Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/VbIFm3SNbd1cWgwdNel173uohEI.mft
File: VbIFm3SNbd1cWgwdNel173uohEI.mft (raw, json)
Hash identifier: dCAzPabLRvDD3p1c45Lkv4WRM/t9TlP2ihVzuRRUMgU=
Subject key identifier: B9:CD:93:EF:A9:A3:72:0A:DD:E8:64:1F:50:D2:2D:AF:D3:A0:E3:75
Authority key identifier: 55:B2:05:9B:74:8D:6D:DD:5C:5A:0C:1D:35:E9:75:EF:7B:A8:84:42
Certificate issuer: /CN=55b2059b748d6ddd5c5a0c1d35e975ef7ba88442
Certificate serial: 0197B77C9DFD51DD38A38EA1B2508BED37B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbIFm3SNbd1cWgwdNel173uohEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/VbIFm3SNbd1cWgwdNel173uohEI.mft
Manifest number: 0573
Signing time: Sat 28 Jun 2025 17:01:26 +0000
Manifest this update: Sat 28 Jun 2025 17:01:26 +0000
Manifest next update: Sun 29 Jun 2025 17:01:26 +0000
Files and hashes: 1: VbIFm3SNbd1cWgwdNel173uohEI.crl (hash: thPN+ZzSV7cM/MbhsaTx4iNXPPCrq+hBaj4bxfZ86j0=)
2: r2ver_B1QfAF2R2XPpvc11DJXmA.roa (hash: 6Y5LmQV5zXuhOo4pwCZR6jl/OtipaY9LyBdb5pEQmos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/VbIFm3SNbd1cWgwdNel173uohEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/VbIFm3SNbd1cWgwdNel173uohEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbIFm3SNbd1cWgwdNel173uohEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:9d:fd:51:dd:38:a3:8e:a1:b2:50:8b:ed:37:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55b2059b748d6ddd5c5a0c1d35e975ef7ba88442
Validity
Not Before: Jun 28 17:01:26 2025 GMT
Not After : Jun 29 17:01:26 2025 GMT
Subject: CN=b9cd93efa9a3720adde8641f50d22dafd3a0e375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a6:7c:98:85:cd:84:fb:dd:50:8c:55:da:d8:
36:2d:fb:68:86:f4:9f:a4:f3:3a:25:33:5c:a4:b0:
62:9d:7a:fe:2c:80:35:20:9d:c8:fb:b0:93:93:6e:
b4:32:81:2d:69:9f:b9:54:be:6a:2f:02:90:f2:54:
14:5c:82:95:3f:44:a7:05:39:4e:c3:de:51:c3:39:
f2:1e:6c:44:51:b7:aa:f1:8b:f0:13:60:90:54:9a:
45:5c:40:7b:53:f3:2e:05:93:32:fc:dd:e1:e4:06:
f5:ec:52:95:87:04:f5:7c:f0:b7:a4:13:48:f6:ff:
fa:c3:9a:c7:0d:36:89:0f:ec:90:65:73:06:19:58:
2c:53:36:45:75:52:e9:15:ed:44:a2:65:a2:82:23:
3c:d6:1d:74:af:2c:6e:8c:e2:7e:59:10:0a:30:84:
72:1c:4e:34:b9:e8:f9:f9:68:7c:aa:b0:af:b4:50:
72:4b:6c:57:9b:bc:0d:a7:7f:0b:3a:28:6c:38:6f:
31:37:b6:e9:16:28:e9:79:dd:14:5b:81:7f:a2:d7:
58:1f:eb:7e:cd:f1:47:bf:dc:69:f0:4f:4f:1d:e2:
da:11:94:3e:16:ee:66:a9:a8:6a:d8:f8:f6:ed:63:
97:3e:7b:4f:d6:f4:73:fd:cc:d6:3d:74:0d:b1:5b:
67:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:CD:93:EF:A9:A3:72:0A:DD:E8:64:1F:50:D2:2D:AF:D3:A0:E3:75
X509v3 Authority Key Identifier:
keyid:55:B2:05:9B:74:8D:6D:DD:5C:5A:0C:1D:35:E9:75:EF:7B:A8:84:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbIFm3SNbd1cWgwdNel173uohEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/VbIFm3SNbd1cWgwdNel173uohEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/VbIFm3SNbd1cWgwdNel173uohEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:5a:07:85:07:b1:d1:4f:a2:87:1e:6f:31:97:98:39:38:20:
db:10:9b:b7:fb:c4:a1:18:39:e1:ba:b9:12:8b:e4:41:09:4b:
4e:0a:81:d5:d0:22:cc:0c:2a:a1:55:de:c2:96:42:b0:2b:88:
96:de:24:f4:97:0c:9c:c6:46:b7:1f:d0:fb:5e:a9:60:b7:fb:
f9:ad:97:26:a5:94:76:73:68:61:91:28:62:8d:40:09:c1:b2:
85:d4:8f:90:db:e2:06:4e:80:ea:36:c2:1b:ee:82:a6:3c:2a:
f4:49:95:9a:ca:3c:66:5e:70:5b:13:ec:c5:05:d4:e4:ac:ac:
4b:13:80:3c:d0:69:30:b7:fc:47:00:d9:fb:43:b1:81:95:89:
2b:a4:46:a2:6b:8b:4a:b6:05:8c:27:db:26:df:18:e9:8e:88:
bc:0b:43:78:5e:e1:82:c9:2e:95:87:bc:b0:a4:6a:ba:21:b1:
33:3c:01:62:46:08:cb:bb:65:bb:d0:93:87:f6:34:42:79:70:
23:c4:d5:d7:4d:70:df:a5:b1:e4:0d:77:df:7f:96:a3:53:44:
65:d3:77:ac:e5:61:b1:fd:d0:c4:53:b3:3d:00:ed:fb:26:43:
5b:c2:95:92:8e:f4:e4:a0:af:7a:5f:9f:25:73:e6:33:ae:04:
88:c7:2d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:20:10 2025 by rpki-client