Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
File: VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft (raw, json)
Hash identifier: GAtmDDhB5NLd9FYXB2zTX0H4uErIHWOjY1n1J+rCOBc=
Subject key identifier: 84:1F:0B:9C:32:D2:20:8B:80:00:70:A3:B1:04:9F:25:99:C8:86:F2
Authority key identifier: 56:40:13:E3:46:4C:16:CD:85:89:B0:52:02:FB:0F:0C:59:10:DC:A3
Certificate issuer: /CN=564013e3464c16cd8589b05202fb0f0c5910dca3
Certificate serial: 0197B6D754A4AA88D5FE122695B2FD07AD6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
Manifest number: 1211
Signing time: Sat 28 Jun 2025 14:00:54 +0000
Manifest this update: Sat 28 Jun 2025 14:00:54 +0000
Manifest next update: Sun 29 Jun 2025 14:00:54 +0000
Files and hashes: 1: A4Hv6ilbj-Hq-sEQxHCFjnJGPcg.roa (hash: vN/GanH0kropaMl+FMWa5RxvA+BoMIEwdjLhlP/xzOQ=)
2: VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl (hash: fa7r9fO+c7S5JpcstPtGTSjEkh7c93rwoQu5IXLfziU=)
3: WgPDUokIULDOoR23_fynyfvKx_M.roa (hash: NwpkKrEJI8Ok8ZmB6AQ+ABltD2vjaUnrA6fGbqaFIS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:54:a4:aa:88:d5:fe:12:26:95:b2:fd:07:ad:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=564013e3464c16cd8589b05202fb0f0c5910dca3
Validity
Not Before: Jun 28 14:00:54 2025 GMT
Not After : Jun 29 14:00:54 2025 GMT
Subject: CN=841f0b9c32d2208b800070a3b1049f2599c886f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:40:e3:fb:d4:ac:29:46:22:b6:75:ef:b9:20:
10:5c:11:dd:20:13:fc:f8:c6:ef:96:d6:bf:ab:55:
76:1c:bd:8e:7d:93:85:6e:c3:eb:6a:ab:11:1f:13:
00:2a:95:49:da:2f:d9:bd:f8:e8:50:df:1e:57:43:
49:4f:2d:83:33:0f:63:11:d8:28:a6:57:97:f8:25:
e1:e9:f5:f7:e7:17:cb:4e:2a:50:b2:68:7b:c4:b7:
d2:68:1a:08:ae:e2:57:15:c2:e1:dc:0a:a3:33:24:
2e:f8:87:87:1e:95:83:2c:cd:19:c0:ee:b2:34:23:
a8:c3:7c:7a:34:bd:d9:05:fc:08:46:3d:63:b8:32:
53:da:2b:c8:79:2c:55:93:2f:0e:7d:35:73:e1:b0:
b6:55:b7:49:9a:11:55:f9:63:24:59:25:8c:e7:09:
84:b1:4f:2e:5f:b9:37:d5:a4:10:68:09:f0:7f:63:
04:05:9a:94:77:de:f8:87:b7:b0:55:0b:1c:06:fb:
b9:b7:aa:17:0d:6b:01:98:7b:d1:45:7c:71:58:21:
d1:dd:31:09:12:09:e4:af:8d:52:1a:44:61:f7:39:
9d:cc:c2:65:46:a6:cf:c0:bd:cc:44:a4:66:0a:3e:
c1:a7:67:54:63:77:48:26:12:4a:84:0f:e5:ca:b7:
e6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:1F:0B:9C:32:D2:20:8B:80:00:70:A3:B1:04:9F:25:99:C8:86:F2
X509v3 Authority Key Identifier:
keyid:56:40:13:E3:46:4C:16:CD:85:89:B0:52:02:FB:0F:0C:59:10:DC:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:fd:47:c4:fa:9e:6c:22:58:80:20:81:8e:96:31:01:f3:96:
a1:f0:c8:c0:44:a6:50:1d:64:8b:0a:a2:3b:ab:b3:6c:64:7c:
4c:31:17:a4:a8:32:76:88:33:10:48:26:a2:cf:ff:d8:bd:f8:
63:77:e6:56:8a:d0:78:a4:f0:32:ac:1f:c9:d4:67:57:39:ff:
c0:99:d4:ff:76:6c:1d:b2:d7:70:2d:d0:7b:ff:f8:2b:e5:dd:
3a:8f:48:e7:8e:3a:64:4f:ac:d0:10:da:44:cc:f4:3e:d2:96:
25:b1:37:90:6b:2d:df:06:30:15:61:3b:9c:b4:2a:46:38:36:
fa:e9:6c:5c:07:da:d0:cb:cc:74:af:76:92:6c:54:bd:2f:0b:
9e:ec:da:c9:c2:8e:2a:17:31:12:24:ee:83:a2:61:70:55:ef:
aa:78:a9:c4:09:82:d9:bf:f0:e9:45:b5:23:00:d8:fb:d7:13:
a7:b9:29:e6:af:36:ea:08:27:3b:33:20:e8:44:21:d6:74:30:
0b:31:b9:e4:3b:62:3e:16:38:cc:29:d2:72:c7:75:bd:90:1c:
67:a2:85:07:f6:79:b3:48:17:ca:d7:01:12:f2:a8:58:0f:b5:
98:11:c0:46:f9:d5:8d:23:c2:53:33:34:34:e6:98:2e:d9:37:
77:e9:5d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:03:49 2025 by rpki-client