Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/VffKupvV-frB4BRadWfJtFmpXoY.mft
File: VffKupvV-frB4BRadWfJtFmpXoY.mft (raw, json)
Hash identifier: 2Dfh2/IPP+RVbBvbeix3wbGaAsZ2/fLU55SGnirXDO4=
Subject key identifier: AD:42:12:17:16:B7:53:5C:D8:E5:23:EF:BC:B7:05:C8:95:80:1F:AC
Authority key identifier: 55:F7:CA:BA:9B:D5:F9:FA:C1:E0:14:5A:75:67:C9:B4:59:A9:5E:86
Certificate issuer: /CN=55f7caba9bd5f9fac1e0145a7567c9b459a95e86
Certificate serial: 0197B70ED7B07183C384AA6DDC141F0B4F6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VffKupvV-frB4BRadWfJtFmpXoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/VffKupvV-frB4BRadWfJtFmpXoY.mft
Manifest number: 073C
Signing time: Sat 28 Jun 2025 15:01:32 +0000
Manifest this update: Sat 28 Jun 2025 15:01:32 +0000
Manifest next update: Sun 29 Jun 2025 15:01:32 +0000
Files and hashes: 1: VffKupvV-frB4BRadWfJtFmpXoY.crl (hash: toNvwr0+mmQffIJNfg5fWwQEtSMDqoglznjSueUM6ME=)
2: tzSxEqbN9RPe7WLi6GpaqxSubiw.roa (hash: NQOfRB00StYv2rpk5RfPASO+YDaJlcYUJaTmyGg5oDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/VffKupvV-frB4BRadWfJtFmpXoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/VffKupvV-frB4BRadWfJtFmpXoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VffKupvV-frB4BRadWfJtFmpXoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:d7:b0:71:83:c3:84:aa:6d:dc:14:1f:0b:4f:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55f7caba9bd5f9fac1e0145a7567c9b459a95e86
Validity
Not Before: Jun 28 15:01:32 2025 GMT
Not After : Jun 29 15:01:32 2025 GMT
Subject: CN=ad42121716b7535cd8e523efbcb705c895801fac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:50:3a:7a:7d:bb:dc:2d:8a:29:8c:1d:1e:18:
fc:b9:47:4d:9d:73:57:c8:38:f4:0b:d1:9c:ba:00:
ee:8b:f6:0b:56:8e:b2:99:4b:7e:b6:db:d0:9e:9f:
f1:6e:62:3b:61:4c:a6:e0:52:5a:b2:97:56:33:fd:
3e:b1:b8:3e:bf:83:ff:19:1c:d8:0a:a1:77:39:0b:
d4:26:6c:c2:87:9a:86:48:b1:97:83:b3:d9:8a:f9:
67:30:fc:72:d3:57:60:05:49:bc:fe:8e:a1:13:4e:
a1:9d:16:86:4f:91:7f:59:b1:ea:3e:13:7d:23:ab:
0f:e2:ce:87:0e:79:1d:c4:6f:70:b6:ef:2c:98:22:
4c:f1:5c:85:f1:81:db:2e:c2:62:c4:d6:3b:26:df:
6a:22:ed:ed:74:61:44:57:e8:de:65:60:9b:9f:7c:
89:1b:e4:2d:5d:db:fa:6c:86:cd:3e:34:f0:12:2f:
c6:40:66:29:c9:ef:d0:49:d0:fa:60:ab:23:ec:78:
aa:b9:4e:de:91:c2:2f:3e:70:03:c5:1d:66:78:9a:
e5:33:1e:82:57:63:91:59:95:a3:26:67:ca:db:da:
d8:4c:4b:e3:80:53:78:87:0f:ec:1f:3b:44:ac:f1:
14:2d:92:d5:31:05:1a:73:f8:b0:87:ce:1e:0e:2b:
b1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:42:12:17:16:B7:53:5C:D8:E5:23:EF:BC:B7:05:C8:95:80:1F:AC
X509v3 Authority Key Identifier:
keyid:55:F7:CA:BA:9B:D5:F9:FA:C1:E0:14:5A:75:67:C9:B4:59:A9:5E:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VffKupvV-frB4BRadWfJtFmpXoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/VffKupvV-frB4BRadWfJtFmpXoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/VffKupvV-frB4BRadWfJtFmpXoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:4c:aa:6a:d8:ac:1b:0c:ff:6e:c0:f4:fe:b4:d1:31:b1:bf:
40:ee:03:88:e0:94:72:ce:89:b8:de:a9:85:f1:07:07:75:4b:
e4:de:53:80:4c:bd:4a:88:fa:12:cc:d8:a8:0e:a1:1f:c4:2c:
8b:83:2a:29:9c:f1:1f:7d:43:76:94:ce:b7:dc:5c:ca:82:98:
0b:c7:77:a1:d4:42:63:90:69:e3:b0:98:54:d6:f4:4b:61:50:
68:b3:25:cc:88:c0:8b:fe:9a:60:85:0b:8c:9f:f8:83:2c:07:
60:a1:0a:ac:79:e6:af:12:57:11:b0:8a:90:88:eb:89:f2:2c:
85:16:24:09:c2:2c:d2:8f:05:14:44:65:3b:b8:18:3c:b2:17:
e9:24:d1:f0:d4:e1:c9:7e:b4:d1:ad:ca:8b:61:42:eb:cc:29:
1d:05:91:62:f3:5b:28:92:99:4e:bc:8c:96:de:d7:a5:0e:91:
42:cf:47:6e:61:94:ed:0d:24:33:a4:76:7c:df:79:e6:52:d6:
ba:c4:7b:ac:0a:8c:c6:b1:b7:67:7c:37:83:df:40:67:81:f9:
f8:25:62:9c:f0:76:f0:40:1d:bf:99:64:ad:38:b3:aa:cf:b6:
d0:ef:51:b4:da:5f:03:8a:29:eb:f5:df:45:e7:78:e1:d0:28:
8b:fc:c3:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:51:11 2025 by rpki-client