Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.mft
File: VLSHMeKfJ9aHV21oY629oIBwm_4.mft (raw, json)
Hash identifier: TU9EX9J16BxHCV+LI/Cmh/INkltKIxMaO/4t/OdICZ4=
Subject key identifier: B0:16:71:A2:F3:9E:41:15:E4:E5:6B:01:D3:09:3E:AD:67:55:A4:8A
Authority key identifier: 54:B4:87:31:E2:9F:27:D6:87:57:6D:68:63:AD:BD:A0:80:70:9B:FE
Certificate issuer: /CN=54b48731e29f27d687576d6863adbda080709bfe
Certificate serial: 0197B7EADF2AAF62ABE8C487A69E07E68DB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.mft
Manifest number: 0A34
Signing time: Sat 28 Jun 2025 19:01:52 +0000
Manifest this update: Sat 28 Jun 2025 19:01:52 +0000
Manifest next update: Sun 29 Jun 2025 19:01:52 +0000
Files and hashes: 1: 09p6kbowRqEqmGsIE-X77ssBdvE.roa (hash: aNbCunzaHj8fcPNQtO0tqEMAuZSFNh6caJLvvgjcZUM=)
2: BP3U6kFnmdq-Ooz7okVHVreJwX4.roa (hash: 8ZRH6f2/mVLLc0PYuU8YNWUcegB85lCqTXWXtLUxfLM=)
3: VLSHMeKfJ9aHV21oY629oIBwm_4.crl (hash: fyEmncOt3XibtqyXUJUPIbsqD6OE1OA6NNFQhKzrQGw=)
4: pH__rL1RVjxMSUxHKGG7zRUGK1o.roa (hash: jLPbh/4LV4yxXAw9vyooJrfcnHymRshQqR67+HD469o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:df:2a:af:62:ab:e8:c4:87:a6:9e:07:e6:8d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54b48731e29f27d687576d6863adbda080709bfe
Validity
Not Before: Jun 28 19:01:52 2025 GMT
Not After : Jun 29 19:01:52 2025 GMT
Subject: CN=b01671a2f39e4115e4e56b01d3093ead6755a48a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:dc:fd:3f:aa:5e:ac:d2:44:be:9a:f2:25:dd:
45:79:65:b5:f9:42:a5:50:ae:cb:0b:37:0b:a8:6f:
0a:a0:3a:0b:e8:1a:83:fa:3a:af:7f:dd:2e:4b:c2:
08:3b:84:d2:6e:01:4e:ef:a3:1b:3b:a6:5f:7d:2a:
1d:eb:5f:c1:1c:3e:47:3f:99:cf:90:74:e5:f6:15:
09:d9:fc:f1:fe:39:f7:3e:ba:2e:ad:4a:82:60:78:
22:7c:0e:7b:60:51:a5:79:a3:3c:5f:23:3b:96:f7:
0c:13:c5:6e:23:b1:01:9e:1a:9a:64:ba:81:f4:f7:
64:22:ca:ca:07:46:e6:3d:d8:db:ff:d3:36:f0:1a:
25:76:e5:60:4c:11:4a:66:b3:52:16:e3:00:da:2d:
ee:c3:c4:02:ca:8e:4b:37:72:8e:51:32:80:59:d5:
c0:65:9d:b9:c6:9d:41:3e:ff:ef:d1:6f:4a:37:32:
1a:1b:98:27:6c:7c:c6:6c:39:93:70:e6:f7:44:2a:
85:12:38:5e:b5:15:8b:a5:fa:4c:37:e4:de:9d:11:
70:ef:01:10:8e:1b:a9:7a:3f:d0:fa:1a:77:03:f2:
fb:e0:f9:05:06:8d:40:1c:40:b1:bb:19:21:d7:20:
0f:99:27:d9:51:a1:48:e4:71:e6:b8:ef:42:9f:d6:
ac:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:16:71:A2:F3:9E:41:15:E4:E5:6B:01:D3:09:3E:AD:67:55:A4:8A
X509v3 Authority Key Identifier:
keyid:54:B4:87:31:E2:9F:27:D6:87:57:6D:68:63:AD:BD:A0:80:70:9B:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:ff:0e:01:4f:98:eb:41:dc:9d:93:e7:60:fb:f5:99:3e:1d:
68:d1:1f:b2:74:16:18:20:68:65:5e:3a:c3:2d:57:8e:27:4d:
0f:84:4c:e3:aa:a3:95:f7:8e:d9:57:09:8a:bb:07:49:a4:5e:
6d:5c:45:b6:1f:36:b4:55:91:fa:8d:cb:bb:41:da:89:c4:2b:
64:ee:3a:d2:b0:e1:7b:f7:87:d7:6a:84:f5:f1:04:8c:5c:8b:
30:72:67:17:af:ef:bf:75:8c:72:2d:e9:bd:93:79:4a:2c:d6:
9a:52:f8:9f:54:71:3e:d2:79:4d:54:9f:3a:c3:c0:e3:76:8d:
41:1c:66:9f:95:6f:7d:9e:02:a3:bf:db:38:67:34:c8:4c:9d:
85:60:e9:41:1d:56:31:bd:b3:53:e0:75:cd:8b:7b:80:1e:3e:
21:98:45:87:4a:4c:36:b5:2b:5f:64:1f:14:b2:24:4f:fe:56:
58:2f:56:29:38:62:9c:66:e0:2b:71:ae:14:cc:cd:5c:fc:6b:
81:26:5a:5f:48:ba:ca:ab:15:58:ba:0d:a7:19:7a:bf:df:8a:
0d:b3:68:c2:c9:02:32:4f:fa:39:64:53:6f:bc:58:9c:81:4c:
78:82:21:19:d7:cb:4c:13:6b:51:19:39:79:ae:32:6c:45:c0:
21:ad:bb:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:20:08 2025 by rpki-client