Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft
File: VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft (raw, json)
Hash identifier: YA2xieK6De8uwLuu9GIrbVEs1GSmU4oseK0WWGbXCuc=
Subject key identifier: 02:D6:E7:05:9F:9F:AF:DA:97:0F:78:96:53:34:D1:35:10:5E:6E:8C
Authority key identifier: 55:24:23:ED:90:50:00:F6:9A:D9:3E:EF:C6:66:BB:9B:1A:DD:CB:37
Certificate issuer: /CN=552423ed905000f69ad93eefc666bb9b1addcb37
Certificate serial: 0197B70ED0AFA38697942A04A61AF342E46C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSQj7ZBQAPaa2T7vxma7mxrdyzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 15:01:30 +0000
Manifest this update: Sat 28 Jun 2025 15:01:30 +0000
Manifest next update: Sun 29 Jun 2025 15:01:30 +0000
Files and hashes: 1: 2mQ_q8-dGNGRe3nqpXkavXNspDg.roa (hash: /3YCHcej9bstt2T6B00QHN8/IPSuEaJEhcwHBYjcdtw=)
2: 5SSOCLgHzcxdzYdGNpYRPqovl-A.roa (hash: PUdiBPSqRZwnkbR0oFATrv5zTfcNr+UqMdxjxEau1ew=)
3: VSQj7ZBQAPaa2T7vxma7mxrdyzc.crl (hash: y6Dq0CjM606b3IXyvyuPnLQJS2P6HVVPDhBgP7QJ2JY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VSQj7ZBQAPaa2T7vxma7mxrdyzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:d0:af:a3:86:97:94:2a:04:a6:1a:f3:42:e4:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552423ed905000f69ad93eefc666bb9b1addcb37
Validity
Not Before: Jun 28 15:01:30 2025 GMT
Not After : Jun 29 15:01:30 2025 GMT
Subject: CN=02d6e7059f9fafda970f78965334d135105e6e8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:72:62:ff:ce:f0:48:6a:c2:e5:4a:90:02:b1:
34:6b:9a:95:8b:fc:b8:cd:bb:7e:d1:27:c5:44:4c:
62:91:64:c8:07:51:ec:e2:02:52:47:83:db:a9:c7:
f7:c0:d3:1d:14:c6:2d:23:d4:0c:4f:52:44:98:a8:
20:73:b9:92:07:61:1a:4a:3b:fa:00:37:5f:2c:1e:
4b:71:ee:ac:2e:4d:7d:00:fd:c9:5e:a0:83:bc:62:
8a:f3:84:7c:e2:f6:98:f5:58:c6:25:ae:da:f8:8a:
73:12:a4:81:47:36:10:7a:0e:de:89:f4:66:c9:b3:
61:7c:ac:39:8d:39:16:8f:87:7e:5b:6d:b3:e7:46:
3d:7d:8b:82:df:46:ca:c3:6c:83:80:14:0c:16:02:
fa:c6:69:96:ae:1a:0c:f2:35:0a:5b:a8:2b:74:fc:
e8:e7:d2:23:d7:07:6f:9c:21:6f:bc:0f:53:66:ce:
ee:5b:ad:81:eb:09:9d:b0:14:1f:4a:47:de:2a:3b:
ae:fe:fa:bf:af:fb:8c:93:68:58:2b:b8:1f:0e:b1:
fe:d7:61:0f:2d:65:02:0b:0b:72:d8:a9:db:bb:e0:
10:21:d8:be:cc:39:52:fe:91:fa:44:ec:9e:2c:50:
5d:a4:75:55:95:11:b3:d2:cd:37:2b:61:bd:2c:ca:
f0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:D6:E7:05:9F:9F:AF:DA:97:0F:78:96:53:34:D1:35:10:5E:6E:8C
X509v3 Authority Key Identifier:
keyid:55:24:23:ED:90:50:00:F6:9A:D9:3E:EF:C6:66:BB:9B:1A:DD:CB:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSQj7ZBQAPaa2T7vxma7mxrdyzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:3b:92:d2:73:2c:27:43:77:35:37:a3:a7:17:12:2e:7c:f0:
ae:bb:1b:e4:4d:b2:09:28:08:19:3b:04:79:71:15:ed:8c:5b:
86:ac:c1:6c:3c:53:d3:0b:71:1e:6e:25:88:bb:3a:4c:b3:89:
f1:1c:cc:af:66:69:52:2d:6a:00:a4:f9:d1:9b:f6:85:0f:bf:
3e:08:58:0e:7c:1f:ac:33:4d:b7:7b:93:d0:6b:78:a2:86:a5:
8d:ec:9c:b7:16:52:ae:53:73:9b:b4:ac:be:b3:e2:17:41:f5:
c6:76:5a:11:eb:e0:2a:fb:62:03:a5:37:c6:03:b1:e8:70:1e:
eb:21:5d:0e:1a:80:ec:b8:2f:de:9d:94:9a:c4:5f:8c:fa:0f:
b0:63:bb:e0:8b:4c:37:a8:1e:f9:f9:58:5d:21:08:70:bc:61:
bf:31:8e:cb:ef:16:32:16:ca:74:24:b6:92:9c:17:61:5f:95:
46:10:42:39:f4:b5:64:0e:4b:46:ca:c7:4c:b1:75:a1:6e:aa:
fc:22:5f:14:79:68:c0:b0:a0:58:0f:0c:46:84:9b:9b:27:56:
48:13:61:ac:e9:80:82:26:ea:0f:50:ff:a2:4d:c0:c2:ab:1e:
a7:0d:62:49:73:1b:7f:ad:63:86:d7:3b:2f:9f:bb:6d:7a:b3:
14:5e:28:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:53:50 2025 by rpki-client