Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.mft
File: VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.mft (raw, json)
Hash identifier: HKa68bTWnx6bD0tYrr92Iuf3UW8zY+fwkrAJ8jVweYk=
Subject key identifier: 5D:2A:69:48:07:EC:A3:DA:E7:FC:88:DB:4E:7E:BB:89:C4:E1:7E:F9
Authority key identifier: 57:13:0F:79:9F:8A:89:85:50:2A:2E:A3:35:60:37:67:40:85:CF:CA
Certificate issuer: /CN=57130f799f8a8985502a2ea3356037674085cfca
Certificate serial: 0197B933A3681DCFC8E602D5CC41DB9ADAE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.mft
Manifest number: 15BE
Signing time: Sun 29 Jun 2025 01:00:58 +0000
Manifest this update: Sun 29 Jun 2025 01:00:58 +0000
Manifest next update: Mon 30 Jun 2025 01:00:58 +0000
Files and hashes: 1: 0cSnkMJkJHeFaYdY1KT0ScO6smc.roa (hash: Gcz0UPXLhZmjDb4FihMibqoJMQnP847xcHc8Qvl5GWc=)
2: 10H4MUNhSSva047O9EEp6SPRBJE.roa (hash: JmvtAf/+biHEI+go7XB/O90LiW31KmrT39neQ8bWDTc=)
3: 78KScp2LVWw2hOVmr_h_Gkcv34A.roa (hash: Ptq/z1pA4OnP8t08S5vn7Az3pzr/nZN/5vkEHzVtW1s=)
4: GhEBs7fMOUU2KjePNnbULHKRHoA.roa (hash: Dow24ARSNfhxgpUv5NrsgvZFPFxhNN0Fkn5hgDvl4wg=)
5: H9Yj6XrfYViqOy5X6VeUZJTi5tI.roa (hash: 4orcq82HkX9/XUoOT4IA7nH/E15MI2gX+xqdM0ifFYg=)
6: VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.crl (hash: HGsWK5898uqi9/XJtcl+M4I2OJpvKyi48n/RGOQZ+O4=)
7: tkuxtWzbusmwWQub2z4rjkdwXdc.roa (hash: JTVZbUmozTnvdMYKVuksSNIaPHfDAOZ4PEG/FbAO7wg=)
8: wPqYVNKJADvVgGucnETD7HuiSvs.roa (hash: 0eyTJy9gG8F8Xex/RtpsLoJCxS1EJ4y1hxoKVvkvOZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:33:a3:68:1d:cf:c8:e6:02:d5:cc:41:db:9a:da:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57130f799f8a8985502a2ea3356037674085cfca
Validity
Not Before: Jun 29 01:00:58 2025 GMT
Not After : Jun 30 01:00:58 2025 GMT
Subject: CN=5d2a694807eca3dae7fc88db4e7ebb89c4e17ef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e8:d8:71:f0:ca:6b:0e:b0:db:74:0b:8a:80:
a5:46:db:5c:36:3a:09:78:52:69:05:88:da:39:65:
2d:fc:d8:a6:00:05:a5:f9:15:19:26:b5:d7:a8:08:
00:ef:24:72:64:5e:ee:ad:4b:b0:12:7c:3d:af:98:
fa:93:b9:2a:d8:12:08:46:3b:06:5a:42:a7:76:88:
d2:35:bf:89:58:6e:1c:4b:38:4f:c5:c6:cb:68:3e:
35:3c:97:43:c0:1f:e1:7b:9c:0d:07:84:22:5d:d3:
e7:71:d5:f9:f5:e1:90:d9:d5:ec:bb:2a:f1:81:17:
53:9a:fa:52:45:23:0f:5a:c1:be:17:2b:40:d8:d4:
a0:77:a1:64:c7:39:4a:31:4d:b8:f4:9c:b9:59:b7:
b6:54:3d:75:3c:87:98:75:5c:ba:c1:6b:66:b9:82:
e4:19:b0:06:a6:0c:f9:80:0e:ff:2e:f5:47:65:39:
e7:db:58:c4:a3:ee:f0:28:66:d8:ab:43:ad:96:82:
30:32:20:c3:6d:fb:28:22:a8:51:c1:a8:1e:b8:05:
a7:86:c6:36:5c:51:fd:fd:fc:26:72:91:76:d0:64:
4a:a7:57:4e:3a:97:ac:96:6d:8f:41:82:ca:72:e6:
62:55:a6:a8:c0:4e:8b:8a:dc:13:d4:5f:f2:b6:88:
81:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:2A:69:48:07:EC:A3:DA:E7:FC:88:DB:4E:7E:BB:89:C4:E1:7E:F9
X509v3 Authority Key Identifier:
keyid:57:13:0F:79:9F:8A:89:85:50:2A:2E:A3:35:60:37:67:40:85:CF:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:e9:fe:97:29:97:54:18:9e:18:70:d5:49:6c:87:07:b6:7d:
ae:d4:c6:90:f7:bc:df:79:13:d9:f7:c7:5d:27:43:50:17:b7:
d1:c9:2d:f5:63:16:72:90:85:60:3d:d1:7f:b6:03:14:81:88:
48:f7:49:be:12:d4:55:31:6a:c5:ec:6c:97:a6:0d:c6:9e:1f:
fe:41:4c:9b:b2:e6:5d:ea:0f:4b:f0:8a:0b:fd:75:6c:33:07:
32:2e:bd:fe:2f:ba:50:5b:40:42:85:9c:1c:a9:5f:57:33:f1:
14:7f:c8:26:5d:45:97:ba:70:44:33:6d:f1:6b:c8:a3:50:09:
ba:7c:0d:a7:67:bf:7b:30:a5:bd:1a:b8:83:dd:04:a3:69:85:
7b:56:bc:37:7a:64:e7:df:d0:19:a6:60:68:a0:e9:d5:24:1d:
2a:1e:64:d4:40:23:17:78:91:10:23:86:67:d6:06:0a:34:1f:
16:a9:57:5d:dc:5c:08:50:dd:c1:f1:b4:42:bd:c1:95:8f:84:
6b:fa:10:f2:d1:7a:d6:fc:76:64:24:64:0d:46:79:9e:04:8b:
02:e6:71:ef:14:e7:eb:92:41:46:cd:ea:22:3a:84:43:72:98:
4e:33:4d:17:c4:b1:e2:e6:45:db:84:ad:e9:fa:cc:23:c2:19:
08:8c:b3:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:40:28 2025 by rpki-client