Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.mft
File: VrVQVQ1WQYCx333rW1jTprES5-M.mft (raw, json)
Hash identifier: DQOSxD6QUVKsnPmtS7LLBHixFI18sIT+N0aF1uuEGDo=
Subject key identifier: 35:18:A9:F3:CE:61:69:3C:9F:7E:4B:B9:B6:1A:63:BC:58:57:4E:33
Authority key identifier: 56:B5:50:55:0D:56:41:80:B1:DF:7D:EB:5B:58:D3:A6:B1:12:E7:E3
Certificate issuer: /CN=56b550550d564180b1df7deb5b58d3a6b112e7e3
Certificate serial: 0197B70F23139D82D501A2B39B0490A084A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrVQVQ1WQYCx333rW1jTprES5-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.mft
Manifest number: 0B4A
Signing time: Sat 28 Jun 2025 15:01:51 +0000
Manifest this update: Sat 28 Jun 2025 15:01:51 +0000
Manifest next update: Sun 29 Jun 2025 15:01:51 +0000
Files and hashes: 1: VrVQVQ1WQYCx333rW1jTprES5-M.crl (hash: P5Zdv9zAWQGVajgCgKI3TjSmjYZSTXekjC3ZPnp2/qw=)
2: zpnOf9kFG2Xz2U_yV2ggZbtDJtc.roa (hash: iw1XdbLWPraJP46xAmdMKYSNoE+Pua69gMhun7cgX1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrVQVQ1WQYCx333rW1jTprES5-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:23:13:9d:82:d5:01:a2:b3:9b:04:90:a0:84:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b550550d564180b1df7deb5b58d3a6b112e7e3
Validity
Not Before: Jun 28 15:01:51 2025 GMT
Not After : Jun 29 15:01:51 2025 GMT
Subject: CN=3518a9f3ce61693c9f7e4bb9b61a63bc58574e33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c3:f0:73:b1:42:e0:25:92:0d:74:fe:c1:3b:
62:fd:7f:ca:ff:80:e1:98:ff:6a:53:5c:19:cc:c6:
39:aa:01:47:ac:ba:20:65:2c:65:e7:ed:07:5f:cf:
c3:b2:5b:7a:ff:8e:aa:2b:2c:44:42:e0:7b:ea:2b:
66:17:06:bf:06:6c:8a:41:39:b4:3e:4a:18:67:7a:
c5:f3:d4:4f:fc:36:a1:f9:e3:4e:68:d8:4d:38:30:
e3:f4:31:59:ac:be:47:60:d2:50:1a:82:42:57:f5:
89:e5:81:68:7b:45:73:e3:91:d3:7a:4b:1f:73:10:
73:db:6d:3c:f8:73:c8:6e:0c:96:a2:08:69:32:61:
e7:95:57:ea:62:cc:c3:75:20:f4:2f:34:99:4f:c4:
41:88:91:2a:e9:65:aa:38:71:29:bf:c9:33:1b:ff:
74:2c:c1:6e:b5:27:91:df:5c:a4:9b:7c:59:14:48:
18:e7:1e:82:97:8d:e4:8a:67:1f:08:b7:a6:f8:01:
39:00:c4:26:c5:3b:b2:54:f5:4e:6c:db:e3:6f:10:
d9:a3:59:f7:79:f8:bc:7d:d3:bd:41:5e:3e:25:16:
50:76:2a:8b:2f:da:d6:38:a6:e5:71:dd:fb:2f:70:
f9:fb:3c:3b:72:9c:c4:08:b4:6e:d5:d0:29:57:38:
4b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:18:A9:F3:CE:61:69:3C:9F:7E:4B:B9:B6:1A:63:BC:58:57:4E:33
X509v3 Authority Key Identifier:
keyid:56:B5:50:55:0D:56:41:80:B1:DF:7D:EB:5B:58:D3:A6:B1:12:E7:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrVQVQ1WQYCx333rW1jTprES5-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:15:2f:af:fe:43:d9:a3:ea:a3:fe:25:5c:43:e1:73:10:46:
26:40:8c:66:4a:5c:cd:84:2c:ab:5f:4e:68:e9:2a:41:cb:0b:
24:50:cb:2a:f7:1f:68:5b:fb:b5:d5:f8:cd:12:9f:d3:8c:c6:
e8:18:0d:8f:36:8a:b4:66:3b:3d:97:35:e9:af:2e:c6:bf:92:
3d:cc:cf:d0:d1:ea:65:81:9f:63:53:60:3d:da:64:d1:c9:95:
26:e3:ba:ad:62:35:c9:3b:03:ef:8a:4a:38:72:cb:1b:87:87:
41:97:81:3b:e0:cb:aa:9b:9d:e0:1f:57:c6:b6:24:c0:d3:2f:
e7:67:2f:5c:4c:ad:92:16:00:cc:bc:43:0d:20:ae:a6:1d:fa:
48:ba:9d:6d:44:35:dc:e8:7f:b9:96:98:fb:ed:e8:a5:dc:96:
c7:6e:07:1e:57:24:1f:07:0c:b0:14:a0:61:44:f0:8c:cb:09:
87:bf:58:27:f5:af:2d:60:d6:fb:95:7e:89:e0:4c:9b:85:ee:
62:e8:f0:25:60:c4:29:04:48:d7:0b:5d:be:75:e3:cb:b0:50:
aa:e6:2c:02:6b:46:bd:78:f0:7b:07:8a:ed:83:e7:bd:16:2c:
cb:e9:65:86:ef:7f:8d:f1:5d:38:16:bf:0a:70:c1:3b:b9:5e:
ea:80:d7:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:02:53 2025 by rpki-client