Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/a72a92-568b-4327-9c1d-6681f916e554/1/VtV_bPKMmCwdP_bFJX85npuVW90.mft
File: VtV_bPKMmCwdP_bFJX85npuVW90.mft (raw, json)
Hash identifier: iAvpKQ2ZVlgLNMIWVS1vM/A7d5468KaIbtNHv9ldbTY=
Subject key identifier: 2B:74:25:95:4D:63:53:1A:D4:B0:5F:36:2D:94:17:96:C0:A9:81:76
Authority key identifier: 56:D5:7F:6C:F2:8C:98:2C:1D:3F:F6:C5:25:7F:39:9E:9B:95:5B:DD
Certificate issuer: /CN=56d57f6cf28c982c1d3ff6c5257f399e9b955bdd
Certificate serial: 0197B74535EBEF9F301E9C0F33B3412C06D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtV_bPKMmCwdP_bFJX85npuVW90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/a72a92-568b-4327-9c1d-6681f916e554/1/VtV_bPKMmCwdP_bFJX85npuVW90.mft
Manifest number: 14DD
Signing time: Sat 28 Jun 2025 16:00:55 +0000
Manifest this update: Sat 28 Jun 2025 16:00:55 +0000
Manifest next update: Sun 29 Jun 2025 16:00:55 +0000
Files and hashes: 1: 3oykizYoQAY0I58Of8Cq7NhfUKc.roa (hash: cQQcIqMFqqgJgSMsMD6mIgtzNJvUpT4D17fJSPeJdeU=)
2: GHjwnLUndLphHCJPh-qrOX8_zps.roa (hash: b//UMqi7Agd+yuEn41KzmO7VIfrmzPVe7tc4UxNlKdk=)
3: VtV_bPKMmCwdP_bFJX85npuVW90.crl (hash: ZQyJq5gDMXdCLqHXs9wnrkPc5GU46x5WtEJeLlbtvBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/a72a92-568b-4327-9c1d-6681f916e554/1/VtV_bPKMmCwdP_bFJX85npuVW90.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/a72a92-568b-4327-9c1d-6681f916e554/1/VtV_bPKMmCwdP_bFJX85npuVW90.mft
rsync://rpki.ripe.net/repository/DEFAULT/VtV_bPKMmCwdP_bFJX85npuVW90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:35:eb:ef:9f:30:1e:9c:0f:33:b3:41:2c:06:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56d57f6cf28c982c1d3ff6c5257f399e9b955bdd
Validity
Not Before: Jun 28 16:00:55 2025 GMT
Not After : Jun 29 16:00:55 2025 GMT
Subject: CN=2b7425954d63531ad4b05f362d941796c0a98176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:97:6b:a0:cf:bd:5a:ea:89:73:6b:ee:e3:c1:
41:40:ac:34:59:89:7d:12:14:cf:fc:2c:42:17:10:
2e:eb:b1:c1:89:ec:7b:2f:72:d6:2e:b4:c2:94:05:
2f:28:cf:2c:3b:1c:55:fb:bf:04:76:94:2e:74:8d:
90:64:ea:f1:3e:00:98:7d:bf:45:d6:85:04:d9:aa:
36:3d:d5:94:55:d5:e9:43:ef:56:36:e2:c2:8a:37:
c3:24:be:df:5a:fe:dc:8a:51:84:75:59:92:10:10:
6f:ac:5f:79:b8:e2:8a:a7:f7:70:08:9e:c7:cb:d4:
75:ca:90:5d:69:e0:88:48:e8:10:69:e7:14:41:76:
28:53:14:f3:74:73:35:e8:49:0b:70:63:1a:6a:12:
69:b4:72:59:f6:27:60:76:68:94:e6:31:9f:59:2a:
c7:b9:01:91:1a:5d:ff:5c:c8:58:de:19:68:b4:3e:
50:ba:49:c7:e1:2b:3e:06:c7:b5:4b:0d:36:b2:b4:
a0:1c:aa:d4:eb:39:de:24:79:cb:db:2c:8b:9e:76:
a0:9a:62:3a:ea:e9:7b:68:53:3f:d9:6c:68:bd:fa:
90:08:58:57:56:8c:e9:f7:49:5d:76:f8:86:37:8b:
14:b1:97:3d:dd:01:66:57:d2:a7:23:e3:52:7b:17:
0b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:74:25:95:4D:63:53:1A:D4:B0:5F:36:2D:94:17:96:C0:A9:81:76
X509v3 Authority Key Identifier:
keyid:56:D5:7F:6C:F2:8C:98:2C:1D:3F:F6:C5:25:7F:39:9E:9B:95:5B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtV_bPKMmCwdP_bFJX85npuVW90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a72a92-568b-4327-9c1d-6681f916e554/1/VtV_bPKMmCwdP_bFJX85npuVW90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a72a92-568b-4327-9c1d-6681f916e554/1/VtV_bPKMmCwdP_bFJX85npuVW90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:97:1f:05:87:54:08:49:fe:b9:a8:b1:fd:cf:78:da:05:3e:
61:23:cc:47:ba:ca:2b:ab:16:8f:87:e8:7b:73:45:52:87:8f:
1c:89:bf:46:ab:bd:f6:6a:97:4d:74:6f:c3:55:24:bd:16:82:
ea:99:5d:fc:22:f3:b8:4b:84:fc:bd:b1:94:c0:1a:10:9f:b9:
e1:af:44:20:df:03:3b:4c:db:fa:a0:55:0d:ac:dc:73:70:2f:
83:d5:6b:dc:05:3b:85:d5:12:c9:15:49:68:61:cf:c9:37:aa:
12:d8:6f:24:80:6d:db:e5:dc:c9:cf:b0:08:ec:47:56:93:c7:
11:59:35:ec:d8:31:15:6d:69:43:a8:30:7d:0d:b9:a3:47:b4:
31:64:57:b3:c6:09:ae:29:30:2e:d4:25:85:bc:86:52:3b:58:
84:26:8f:c7:27:9d:da:7d:84:17:ff:51:b2:65:c4:59:5c:aa:
0b:50:d8:ae:d2:3c:ec:af:77:c5:7a:ca:e7:dd:94:48:87:4b:
38:9a:51:77:1a:be:75:95:be:6f:e8:9f:cb:36:51:91:16:df:
0d:c6:92:37:04:31:fb:84:6a:57:e4:19:73:d4:04:92:32:ca:
71:c4:f8:f5:7d:d4:ab:18:66:82:e7:f2:96:f7:01:d7:bd:2e:
66:e0:1d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:34:56 2025 by rpki-client