Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.mft
File: VSV3WnBqwAyC-ikzniLkMQgJnnk.mft (raw, json)
Hash identifier: irxcemNMNKEI0umhxqR1ac/xHVlmBwbBCC6LnNxAai0=
Subject key identifier: F0:C3:81:A9:C6:F0:00:3F:D8:49:3D:24:D2:F5:00:BD:3B:6F:8C:29
Authority key identifier: 55:25:77:5A:70:6A:C0:0C:82:FA:29:33:9E:22:E4:31:08:09:9E:79
Certificate issuer: /CN=5525775a706ac00c82fa29339e22e43108099e79
Certificate serial: 0197B70E96872439A0BCC2559B178E0026D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSV3WnBqwAyC-ikzniLkMQgJnnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.mft
Manifest number: 108B
Signing time: Sat 28 Jun 2025 15:01:15 +0000
Manifest this update: Sat 28 Jun 2025 15:01:15 +0000
Manifest next update: Sun 29 Jun 2025 15:01:15 +0000
Files and hashes: 1: 7Hysv3h3cIK_WddtBkhV4eeOKec.roa (hash: vqkbaBvGL81dJNu1I/whqip6EIOAqXAyhwvf9zKaCBc=)
2: VSV3WnBqwAyC-ikzniLkMQgJnnk.crl (hash: 8XKZIo5OCzigGEw5ty4xwMuNXD7OgnhO8vmfOYhXs1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VSV3WnBqwAyC-ikzniLkMQgJnnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:96:87:24:39:a0:bc:c2:55:9b:17:8e:00:26:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5525775a706ac00c82fa29339e22e43108099e79
Validity
Not Before: Jun 28 15:01:15 2025 GMT
Not After : Jun 29 15:01:15 2025 GMT
Subject: CN=f0c381a9c6f0003fd8493d24d2f500bd3b6f8c29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:54:96:96:c9:08:a4:d8:11:ec:08:2a:11:ee:
be:fb:0c:71:c7:91:43:d3:a5:ae:ef:c9:e3:bd:a3:
59:5b:43:19:e3:e7:94:5a:b7:68:b2:d4:48:f1:1e:
cd:bd:88:e6:22:d0:9f:59:37:1b:8d:7c:68:2e:1a:
4a:3f:54:9b:e0:a7:e6:fc:c8:16:85:25:0d:e8:07:
21:78:4e:bd:8b:f9:c5:dc:95:17:fe:69:7e:45:c0:
e2:9b:bc:b0:b8:ad:64:3d:6a:b7:f1:91:d0:39:6e:
24:3b:a2:5f:75:50:66:f6:00:01:11:98:22:43:ba:
14:c4:5f:9b:5e:84:47:dd:e7:53:88:4e:dc:da:34:
e8:dc:25:66:f2:14:87:4f:bf:e6:be:d9:80:bc:49:
44:9e:a1:58:3c:b8:cb:af:e8:ab:ab:b6:66:1a:27:
70:23:79:44:c8:91:b8:55:4a:45:e2:ed:eb:93:8a:
a3:1d:37:77:8f:6b:51:ab:cc:e3:67:4f:37:47:3e:
d2:5b:e2:ac:76:ab:73:81:60:ad:b7:46:95:9c:4b:
7a:ef:14:33:2d:1e:f6:21:51:ac:2e:3b:38:b8:78:
29:cf:1f:c9:00:f8:70:09:87:bf:6f:0b:91:88:5e:
2e:3a:49:bd:ae:42:11:62:ef:28:55:27:6a:e6:0a:
ce:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C3:81:A9:C6:F0:00:3F:D8:49:3D:24:D2:F5:00:BD:3B:6F:8C:29
X509v3 Authority Key Identifier:
keyid:55:25:77:5A:70:6A:C0:0C:82:FA:29:33:9E:22:E4:31:08:09:9E:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSV3WnBqwAyC-ikzniLkMQgJnnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:c7:4c:cd:12:2f:c8:c3:70:ab:1a:6e:ca:c0:44:4a:ca:dd:
27:5f:70:32:17:be:c1:49:52:43:e4:2d:30:9b:9e:70:1b:6a:
1b:cf:64:a3:de:45:d8:9c:88:ae:6c:c2:be:70:4d:24:ac:ac:
f7:0f:66:ab:47:c4:ed:6f:94:d6:5f:af:58:d9:ab:58:9d:0c:
1b:9a:12:48:46:e8:e2:36:8b:c3:5b:66:85:15:67:86:20:de:
42:c4:ee:16:f3:35:d2:2c:58:50:07:40:ab:21:4b:13:35:6f:
f9:b1:0d:43:df:06:1b:fd:29:ac:59:c5:f7:5d:10:93:bb:35:
2c:3b:cb:c2:13:34:e1:e0:e6:a5:21:81:60:3e:5a:97:f0:dd:
8e:27:85:5f:e1:b5:10:c0:bc:91:44:be:de:29:4c:b5:2e:bf:
33:17:38:ce:d1:6a:b6:7b:b9:97:db:58:b9:e7:83:a3:d9:be:
9d:ef:71:46:ce:75:af:05:74:5e:a2:95:2d:1c:b5:d9:fc:23:
39:68:9b:53:9c:a6:41:df:ad:ad:09:8d:03:76:b9:71:84:8a:
48:32:fb:59:0c:69:08:be:59:c2:62:1f:ee:cb:5a:e6:67:44:
ea:d6:bc:de:ec:c4:15:38:6d:7b:9b:7c:81:b8:f6:27:e1:b2:
28:00:98:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:01:40 2025 by rpki-client