Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/911b43-7fc7-44e7-9dea-e20bb60a2793/1/VVvz0dRYglh_O_uidLL4uaRbyJk.mft
File: VVvz0dRYglh_O_uidLL4uaRbyJk.mft (raw, json)
Hash identifier: Ea4tkVnAeulgPosGIcU+V828lWh2ZolGFvhb5GnKip0=
Subject key identifier: FF:13:01:34:9A:E4:F6:73:A5:9D:B7:9B:C8:F1:76:D9:85:7B:D5:AD
Authority key identifier: 55:5B:F3:D1:D4:58:82:58:7F:3B:FB:A2:74:B2:F8:B9:A4:5B:C8:99
Certificate issuer: /CN=555bf3d1d45882587f3bfba274b2f8b9a45bc899
Certificate serial: 0197B77C9920AB6ED4B6D5A48C0A3FF24C14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VVvz0dRYglh_O_uidLL4uaRbyJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/911b43-7fc7-44e7-9dea-e20bb60a2793/1/VVvz0dRYglh_O_uidLL4uaRbyJk.mft
Manifest number: B3
Signing time: Sat 28 Jun 2025 17:01:25 +0000
Manifest this update: Sat 28 Jun 2025 17:01:25 +0000
Manifest next update: Sun 29 Jun 2025 17:01:25 +0000
Files and hashes: 1: 0qvu7Ik4qOydod-67-aS8UYVRt4.roa (hash: 9dnShS1pPGDLKB9HEL/30IZt5FlagVMcCMwGrXSyfAg=)
2: VVvz0dRYglh_O_uidLL4uaRbyJk.crl (hash: IUUex9N13ZQa04KC4nAJGAzbUZCIcuZnBEYI8fU05k4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/911b43-7fc7-44e7-9dea-e20bb60a2793/1/VVvz0dRYglh_O_uidLL4uaRbyJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/911b43-7fc7-44e7-9dea-e20bb60a2793/1/VVvz0dRYglh_O_uidLL4uaRbyJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VVvz0dRYglh_O_uidLL4uaRbyJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:99:20:ab:6e:d4:b6:d5:a4:8c:0a:3f:f2:4c:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=555bf3d1d45882587f3bfba274b2f8b9a45bc899
Validity
Not Before: Jun 28 17:01:25 2025 GMT
Not After : Jun 29 17:01:25 2025 GMT
Subject: CN=ff1301349ae4f673a59db79bc8f176d9857bd5ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:cb:35:40:38:cd:e4:34:31:6d:8c:f0:33:60:
ec:99:7c:ba:a5:5a:d2:00:c6:18:7b:a9:a1:1b:af:
cd:0a:7a:b8:7c:b1:c3:9d:cc:61:29:f3:ec:05:49:
74:f7:9d:db:63:1c:52:6d:2d:8c:8f:7b:9a:4d:31:
85:b8:3c:c8:6a:cc:4e:29:43:f0:c9:b6:ca:ad:e0:
7d:78:71:07:39:cb:60:16:6e:18:17:76:d6:b7:33:
a2:56:db:4b:b9:29:ce:0f:0c:7f:dc:07:a9:6f:70:
84:16:f4:76:7b:f5:03:93:c5:e2:65:e2:23:a1:19:
00:24:d1:c8:08:2e:68:fc:20:63:c3:50:4f:09:61:
9a:ba:5d:38:2f:c0:5e:ee:bb:6f:e6:53:b7:96:85:
f5:47:d8:af:9a:eb:99:58:bf:83:57:cb:42:11:14:
d0:ad:8b:ca:bf:8f:3a:52:5c:2e:86:73:62:ab:cb:
7d:da:fd:0a:39:ee:ac:2f:d8:36:8c:2d:3e:08:bc:
51:70:82:7a:37:38:24:63:3f:15:a0:4c:4b:b7:39:
ab:13:47:a4:ff:1a:c3:5a:69:b8:74:ed:0a:96:09:
2d:e3:a0:19:fb:ca:78:ec:1f:24:ce:45:1a:a0:8e:
9f:f2:d3:e1:66:13:de:4b:97:69:58:ed:b4:08:47:
7d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:13:01:34:9A:E4:F6:73:A5:9D:B7:9B:C8:F1:76:D9:85:7B:D5:AD
X509v3 Authority Key Identifier:
keyid:55:5B:F3:D1:D4:58:82:58:7F:3B:FB:A2:74:B2:F8:B9:A4:5B:C8:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VVvz0dRYglh_O_uidLL4uaRbyJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/911b43-7fc7-44e7-9dea-e20bb60a2793/1/VVvz0dRYglh_O_uidLL4uaRbyJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/911b43-7fc7-44e7-9dea-e20bb60a2793/1/VVvz0dRYglh_O_uidLL4uaRbyJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:67:79:0f:38:d2:82:f1:3b:bb:fd:81:ac:b6:9d:64:af:22:
ed:30:b9:90:fa:94:5d:03:16:c5:84:8a:40:80:96:0b:d0:ac:
60:f5:5f:dd:b4:dd:5d:c6:4a:fa:b9:c9:94:08:28:3f:1d:7f:
c5:16:7f:1f:33:8b:a8:6e:cc:1d:49:87:cb:32:da:0c:a0:bb:
0c:ac:63:83:6f:43:a3:c2:37:ed:b2:9d:71:44:cf:19:dd:37:
7d:75:89:eb:62:81:ed:aa:f8:30:6e:ab:53:82:d6:97:1b:95:
35:f5:8b:4f:c6:0b:cf:d0:82:45:0c:f4:6c:9f:82:eb:cc:11:
3e:8c:10:d4:98:08:8f:7f:59:5d:8f:60:df:8e:93:14:2d:28:
64:b5:e1:9b:da:ad:bc:fa:67:93:7a:21:a7:a2:55:a2:1e:78:
42:81:ac:5e:0c:30:12:34:92:7d:4c:8c:20:03:fb:78:ab:f0:
83:d0:29:03:40:fb:53:30:eb:5f:50:81:8d:f9:cc:06:1d:53:
b8:15:73:58:34:f3:52:bc:93:eb:cb:8b:e0:21:cc:0a:ae:60:
d3:ee:17:f5:04:24:6f:99:8a:ed:11:b2:25:45:1c:bc:27:18:
39:e1:12:f3:59:47:aa:61:4b:64:9e:37:ca:74:dc:96:76:54:
ff:2c:1b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:23:36 2025 by rpki-client