Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft
File: VChf_ulzEsUcOoBf-TQOvsM1JyA.mft (raw, json)
Hash identifier: k1DKS5rpB0HdfrhuafZDQ+P2/YEPWwSxA1M/2izeE0k=
Subject key identifier: 44:B6:88:73:6D:36:C9:81:4B:53:F4:1D:7C:A9:D1:44:3B:5E:DA:02
Authority key identifier: 54:28:5F:FE:E9:73:12:C5:1C:3A:80:5F:F9:34:0E:BE:C3:35:27:20
Certificate issuer: /CN=54285ffee97312c51c3a805ff9340ebec3352720
Certificate serial: 0197B632A73B58B75107CCA4AB3AEAFB8B8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VChf_ulzEsUcOoBf-TQOvsM1JyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 11:01:02 +0000
Manifest this update: Sat 28 Jun 2025 11:01:02 +0000
Manifest next update: Sun 29 Jun 2025 11:01:02 +0000
Files and hashes: 1: Ca-8iz_zQCrKysmx5A1KTglY5iE.roa (hash: QQcsgeeci4CpJE1THj53EE0/b4qFL4RDwyCbpu7M9gI=)
2: VChf_ulzEsUcOoBf-TQOvsM1JyA.crl (hash: gb//kbCfb7uJUUEn9ozk+8HUYQUen1Lf8RtPE+zIAWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VChf_ulzEsUcOoBf-TQOvsM1JyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:a7:3b:58:b7:51:07:cc:a4:ab:3a:ea:fb:8b:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54285ffee97312c51c3a805ff9340ebec3352720
Validity
Not Before: Jun 28 11:01:02 2025 GMT
Not After : Jun 29 11:01:02 2025 GMT
Subject: CN=44b688736d36c9814b53f41d7ca9d1443b5eda02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e3:38:2b:4f:5c:9f:22:c4:83:7d:8b:a5:97:
d5:61:a3:31:21:35:52:9b:e6:6c:45:19:f2:6a:0f:
ef:ad:87:55:25:3e:88:05:33:5d:db:7d:b7:44:da:
2e:98:e0:1d:d5:8f:d4:04:e1:32:1c:d3:5c:19:88:
8e:8e:ee:b7:64:fc:f2:62:e8:f5:8a:d9:0c:6e:7d:
16:35:0b:03:fb:9b:2f:95:f0:a6:49:32:d5:d2:0a:
c6:28:a9:45:d3:69:a4:0d:19:9e:42:04:c7:ea:0f:
00:f7:f6:66:76:5a:4f:4c:ee:a9:cc:ce:65:20:b8:
42:cc:a9:c4:f1:58:b8:8f:ba:d9:8d:5d:1f:36:77:
a5:b1:85:42:7b:bb:aa:9b:b5:33:ee:14:42:c9:23:
75:d5:cb:90:54:a2:74:1f:72:a4:33:b4:c7:30:33:
21:23:39:79:92:88:88:aa:9f:c4:8f:54:b9:d7:d1:
5a:5b:43:df:2f:e6:96:72:7b:47:c7:68:6b:bf:58:
04:26:84:f0:6b:2a:2e:a3:5b:af:cb:6e:c1:a2:b4:
0a:b4:c0:9b:e2:2e:8c:e3:60:cc:8f:5c:9b:ed:ae:
da:f6:7d:a7:ac:03:48:0a:53:db:5e:26:41:16:30:
5d:a5:6e:a4:67:26:44:e6:1f:69:9b:31:a0:0a:5d:
45:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:B6:88:73:6D:36:C9:81:4B:53:F4:1D:7C:A9:D1:44:3B:5E:DA:02
X509v3 Authority Key Identifier:
keyid:54:28:5F:FE:E9:73:12:C5:1C:3A:80:5F:F9:34:0E:BE:C3:35:27:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VChf_ulzEsUcOoBf-TQOvsM1JyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:39:4b:ef:76:d4:27:a1:c3:1b:02:de:8e:5f:b9:74:64:02:
f1:5d:e6:89:dd:05:c7:5a:e4:74:59:4d:7e:9e:28:be:77:96:
ab:cb:b2:09:f1:a9:55:c8:5c:a3:28:43:79:d7:9d:6f:7e:6a:
b9:99:af:b2:09:c8:b8:40:54:00:41:e8:e2:aa:cb:4b:44:e3:
8c:09:78:10:10:bd:e9:bf:d1:01:ad:d4:49:5a:9a:96:1b:c6:
f8:da:e6:43:48:a1:99:77:29:42:72:79:95:7a:34:85:34:cd:
fb:c9:4c:b4:de:cc:5c:e1:bc:a0:10:3e:fd:22:26:ff:24:4a:
8b:60:aa:33:f9:4d:59:cb:37:3c:24:ab:45:3c:b0:18:f4:18:
86:84:c9:52:84:f6:6f:50:88:62:9f:48:e4:44:64:a5:c1:69:
b3:55:29:f3:db:b5:cb:a5:6a:cd:6b:af:4d:48:c3:6d:f0:d4:
0e:b6:df:8f:1a:11:2a:d5:0d:c5:d4:c7:9f:91:03:ad:f1:27:
d8:d5:02:1c:4c:cf:13:a9:a2:9d:14:99:e6:78:ba:23:07:3e:
cb:ce:70:1d:e7:5e:80:c0:14:ba:c1:a5:b2:0d:bd:6a:78:1a:
35:db:72:34:e8:9a:ca:58:2d:0f:0b:ef:db:25:1a:2e:6a:92:
4f:d1:9a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:48:07 2025 by rpki-client