Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/8efa45-92a8-4513-9f9a-ad2b61380be1/1/VKzhXkXvtaAGDAZeJ06o46-wJes.mft
File: VKzhXkXvtaAGDAZeJ06o46-wJes.mft (raw, json)
Hash identifier: J+FWNdbgwYQ8IH3EhKCb4yVXiCOo7/b+8N8erB35KG4=
Subject key identifier: 92:40:BF:66:B0:B0:93:57:17:8C:2C:EA:79:C7:F6:EE:5B:A7:99:62
Authority key identifier: 54:AC:E1:5E:45:EF:B5:A0:06:0C:06:5E:27:4E:A8:E3:AF:B0:25:EB
Certificate issuer: /CN=54ace15e45efb5a0060c065e274ea8e3afb025eb
Certificate serial: 0197B70ED0CB93500750624CD3F4022567CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKzhXkXvtaAGDAZeJ06o46-wJes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/8efa45-92a8-4513-9f9a-ad2b61380be1/1/VKzhXkXvtaAGDAZeJ06o46-wJes.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 15:01:30 +0000
Manifest this update: Sat 28 Jun 2025 15:01:30 +0000
Manifest next update: Sun 29 Jun 2025 15:01:30 +0000
Files and hashes: 1: VKzhXkXvtaAGDAZeJ06o46-wJes.crl (hash: 4XowLCOI8vWhFGbSj+8vD8QuhwlNceTkGZ3LXkZwe28=)
2: agadNAkdL8gZSJjhebbq78b-GQQ.roa (hash: AWs3/nEl7KZJPMZNEu10pqsOCcoVUqcD7DcXZsQJMg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/8efa45-92a8-4513-9f9a-ad2b61380be1/1/VKzhXkXvtaAGDAZeJ06o46-wJes.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/8efa45-92a8-4513-9f9a-ad2b61380be1/1/VKzhXkXvtaAGDAZeJ06o46-wJes.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKzhXkXvtaAGDAZeJ06o46-wJes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:d0:cb:93:50:07:50:62:4c:d3:f4:02:25:67:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54ace15e45efb5a0060c065e274ea8e3afb025eb
Validity
Not Before: Jun 28 15:01:30 2025 GMT
Not After : Jun 29 15:01:30 2025 GMT
Subject: CN=9240bf66b0b09357178c2cea79c7f6ee5ba79962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a3:9e:d4:6f:aa:5a:82:37:5e:72:a4:b4:6c:
98:71:3a:50:52:bf:fd:b9:ff:a6:7b:75:ad:37:87:
6f:c0:c3:4b:25:63:a8:bf:54:7d:b3:85:4c:fe:23:
19:1e:96:58:51:14:93:a8:f7:24:3f:33:7d:d0:e9:
4a:83:31:ed:39:73:60:94:b8:92:bd:8b:25:37:a1:
88:fb:a8:49:4d:38:da:50:ff:37:1e:2f:ca:c9:54:
16:df:06:f5:b8:63:47:f4:c7:80:06:2c:6c:97:3c:
bd:7d:e9:d3:25:9f:67:67:a8:8c:2e:b1:e3:1d:8a:
89:09:fc:9a:e9:1a:6e:e3:a9:ae:e2:c7:aa:0f:60:
f4:33:db:6c:22:f6:89:2c:1a:48:07:91:99:72:80:
31:57:71:26:05:f0:19:87:11:f2:c8:ee:c3:e3:79:
96:f9:38:d6:11:5c:ad:15:d6:9b:ce:d4:7a:ac:8d:
38:15:05:d2:3e:ea:32:1a:38:81:a0:1a:c1:48:15:
43:31:17:f3:31:54:6c:7b:f4:db:23:d7:f0:87:1f:
1d:9a:72:5c:c9:16:72:a3:a4:83:15:f3:b4:f1:74:
19:8a:41:74:74:a5:f3:71:2d:63:b3:9c:f0:21:d7:
aa:0d:cb:9e:e6:86:c8:6f:3c:5d:34:4f:12:81:aa:
ea:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:40:BF:66:B0:B0:93:57:17:8C:2C:EA:79:C7:F6:EE:5B:A7:99:62
X509v3 Authority Key Identifier:
keyid:54:AC:E1:5E:45:EF:B5:A0:06:0C:06:5E:27:4E:A8:E3:AF:B0:25:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKzhXkXvtaAGDAZeJ06o46-wJes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/8efa45-92a8-4513-9f9a-ad2b61380be1/1/VKzhXkXvtaAGDAZeJ06o46-wJes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/8efa45-92a8-4513-9f9a-ad2b61380be1/1/VKzhXkXvtaAGDAZeJ06o46-wJes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:18:d1:f3:e6:ae:83:7c:ec:32:bb:d2:5d:41:e5:7e:09:44:
25:d9:c3:6f:06:ab:6f:1d:f5:d5:90:ae:b0:59:32:ca:48:76:
39:e8:74:bf:79:f0:fa:c6:4f:67:26:ca:cc:3a:f8:0d:1a:8a:
18:d6:c9:31:d9:6f:53:38:b5:9a:5e:73:08:a7:41:0a:70:e1:
ea:49:be:61:45:df:8c:7d:01:cb:e4:f7:9d:09:29:4f:07:55:
33:11:bd:30:81:04:f5:18:0c:89:e4:1b:d9:c7:74:46:38:d0:
9c:2b:1e:57:20:41:bf:49:2c:49:09:8c:14:c8:fe:5a:25:7d:
d3:62:33:ee:1c:9f:88:b0:47:50:45:56:60:25:ab:ef:42:91:
b1:8f:3d:24:6d:84:da:ea:ac:a8:0f:50:17:66:30:ac:03:80:
7e:bf:ed:13:87:90:eb:cb:8c:a7:2c:03:ba:dc:7f:f4:cb:54:
7a:80:db:8b:d2:74:89:b0:04:da:9c:a8:98:e4:b8:b8:f5:54:
6f:9c:23:4a:48:0a:1a:35:63:ac:75:c4:85:92:5a:57:1d:9f:
3a:05:fb:97:d5:7e:24:78:54:cd:c7:53:f9:cd:db:3e:04:40:
73:fa:2f:73:1c:c1:4e:0f:5d:8b:50:f8:4a:8b:bd:40:2d:22:
f8:38:9a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:12:48 2025 by rpki-client