Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.mft
File: VKwN3sMOJORX4W5lB9IZcoMQiT0.mft (raw, json)
Hash identifier: TC85R25zU6yy7vLJz1ijWVdrd1Rq9KRWDoAEG40BNdo=
Subject key identifier: 59:40:76:D2:F3:6D:86:C6:20:BB:B8:90:D8:EF:E7:F9:CA:29:25:40
Authority key identifier: 54:AC:0D:DE:C3:0E:24:E4:57:E1:6E:65:07:D2:19:72:83:10:89:3D
Certificate issuer: /CN=54ac0ddec30e24e457e16e6507d219728310893d
Certificate serial: 0197B6A225E8BBB208DBBB21150B77720ACA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKwN3sMOJORX4W5lB9IZcoMQiT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.mft
Manifest number: 011D
Signing time: Sat 28 Jun 2025 13:02:49 +0000
Manifest this update: Sat 28 Jun 2025 13:02:49 +0000
Manifest next update: Sun 29 Jun 2025 13:02:49 +0000
Files and hashes: 1: 3gl-l3qU8MpI3MVFIGvCINJyADE.roa (hash: utYF7PoXBqNr3o1w6VDP9HkMKeBzXvpa+DHx3iRNsmk=)
2: VKwN3sMOJORX4W5lB9IZcoMQiT0.crl (hash: /QaaGN3f/6DZpb7h0dQxB6TdcjMRCWJDQzd39LFm5Go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKwN3sMOJORX4W5lB9IZcoMQiT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:25:e8:bb:b2:08:db:bb:21:15:0b:77:72:0a:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54ac0ddec30e24e457e16e6507d219728310893d
Validity
Not Before: Jun 28 13:02:49 2025 GMT
Not After : Jun 29 13:02:49 2025 GMT
Subject: CN=594076d2f36d86c620bbb890d8efe7f9ca292540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b3:bc:36:ab:1a:f9:59:a6:e0:62:ea:09:ae:
2a:32:1c:c2:bb:46:ba:07:15:6f:2f:c1:82:d9:47:
72:df:52:18:b5:d3:1f:b5:10:63:f2:e5:97:9a:75:
55:cb:68:8d:1d:f5:e1:73:90:76:d3:45:d1:cf:b5:
4f:a2:bd:db:96:41:a2:c9:ba:ea:96:2c:8a:b2:85:
c1:1b:67:3a:6e:7d:4a:36:ed:c3:e8:48:24:52:54:
0f:a0:2c:d8:24:65:c8:dc:dd:33:61:03:a7:85:ca:
46:e3:42:be:3e:49:bb:30:f1:74:a6:17:68:de:ac:
35:a5:35:f2:fa:da:59:31:ea:73:10:0a:db:72:51:
8b:48:e1:67:d4:e6:e2:7e:fa:c5:90:6a:13:8d:46:
04:89:03:05:1a:d1:ae:84:ea:18:61:63:cf:18:9f:
ab:21:db:90:22:89:cb:81:93:3b:cb:d9:c2:73:24:
89:5d:d4:44:64:d9:23:7b:cf:c2:89:d2:5d:b6:16:
22:b3:66:2f:12:a2:3d:19:d3:82:da:3c:42:0a:3f:
d3:7e:f7:34:79:5f:38:c1:6c:72:e4:03:2f:0f:08:
c4:d2:87:0d:80:f1:03:1b:72:4f:4c:f5:93:a9:53:
8b:29:bb:fb:e9:e1:dc:ca:ba:c1:7b:6f:04:91:87:
d8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:40:76:D2:F3:6D:86:C6:20:BB:B8:90:D8:EF:E7:F9:CA:29:25:40
X509v3 Authority Key Identifier:
keyid:54:AC:0D:DE:C3:0E:24:E4:57:E1:6E:65:07:D2:19:72:83:10:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKwN3sMOJORX4W5lB9IZcoMQiT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:1f:a0:2d:45:d1:65:6c:c0:51:ff:df:a2:b6:fc:42:af:65:
bf:e0:ed:60:3e:bd:12:e6:04:aa:28:5a:37:5f:cb:59:8b:14:
5f:74:4c:17:23:70:2d:ab:a3:8d:9b:d5:04:50:29:d4:cc:ed:
ab:63:c3:a3:0a:88:b0:7e:67:6d:c3:35:a1:3a:da:09:fa:08:
30:4a:0a:0e:c0:98:2b:ee:44:30:6d:cb:41:68:6b:2d:d6:39:
a1:5d:ec:48:db:18:c7:53:a4:99:82:5c:d9:88:37:fc:4e:7a:
a6:1b:cb:f1:85:84:66:9d:03:23:62:9f:60:ed:e3:07:2b:27:
93:46:23:b1:de:71:48:e8:60:f7:24:4d:f9:ac:c2:ac:9b:3b:
d0:a6:cb:fa:0c:03:49:35:74:b7:a8:14:2a:33:30:15:31:d1:
bd:3c:26:b2:90:89:e4:28:73:f3:4a:df:a7:5a:84:51:b8:74:
2b:be:5f:63:b9:29:05:ab:40:6b:6d:56:79:8f:30:c3:66:70:
af:24:9f:3d:68:f7:ec:3f:41:f1:56:0c:76:80:0c:f2:dd:a1:
77:d7:f3:14:cf:1f:7f:6e:c6:74:28:17:eb:43:34:16:b1:c9:
d8:12:13:10:4a:b6:f0:a6:29:49:00:e9:6d:17:b1:9b:41:a4:
80:4b:3a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:52:21 2025 by rpki-client