Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/VcQvLHehgijJ-pqzeYQmYNB5KQg.mft
File: VcQvLHehgijJ-pqzeYQmYNB5KQg.mft (raw, json)
Hash identifier: Ai+s7j7MqFvoSTvP4dN7hkv0ML9/GJFQlztmB4oTZ28=
Subject key identifier: 44:9A:91:66:F1:B6:75:C6:97:74:40:DD:A6:27:3F:EC:A8:81:86:B1
Authority key identifier: 55:C4:2F:2C:77:A1:82:28:C9:FA:9A:B3:79:84:26:60:D0:79:29:08
Certificate issuer: /CN=55c42f2c77a18228c9fa9ab379842660d0792908
Certificate serial: 0197B70EC01F73F676A70F3063C7E9B58973
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VcQvLHehgijJ-pqzeYQmYNB5KQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/VcQvLHehgijJ-pqzeYQmYNB5KQg.mft
Manifest number: 057B
Signing time: Sat 28 Jun 2025 15:01:26 +0000
Manifest this update: Sat 28 Jun 2025 15:01:26 +0000
Manifest next update: Sun 29 Jun 2025 15:01:26 +0000
Files and hashes: 1: En2fZob7-Xp8zkiLryaS1TtBdYw.roa (hash: zk5DD5xhiB++oRKxPmJdvhY2qq8VEHhmVtAgMqGgPO4=)
2: VcQvLHehgijJ-pqzeYQmYNB5KQg.crl (hash: VUdcY2D6L06ACOEerP7NS4qqCku3odc8dsVyGKbATo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/VcQvLHehgijJ-pqzeYQmYNB5KQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/VcQvLHehgijJ-pqzeYQmYNB5KQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/VcQvLHehgijJ-pqzeYQmYNB5KQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:c0:1f:73:f6:76:a7:0f:30:63:c7:e9:b5:89:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55c42f2c77a18228c9fa9ab379842660d0792908
Validity
Not Before: Jun 28 15:01:26 2025 GMT
Not After : Jun 29 15:01:26 2025 GMT
Subject: CN=449a9166f1b675c6977440dda6273feca88186b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fd:9a:a8:d1:d6:fe:93:a4:41:57:27:50:51:
dc:4e:a1:bb:76:81:ef:94:83:04:82:b3:b9:eb:96:
ae:c8:05:9e:cb:3d:1f:d4:97:12:29:52:0c:c9:c1:
30:9b:a2:9d:cb:d8:c2:a3:c7:21:45:65:da:78:b9:
76:48:c0:50:4f:4e:b9:05:10:09:f4:56:13:88:8b:
64:1d:9d:5d:88:7d:b5:9d:47:9b:93:f4:cf:c0:32:
e1:d6:b8:8a:e2:11:55:fd:4d:c5:cf:e0:23:4d:e0:
e9:76:47:fb:e5:79:d4:58:9a:32:0f:e0:3f:1d:76:
2d:7b:4c:6c:78:e1:10:04:66:37:81:fe:c5:28:30:
ee:9f:5d:9e:c8:bb:38:ef:02:01:e1:5b:a0:f7:ae:
7e:e6:c9:50:58:a2:64:e4:73:ed:57:e1:91:92:11:
59:29:ca:d1:12:49:ab:9c:5b:a0:73:27:8a:d2:74:
33:d9:9b:f0:c6:fa:4a:c7:52:15:52:f8:f5:ab:44:
77:9e:45:72:53:88:c9:f9:59:d2:b2:e1:07:18:df:
87:dd:3d:da:bf:43:82:42:eb:01:cf:b1:1e:e2:15:
1e:c4:ce:f6:3a:95:25:c6:6d:a7:d7:2c:eb:93:ab:
fc:91:e7:a0:ad:75:55:c2:0b:1f:08:31:75:d9:73:
7f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:9A:91:66:F1:B6:75:C6:97:74:40:DD:A6:27:3F:EC:A8:81:86:B1
X509v3 Authority Key Identifier:
keyid:55:C4:2F:2C:77:A1:82:28:C9:FA:9A:B3:79:84:26:60:D0:79:29:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VcQvLHehgijJ-pqzeYQmYNB5KQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/VcQvLHehgijJ-pqzeYQmYNB5KQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/VcQvLHehgijJ-pqzeYQmYNB5KQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:3d:cd:7c:b9:1a:e5:77:cb:14:45:7b:44:e8:64:2b:ea:24:
13:ca:f6:e1:43:b0:26:82:a2:a1:ce:b4:6e:52:1a:20:d4:80:
11:4b:5b:1a:fb:20:86:f4:d3:cf:d9:82:59:b6:e2:e1:10:35:
d4:34:10:23:33:75:a7:7d:ec:14:40:08:24:a6:ec:45:ea:47:
1b:97:b9:08:37:17:ab:32:2a:64:1a:98:b3:65:c0:1e:73:e6:
53:3b:de:cf:39:1a:c9:86:3f:f5:c3:e0:c8:76:9e:2c:34:e3:
e6:0a:27:00:99:e7:04:77:7a:d3:e5:4b:8b:b9:07:bf:0a:9d:
de:d7:21:70:8a:26:a3:8e:87:41:18:8f:88:ca:60:63:98:ca:
30:be:04:a3:fb:cb:45:3c:83:37:38:e1:86:65:b2:21:be:d0:
06:8d:87:14:10:0c:d4:f1:f9:56:98:8e:f0:d3:15:08:9e:38:
49:56:d8:96:b8:cc:0f:ac:0c:14:b4:44:42:40:9a:ca:bf:86:
1f:e8:e0:24:9e:2f:20:f4:08:5e:58:92:7e:dd:62:44:6e:2a:
36:d9:ac:19:47:00:f4:d3:72:b9:28:3b:db:b9:11:bd:79:b8:
c2:3a:e0:b5:e6:f5:40:38:5e:99:69:46:2e:66:a2:86:15:fe:
98:14:dc:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:08:35 2025 by rpki-client