Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/VdXcniIBEqJ8FSvDI4kDiXSuRXI.mft
File: VdXcniIBEqJ8FSvDI4kDiXSuRXI.mft (raw, json)
Hash identifier: qmqAPdfR79wd9NDggLaLMCJe8pzHYI+oOVC/8vmJcX0=
Subject key identifier: AE:B6:8E:75:12:9D:66:B7:E2:77:C3:32:92:FB:8A:2F:BD:63:2C:24
Authority key identifier: 55:D5:DC:9E:22:01:12:A2:7C:15:2B:C3:23:89:03:89:74:AE:45:72
Certificate issuer: /CN=55d5dc9e220112a27c152bc32389038974ae4572
Certificate serial: 0197B6D772AC8A037D17121D62F53A80B1EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VdXcniIBEqJ8FSvDI4kDiXSuRXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/VdXcniIBEqJ8FSvDI4kDiXSuRXI.mft
Manifest number: 12CD
Signing time: Sat 28 Jun 2025 14:01:02 +0000
Manifest this update: Sat 28 Jun 2025 14:01:02 +0000
Manifest next update: Sun 29 Jun 2025 14:01:02 +0000
Files and hashes: 1: NgMUQ0h4d6oIArcMJtSW703L-Zc.roa (hash: TJW4OaMrgaRj7E3uX9xVvPrYH4h+lcuQwLF2jUPlChA=)
2: VdXcniIBEqJ8FSvDI4kDiXSuRXI.crl (hash: 9UcDQo666hkXSPsixrDMISy/6iFFtAbJS9HhOdpTXz4=)
3: h9epvE3XZbxuQFOC07DHje9oldc.roa (hash: dmaD3wbg4kagfJA96eYctyQPytlbvLwfUnrstuptdyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/VdXcniIBEqJ8FSvDI4kDiXSuRXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/VdXcniIBEqJ8FSvDI4kDiXSuRXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/VdXcniIBEqJ8FSvDI4kDiXSuRXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:72:ac:8a:03:7d:17:12:1d:62:f5:3a:80:b1:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55d5dc9e220112a27c152bc32389038974ae4572
Validity
Not Before: Jun 28 14:01:02 2025 GMT
Not After : Jun 29 14:01:02 2025 GMT
Subject: CN=aeb68e75129d66b7e277c33292fb8a2fbd632c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:06:3e:ce:54:20:fc:06:02:1a:da:32:ac:36:
9d:df:f6:bd:d0:a0:17:96:20:c0:a7:fc:f4:ae:e2:
11:57:e0:8a:ef:59:0e:a3:54:5f:3d:27:8e:d1:e5:
20:a8:2a:2e:b7:a6:96:76:47:3b:10:d5:91:e0:d0:
60:56:38:6c:7a:1e:10:88:84:44:ca:d8:66:bf:7b:
b2:8f:f2:e9:e5:18:ab:e0:38:bf:84:d3:55:50:b4:
7d:cf:c3:2c:cf:62:3a:cb:17:bb:27:0f:6d:10:07:
1b:94:7b:d3:97:e2:17:ae:e4:b9:83:9d:ad:23:d9:
90:d1:04:7e:15:dc:6b:12:93:3b:81:b5:35:df:39:
22:2e:4a:90:68:f8:a7:2b:3b:09:32:cb:4b:39:5b:
b7:5c:8f:1d:31:51:1a:59:6d:d5:a5:c8:5c:ac:df:
62:ce:14:57:e6:71:21:12:65:6b:bb:53:55:5e:86:
5f:91:80:7b:b6:ad:dc:85:32:34:bf:79:6c:89:80:
3d:18:a5:4f:0a:c6:1b:6b:80:70:95:60:f9:aa:ed:
0f:3d:dc:26:25:e5:c8:36:8a:a3:81:f8:be:07:1c:
49:0d:a1:f4:f1:b9:ff:06:de:d8:19:af:4a:00:0c:
39:93:e7:37:34:80:bd:0e:77:62:47:34:4a:f2:1d:
07:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B6:8E:75:12:9D:66:B7:E2:77:C3:32:92:FB:8A:2F:BD:63:2C:24
X509v3 Authority Key Identifier:
keyid:55:D5:DC:9E:22:01:12:A2:7C:15:2B:C3:23:89:03:89:74:AE:45:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VdXcniIBEqJ8FSvDI4kDiXSuRXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/VdXcniIBEqJ8FSvDI4kDiXSuRXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/VdXcniIBEqJ8FSvDI4kDiXSuRXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:d3:e4:ec:0c:82:2b:2a:1c:65:a5:77:ee:c3:9e:c8:b5:ef:
b0:1d:da:40:ad:26:a1:6c:55:2e:37:df:bc:c9:da:9b:fb:4c:
6d:fe:e4:f8:41:cf:37:3d:23:97:a2:02:41:ac:0c:83:ee:3a:
c6:04:ec:4e:d9:a9:ec:2d:c4:79:85:18:71:f9:7e:a6:0d:ca:
99:da:ff:8f:f1:d9:75:e4:40:00:61:d6:15:4a:5b:50:4d:78:
af:9e:86:8a:ff:63:28:0d:bc:92:f8:ed:97:42:8f:ad:99:15:
01:31:19:93:2b:49:b9:52:77:c9:57:4c:ab:5c:19:5d:07:76:
99:11:75:c5:46:7e:6f:a0:26:7b:91:7a:65:de:00:5a:34:6d:
58:fc:c1:e4:54:2a:74:95:73:fc:bc:c1:b7:52:dd:e7:f3:9f:
ea:d8:dd:04:c5:cc:aa:e1:02:11:04:69:48:09:79:e8:d6:c8:
e4:ed:70:83:f3:d0:e9:a8:39:f6:35:54:dc:04:bc:bb:e4:e4:
7b:73:bd:5f:5d:d5:5e:17:16:d1:c9:d7:a8:8f:97:8e:87:c0:
8a:88:23:c3:19:00:d6:f5:ea:e5:71:f0:31:e5:01:34:a7:f2:
d3:06:9a:d2:34:9b:2f:d6:91:46:26:22:1f:d7:ba:4d:d1:68:
6b:94:d1:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:20:12 2025 by rpki-client