Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.mft
File: Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.mft (raw, json)
Hash identifier: k0umYQ/UQCUFYompTTDsg/Epr60wenmnLWNwaTXQYBc=
Subject key identifier: E4:7B:7E:AE:AC:2E:38:55:B4:5F:B4:CF:BB:1C:9D:AA:82:63:90:19
Authority key identifier: 56:1C:7C:CC:52:37:67:87:37:40:92:EA:FA:C2:62:3E:05:71:A8:1E
Certificate issuer: /CN=561c7ccc52376787374092eafac2623e0571a81e
Certificate serial: 0197B745115A8BAA1CF0D82DAB9D139ABA41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.mft
Manifest number: 109E
Signing time: Sat 28 Jun 2025 16:00:46 +0000
Manifest this update: Sat 28 Jun 2025 16:00:46 +0000
Manifest next update: Sun 29 Jun 2025 16:00:46 +0000
Files and hashes: 1: HGBJjgjbxKOwS-tzE8qO9Sb0DTk.roa (hash: IycrXxPRq8sHYUqWekjaODjaqQ8VZx13yD5H8Pnu6n8=)
2: Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.crl (hash: YXLZmBVFzUbABqfol5xjVOkpPWclAnpuW/ZHS4CZnXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:11:5a:8b:aa:1c:f0:d8:2d:ab:9d:13:9a:ba:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=561c7ccc52376787374092eafac2623e0571a81e
Validity
Not Before: Jun 28 16:00:46 2025 GMT
Not After : Jun 29 16:00:46 2025 GMT
Subject: CN=e47b7eaeac2e3855b45fb4cfbb1c9daa82639019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:58:b2:cc:1e:aa:d6:2b:32:3f:f4:0f:06:f9:
88:a9:3f:27:4d:41:0a:f5:f5:cd:5f:02:ab:28:fb:
51:32:39:b8:15:80:10:73:1b:de:8b:ac:ba:f3:e6:
e1:6d:ad:c7:b0:9a:a0:c4:1b:33:0f:43:ee:f3:1e:
87:a2:27:23:d5:a3:11:2f:1a:6f:7c:25:e1:48:96:
62:06:6a:38:13:73:b2:8d:78:1b:52:f0:3f:cf:08:
91:3d:ed:c2:83:d4:59:4d:d5:ed:33:b9:f7:81:9f:
cc:e6:89:85:78:05:d7:21:c2:b4:a7:4c:f6:fd:26:
50:f4:e1:5f:cc:a3:54:c7:d3:e9:db:9f:7c:9a:f1:
95:dc:e0:e8:65:ee:7c:4f:05:c8:84:b4:cf:43:bf:
81:d0:39:3d:9d:60:e1:37:0e:ae:4f:3f:e5:8d:b1:
77:02:f0:38:63:f8:51:5d:9b:a0:9e:3c:40:97:33:
49:ec:5a:c4:df:b8:c6:9e:ae:4e:6a:29:1b:48:4f:
79:3f:f4:f6:29:93:bd:25:24:29:44:fc:59:2d:61:
34:37:c1:d8:d4:25:a5:bd:2b:f8:49:d5:0a:89:25:
f8:a2:60:1f:1d:8e:fd:67:7e:74:62:ec:a4:37:8e:
66:99:f2:65:37:da:4a:5a:b3:d4:b2:5d:fd:53:44:
42:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:7B:7E:AE:AC:2E:38:55:B4:5F:B4:CF:BB:1C:9D:AA:82:63:90:19
X509v3 Authority Key Identifier:
keyid:56:1C:7C:CC:52:37:67:87:37:40:92:EA:FA:C2:62:3E:05:71:A8:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:b0:68:85:cb:f7:9f:03:e5:cb:97:27:f9:26:ce:9a:af:11:
9f:ab:91:4c:1e:75:c5:05:e0:d6:b4:8c:1f:cd:70:6d:ae:76:
ab:e2:63:9d:34:10:fd:84:48:f3:42:c9:b7:e6:0e:86:2e:58:
a6:ec:12:b3:20:fd:a0:b4:2d:f0:27:c1:58:1c:43:b5:40:ba:
ad:36:62:96:95:58:ca:dc:c4:8e:ee:7e:86:b5:fe:db:fd:6e:
80:91:16:4d:f9:86:6d:71:96:24:87:5e:f7:6f:84:93:0e:dd:
b3:c1:57:9a:b0:3f:8b:b3:a6:19:62:7c:f6:5b:d5:5c:85:dc:
b7:71:25:7f:33:33:60:85:1e:26:23:03:eb:87:1f:51:04:49:
4b:de:73:67:39:b1:c9:6a:ae:7b:b9:71:4c:af:97:d2:55:df:
a2:b2:e6:74:54:ac:6a:61:30:11:1b:0c:a4:a5:ad:17:bf:73:
73:53:27:00:9d:57:33:46:8b:9e:f6:20:db:b4:9d:99:83:ee:
c1:6a:92:65:e2:5a:1d:3f:6f:c5:a3:4b:44:70:e8:3b:2b:f1:
33:51:53:3b:06:b1:03:40:1a:16:f0:53:09:b4:9d:df:4a:d5:
f7:21:80:1b:bf:22:a5:03:c4:4e:6e:18:81:c6:7c:84:96:94:
7b:43:13:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:35:54 2025 by rpki-client