Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/49bfec-757f-4319-b45d-9b5d63b5cbf5/1/VQlsYRU9KrVQd_GjDCRZhgAbodk.mft
File: VQlsYRU9KrVQd_GjDCRZhgAbodk.mft (raw, json)
Hash identifier: Ppff523vKJ/EC0dnpHXPMOT9HVR5AcB5AFqnbnkMoss=
Subject key identifier: EF:C2:6F:6D:CF:75:07:CC:72:01:7A:B3:00:F1:FC:56:BE:9B:BA:46
Authority key identifier: 55:09:6C:61:15:3D:2A:B5:50:77:F1:A3:0C:24:59:86:00:1B:A1:D9
Certificate issuer: /CN=55096c61153d2ab55077f1a30c245986001ba1d9
Certificate serial: 0197B5C5297979876F92818B420FD1A4AD17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQlsYRU9KrVQd_GjDCRZhgAbodk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/49bfec-757f-4319-b45d-9b5d63b5cbf5/1/VQlsYRU9KrVQd_GjDCRZhgAbodk.mft
Manifest number: 150D
Signing time: Sat 28 Jun 2025 09:01:26 +0000
Manifest this update: Sat 28 Jun 2025 09:01:26 +0000
Manifest next update: Sun 29 Jun 2025 09:01:26 +0000
Files and hashes: 1: 2UJUcXgEXfunFA21jmeL2YNS9MM.roa (hash: 6FVHb9+rMImArAonsBYihu+wIYZJbNNs1MntdRcJc2I=)
2: VQlsYRU9KrVQd_GjDCRZhgAbodk.crl (hash: 5CDn1o5n+tZCN08Wefr3UsjMl8i8zff0+Ma9hhD4Gf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/49bfec-757f-4319-b45d-9b5d63b5cbf5/1/VQlsYRU9KrVQd_GjDCRZhgAbodk.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/49bfec-757f-4319-b45d-9b5d63b5cbf5/1/VQlsYRU9KrVQd_GjDCRZhgAbodk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VQlsYRU9KrVQd_GjDCRZhgAbodk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c5:29:79:79:87:6f:92:81:8b:42:0f:d1:a4:ad:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55096c61153d2ab55077f1a30c245986001ba1d9
Validity
Not Before: Jun 28 09:01:26 2025 GMT
Not After : Jun 29 09:01:26 2025 GMT
Subject: CN=efc26f6dcf7507cc72017ab300f1fc56be9bba46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:84:29:c5:ec:78:e4:f9:75:f6:4d:da:0d:6a:
33:cb:eb:85:eb:f3:4d:af:bf:f8:91:4a:c7:71:da:
52:5c:72:1f:86:4b:a3:66:7a:f1:98:ba:f8:08:0b:
88:66:89:b2:b6:b7:a1:37:46:0f:8b:13:fe:7c:0c:
48:21:4a:13:28:12:10:ec:4a:a2:52:79:dc:d4:d1:
54:7c:e4:fe:7c:a8:d6:ee:38:2a:d5:9e:46:87:fd:
e4:a1:ae:2a:eb:d0:4a:d7:59:63:52:e5:b6:b8:0d:
c1:14:76:c3:9c:6c:69:30:69:2b:26:f1:75:94:d0:
c1:68:d4:6e:7a:ef:35:1e:e0:60:65:e5:3c:7b:71:
d9:19:ed:68:3f:bb:ef:67:24:d9:49:cd:40:5e:8d:
9e:04:5d:79:ba:26:4b:b1:87:0f:ab:36:fe:52:81:
6b:08:ea:95:53:92:f1:9f:44:a5:c6:b4:f0:d5:af:
1a:b3:5a:5b:54:58:ce:6a:85:7c:27:f7:89:48:c9:
ba:3d:c3:2f:c1:f8:81:91:93:76:7b:8f:e0:c7:5b:
db:42:43:5d:8a:f7:b1:45:15:60:e1:21:53:0a:07:
d9:6c:8c:3e:c8:aa:b8:e9:35:4c:52:18:19:8c:c2:
43:cd:1d:66:ae:22:f2:81:a9:0a:0c:0c:73:5c:2d:
cb:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:C2:6F:6D:CF:75:07:CC:72:01:7A:B3:00:F1:FC:56:BE:9B:BA:46
X509v3 Authority Key Identifier:
keyid:55:09:6C:61:15:3D:2A:B5:50:77:F1:A3:0C:24:59:86:00:1B:A1:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQlsYRU9KrVQd_GjDCRZhgAbodk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/49bfec-757f-4319-b45d-9b5d63b5cbf5/1/VQlsYRU9KrVQd_GjDCRZhgAbodk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/49bfec-757f-4319-b45d-9b5d63b5cbf5/1/VQlsYRU9KrVQd_GjDCRZhgAbodk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:44:79:56:4b:1e:3e:45:25:a5:0e:8b:07:f8:1c:e1:ed:e2:
d4:31:ac:e0:99:d5:53:64:34:14:4c:08:8c:1a:59:c8:d7:1a:
e4:67:f9:27:99:99:dd:80:d5:20:3a:e3:27:de:cd:c8:3c:fb:
b4:48:0a:f4:c3:db:6f:c9:ea:fb:f5:eb:da:d1:e0:9e:6f:25:
d0:b2:15:4c:f6:ef:cc:81:aa:0b:41:e2:aa:1a:94:3d:9c:23:
5a:72:b4:63:eb:18:7b:9a:cb:ca:30:ef:50:44:f6:5e:d3:5c:
f8:30:6b:a9:15:2a:a1:dc:ba:e0:b4:ab:6e:44:94:6a:78:18:
59:c9:08:3e:31:80:f9:39:73:90:78:cd:51:7d:08:5f:26:14:
4c:22:3f:2d:ab:ca:26:c2:81:60:dd:a6:31:4f:90:4d:4a:49:
c7:d2:f0:85:be:15:3e:18:04:32:08:2f:d7:31:5a:a5:c9:b6:
8e:93:f5:63:ae:c9:6c:32:21:2e:f0:6e:2e:ac:d4:14:b4:a1:
3a:d9:62:29:0a:7b:02:e8:0b:d9:f1:fb:8d:68:38:77:b6:31:
67:00:39:f4:a5:7f:56:fe:e9:10:28:6e:79:03:32:e9:06:89:
c2:d6:41:77:da:7e:d3:7d:b1:19:34:a8:ee:95:24:8b:b9:25:
d7:48:e3:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:46:09 2025 by rpki-client