Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.mft
File: VY3MXX5oh8lBrjsozjy_L7TyBgM.mft (raw, json)
Hash identifier: GfBsOwFnIgyo6Xj6UjriHXuqt2Rs9jPNsrq4KSc9ejU=
Subject key identifier: A8:0C:95:1D:9F:25:48:70:8E:69:A8:6A:9A:50:EC:C6:1F:58:2B:93
Authority key identifier: 55:8D:CC:5D:7E:68:87:C9:41:AE:3B:28:CE:3C:BF:2F:B4:F2:06:03
Certificate issuer: /CN=558dcc5d7e6887c941ae3b28ce3cbf2fb4f20603
Certificate serial: 0197B77C0281E0C55B93A9048F2A340EE4A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VY3MXX5oh8lBrjsozjy_L7TyBgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.mft
Manifest number: 1505
Signing time: Sat 28 Jun 2025 17:00:46 +0000
Manifest this update: Sat 28 Jun 2025 17:00:46 +0000
Manifest next update: Sun 29 Jun 2025 17:00:46 +0000
Files and hashes: 1: O6XxnBxdjAHrB6cqnybF-q5zhEI.roa (hash: I3o5BuOlE43DLGmjrJZTKVLwzcox6qkRQGzuUzhTBPQ=)
2: VY3MXX5oh8lBrjsozjy_L7TyBgM.crl (hash: tbTlORkzDhZ56GrGZuk5CQ30fCY7mg3cFCxSGDzzi9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VY3MXX5oh8lBrjsozjy_L7TyBgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:02:81:e0:c5:5b:93:a9:04:8f:2a:34:0e:e4:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=558dcc5d7e6887c941ae3b28ce3cbf2fb4f20603
Validity
Not Before: Jun 28 17:00:46 2025 GMT
Not After : Jun 29 17:00:46 2025 GMT
Subject: CN=a80c951d9f2548708e69a86a9a50ecc61f582b93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:83:86:09:0a:df:df:92:96:68:91:ba:5c:84:
60:1c:f9:3a:b1:b8:39:77:c8:68:c0:b0:da:77:cd:
e1:70:15:0d:18:fb:8a:6f:65:47:a9:58:08:f6:e3:
7c:78:3c:2b:42:09:d6:ca:fe:20:c8:0f:c6:2e:e8:
dd:6d:1c:ca:47:bb:cd:5f:94:51:5b:e0:da:fc:0c:
aa:22:8b:b3:69:f9:a0:66:ab:9d:a6:3e:5e:53:b0:
85:0c:12:7e:2f:e8:76:34:13:45:3e:23:b1:3c:ee:
d7:3a:4e:d8:f1:29:4e:70:a0:df:b0:7a:99:ba:46:
8f:e0:0c:10:6d:74:9d:85:80:33:23:1c:59:d5:c1:
11:19:d4:a4:0a:20:f7:4b:fc:d2:51:84:98:d3:4e:
d6:fb:12:d2:6a:4b:f4:28:17:10:67:72:66:99:26:
ff:25:56:5f:a8:3e:1c:b5:e8:ea:e2:a0:b2:f5:4b:
a8:bf:a5:b6:0d:4f:6c:dc:81:ed:36:67:56:7a:9d:
1d:2e:a9:e4:8f:6c:bb:97:6f:ad:f9:e8:fe:8b:17:
73:cc:e0:41:38:81:9c:88:23:50:2d:f9:2f:3d:c7:
3b:b3:5b:79:41:6a:3c:ac:fe:b9:2f:90:1c:b5:15:
34:0c:21:11:28:de:32:b8:9a:d0:4c:ab:9d:f6:5c:
3d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:0C:95:1D:9F:25:48:70:8E:69:A8:6A:9A:50:EC:C6:1F:58:2B:93
X509v3 Authority Key Identifier:
keyid:55:8D:CC:5D:7E:68:87:C9:41:AE:3B:28:CE:3C:BF:2F:B4:F2:06:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VY3MXX5oh8lBrjsozjy_L7TyBgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:ec:fa:7e:98:22:f7:59:70:7d:2a:67:17:36:03:15:94:5b:
37:ad:10:46:28:18:ab:78:56:e1:cd:35:e0:24:be:89:c4:3b:
91:14:12:9c:f4:2a:59:2e:1d:6a:44:a5:c9:9e:f3:1f:b8:15:
dd:aa:11:c6:49:29:57:24:6f:5f:20:a1:44:87:d2:64:2e:0b:
26:7a:d6:2b:8f:eb:f5:cf:a7:25:8f:55:f0:0a:78:ba:5e:1e:
a5:f7:1e:99:eb:a7:ba:f9:f8:39:99:21:f0:04:72:de:5d:3b:
8f:a3:55:34:72:92:27:ca:71:31:f7:80:92:ee:b9:73:ba:47:
64:ff:b5:41:7c:ac:a1:99:ad:e6:3c:98:6f:0e:b1:94:a0:dc:
94:3c:f6:bf:88:15:70:bd:03:cd:3f:17:3f:fd:c5:7e:4b:e5:
89:a2:d4:dc:cc:2a:be:b4:1c:88:d0:93:b7:da:6d:1b:80:80:
14:10:14:58:d7:de:b8:4a:96:d0:57:b8:98:ec:6c:79:b5:49:
1e:ea:68:ce:c1:24:b2:29:36:3b:4e:54:38:cd:10:ec:e6:17:
73:88:fe:42:af:63:4c:fa:53:bf:b9:9c:86:21:e5:de:d8:ea:
39:93:29:cc:80:27:74:6e:4e:e5:01:e3:7e:f4:2e:24:e5:8c:
3f:f2:21:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:54:32 2025 by rpki-client