Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/9d698d-d277-497f-833d-a2127c2aa1b3/1/vstVJuhB53DLVWTzBMxmluqx5Ls.mft
File: vstVJuhB53DLVWTzBMxmluqx5Ls.mft (raw, json)
Hash identifier: 5WAO+8z8Ld+lSoY7kKV1sVo2LQH5WATdkldpDY7Bq/k=
Subject key identifier: 74:E2:6B:2C:41:FB:6D:4D:3C:E3:33:E5:65:CB:D1:A9:D7:97:4E:0B
Authority key identifier: BE:CB:55:26:E8:41:E7:70:CB:55:64:F3:04:CC:66:96:EA:B1:E4:BB
Certificate issuer: /CN=becb5526e841e770cb5564f304cc6696eab1e4bb
Certificate serial: 0197C349CAC3936A01F5DEAB87E3FB63E9F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vstVJuhB53DLVWTzBMxmluqx5Ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/9d698d-d277-497f-833d-a2127c2aa1b3/1/vstVJuhB53DLVWTzBMxmluqx5Ls.mft
Manifest number: 04F7
Signing time: Tue 01 Jul 2025 00:01:22 +0000
Manifest this update: Tue 01 Jul 2025 00:01:22 +0000
Manifest next update: Wed 02 Jul 2025 00:01:22 +0000
Files and hashes: 1: HD7ZQ20BrfhIQig7jEtYMWBXqig.roa (hash: 0U8nx89LMB5Sbx+cfc6esGNSApn9xmAb50VsRUl9HHk=)
2: vstVJuhB53DLVWTzBMxmluqx5Ls.crl (hash: krbhnjeJelXMEeHZEnK6J5RviPZSfh1vGmioJcTszJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/9d698d-d277-497f-833d-a2127c2aa1b3/1/vstVJuhB53DLVWTzBMxmluqx5Ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/9d698d-d277-497f-833d-a2127c2aa1b3/1/vstVJuhB53DLVWTzBMxmluqx5Ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/vstVJuhB53DLVWTzBMxmluqx5Ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c3:49:ca:c3:93:6a:01:f5:de:ab:87:e3:fb:63:e9:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=becb5526e841e770cb5564f304cc6696eab1e4bb
Validity
Not Before: Jul 1 00:01:22 2025 GMT
Not After : Jul 2 00:01:22 2025 GMT
Subject: CN=74e26b2c41fb6d4d3ce333e565cbd1a9d7974e0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0e:84:b5:c0:52:87:02:07:ce:8a:be:5d:fa:
06:de:4f:06:1e:2f:44:3d:08:70:ae:71:7f:0b:c1:
90:5a:71:da:de:cf:f4:01:07:f5:57:11:8b:6a:0d:
77:88:b7:71:a4:b1:9f:3c:10:f1:3b:c9:53:15:b0:
f3:21:62:6f:49:da:66:7e:9b:f9:c1:ae:b7:0f:81:
47:ea:3d:d7:00:f2:2f:9f:8b:e1:cb:54:d9:4a:61:
ee:9f:ff:8d:dc:7c:b4:6e:62:1e:e0:c0:c7:05:fa:
7f:7f:08:e3:a3:22:cb:c9:49:8a:fd:a0:52:74:31:
2f:a9:73:21:4e:bc:23:36:a6:8d:93:4f:e8:27:32:
18:35:6e:0f:fe:c7:41:11:9f:f8:44:68:4f:ea:20:
dc:4c:52:48:d3:37:85:d3:3a:c4:93:b4:ca:96:d6:
97:8e:3d:e9:e2:71:38:d6:4e:8b:4e:12:49:69:a3:
e7:b7:75:80:dc:74:e5:db:fa:ab:a0:43:14:13:f9:
3c:9b:48:f6:d7:81:d2:73:65:8b:7b:50:fd:04:4a:
78:c2:a5:f7:ef:2b:22:a5:08:57:d3:d5:77:39:8a:
d1:bd:15:72:ed:94:fb:c0:75:82:a4:a5:64:b7:6f:
aa:7e:77:37:a7:31:b6:4d:07:45:0a:80:5c:83:86:
51:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E2:6B:2C:41:FB:6D:4D:3C:E3:33:E5:65:CB:D1:A9:D7:97:4E:0B
X509v3 Authority Key Identifier:
keyid:BE:CB:55:26:E8:41:E7:70:CB:55:64:F3:04:CC:66:96:EA:B1:E4:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vstVJuhB53DLVWTzBMxmluqx5Ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/9d698d-d277-497f-833d-a2127c2aa1b3/1/vstVJuhB53DLVWTzBMxmluqx5Ls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/9d698d-d277-497f-833d-a2127c2aa1b3/1/vstVJuhB53DLVWTzBMxmluqx5Ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:4a:eb:18:91:c5:31:15:76:52:d0:55:1c:16:6d:26:64:ad:
e6:b8:05:3d:af:67:17:19:4a:13:97:67:24:d3:62:64:4f:ce:
d5:d9:71:5c:cd:40:77:08:45:b8:63:4d:5a:51:03:a6:11:fc:
29:41:4c:50:66:c7:09:57:1e:dc:da:c2:76:d7:34:f0:d1:3a:
69:b4:43:cd:09:9a:8a:d7:12:da:a0:53:29:58:01:df:8e:01:
3d:fe:57:a8:59:cf:04:e5:b0:38:42:ab:3c:70:ff:a2:61:5f:
d7:2c:32:27:31:a2:ce:08:13:b0:e9:14:59:36:44:c5:ea:c4:
1e:0e:d0:6b:d8:9d:a8:d0:92:b7:4c:6f:db:37:74:6e:7c:69:
05:1f:85:0e:34:94:c1:dd:64:68:f4:00:56:4c:d7:96:8d:1b:
57:02:5c:08:39:04:e0:62:47:0b:1f:05:cf:c9:48:ed:4d:9e:
31:65:de:e2:97:a1:ff:4f:29:1f:1c:43:71:db:7b:a2:69:9e:
09:6e:cf:eb:6f:e3:fe:f6:e0:ac:33:11:8b:93:e1:b8:d6:cc:
59:d2:7b:a8:0d:cc:a8:41:f8:90:57:58:6c:c9:56:d2:29:8c:
4f:a3:f4:5b:91:ab:86:d7:cc:d6:78:4b:c4:68:69:f9:6c:da:
4a:86:90:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 07:38:03 2025 by rpki-client