 10:00:43 +0000
Files and hashes: 1: VqSYe_jGtM3WV7vC0KXhPptibLk.crl (hash: CD741pBYm4kqFf6uYjInH43glij2hYb10Xt9hBsIp54=)
2: jgA5-5m0UyuVWgnFyZNbLCOK9IQ.roa (hash: t5mhCTyUTy/bCRhrh8vt6CByWx1LXqZrxP4nWUFmAaA=)
3: nE_QwfUitMo59_GeTHUAGFmWaiU.roa (hash: t2Bgep4Co0ormJSkeJVCqufRE/GNmyY6yFg8KbHeDM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VqSYe_jGtM3WV7vC0KXhPptibLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:21:cc:76:36:20:8e:fb:f4:91:7d:71:65:c3:d6:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56a4987bf8c6b4cdd657bbc2d0a5e13e9b626cb9
Validity
Not Before: Jun 29 10:00:43 2025 GMT
Not After : Jun 30 10:00:43 2025 GMT
Subject: CN=d823cfd0f16900c4fb11d4da393cc861488b110e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2c:42:67:35:03:ac:10:30:8b:62:95:12:f3:
80:cf:03:e0:5b:51:2b:cf:20:c4:4e:5c:28:7e:07:
7e:1a:f9:50:ee:ce:e5:05:1f:e0:cf:a1:6c:27:e0:
b9:1f:d3:c5:f4:10:ed:fb:82:52:48:35:07:e0:a2:
5e:d3:f5:13:16:17:b5:03:f2:99:9e:f7:a1:a3:38:
ca:9e:61:10:fb:6a:a4:d4:0e:ef:1c:8d:f1:81:2a:
77:b8:ce:00:30:79:4c:38:46:cb:4c:32:ed:6f:cd:
58:61:7b:55:f8:36:23:3d:8c:6d:fb:98:f0:5e:d3:
11:b5:61:ed:b0:43:9a:8d:38:6d:8f:09:87:9e:b7:
97:d0:cf:44:f8:b1:7c:20:37:8a:fd:8f:84:c5:96:
59:33:be:0e:ab:21:14:7f:d1:cf:a7:cc:ad:8a:94:
02:e0:d3:ab:da:90:6c:62:d8:69:43:4f:b3:e3:46:
34:95:6e:dd:27:64:20:dd:24:a3:03:1c:2b:ec:fc:
ec:e5:b6:c4:4f:b0:b6:f8:71:82:73:21:3b:6d:e1:
94:09:19:1c:b2:67:57:56:77:24:9c:08:6a:17:65:
35:45:b4:da:3c:1a:f2:40:b1:cc:f4:d6:1f:a2:26:
6b:df:c2:47:32:4f:91:ff:a6:2e:d9:7b:fe:f8:3b:
ab:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:23:CF:D0:F1:69:00:C4:FB:11:D4:DA:39:3C:C8:61:48:8B:11:0E
X509v3 Authority Key Identifier:
keyid:56:A4:98:7B:F8:C6:B4:CD:D6:57:BB:C2:D0:A5:E1:3E:9B:62:6C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VqSYe_jGtM3WV7vC0KXhPptibLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:54:f8:91:31:8d:4b:95:44:02:9b:2f:c1:33:64:a8:3f:1e:
95:d0:80:2e:0c:56:d0:9b:17:a4:d5:0b:23:42:59:d0:2f:6c:
d1:1f:26:76:10:dd:9c:5a:52:78:e7:e9:73:97:89:b5:bc:67:
a4:6c:40:2c:04:d9:6d:ca:20:bd:94:93:da:0e:8d:f2:6a:3b:
83:61:2a:42:31:4b:96:0e:69:ea:64:21:64:97:57:73:a1:48:
23:f3:5d:2a:67:9b:47:9b:a7:8e:a8:d5:73:8d:ab:fc:44:e6:
75:e8:29:69:cf:d1:fd:49:00:d6:4b:56:4f:e0:c2:f0:d4:b2:
0d:51:34:a1:6b:36:c8:55:ca:6c:ff:cd:c6:80:0a:17:60:f4:
9e:88:36:b0:db:37:4e:d4:1a:2e:f6:07:1b:5b:f1:6d:ff:1f:
d8:0d:50:a1:09:9c:57:57:60:77:82:39:5d:9e:77:a0:a7:df:
69:14:12:e0:de:db:4e:50:77:2c:be:f5:d5:61:25:35:94:c8:
44:e2:26:02:5a:40:9e:65:a2:18:14:41:1c:8a:f9:91:19:88:
1c:b2:88:cb:ea:cf:76:8d:b9:3b:76:9b:32:6a:34:96:4f:9d:
d7:b8:6e:ec:95:02:df:3a:8a:0f:97:07:48:5e:76:b3:6b:b6:
2f:8a:bb:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:36:54 2025 by rpki-client