Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/VVDgbuAsWjLlTciYU7SqN4-GBPc.mft
File: VVDgbuAsWjLlTciYU7SqN4-GBPc.mft (raw, json)
Hash identifier: vvb0e8cCsFwWfHo83HedW4Y44bj5SF4RngHnVP77SEU=
Subject key identifier: 30:5E:55:A5:D2:4E:3B:44:B3:E6:0D:F2:89:FA:90:AF:B8:72:32:9E
Authority key identifier: 55:50:E0:6E:E0:2C:5A:32:E5:4D:C8:98:53:B4:AA:37:8F:86:04:F7
Certificate issuer: /CN=5550e06ee02c5a32e54dc89853b4aa378f8604f7
Certificate serial: 0197B6D7B4E300DE996D7048ED2FCDCA9CAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VVDgbuAsWjLlTciYU7SqN4-GBPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/VVDgbuAsWjLlTciYU7SqN4-GBPc.mft
Manifest number: 0AFB
Signing time: Sat 28 Jun 2025 14:01:19 +0000
Manifest this update: Sat 28 Jun 2025 14:01:19 +0000
Manifest next update: Sun 29 Jun 2025 14:01:19 +0000
Files and hashes: 1: 5SQUdjWeY9PdQ3b1GR4L3yx_VJ4.roa (hash: VQXaoCtg+0JbslSnqFe7W7gX+zMPO93yVdM1v7U3tJ8=)
2: MPnVMUDELwRT1_LHbrcJgd4NmwE.roa (hash: +uiYqzvO4MwwXvvIKhlCHsQt5+OwmIQB9Ijy/fYg7A8=)
3: VVDgbuAsWjLlTciYU7SqN4-GBPc.crl (hash: 9HjAUHm7cM8mLbUNxILIUVml1EvOtm9ladxvWARXEH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/VVDgbuAsWjLlTciYU7SqN4-GBPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/VVDgbuAsWjLlTciYU7SqN4-GBPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VVDgbuAsWjLlTciYU7SqN4-GBPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:b4:e3:00:de:99:6d:70:48:ed:2f:cd:ca:9c:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5550e06ee02c5a32e54dc89853b4aa378f8604f7
Validity
Not Before: Jun 28 14:01:19 2025 GMT
Not After : Jun 29 14:01:19 2025 GMT
Subject: CN=305e55a5d24e3b44b3e60df289fa90afb872329e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:37:f2:16:3e:a3:dc:bf:44:64:45:0f:69:a9:
7e:f3:e8:42:9f:56:24:0b:d0:9f:3c:98:58:a1:ef:
27:37:34:4a:a5:0c:15:80:b1:79:ef:d8:d3:ac:aa:
d7:f2:37:3b:73:ff:11:22:7b:5b:af:19:dd:55:89:
cd:a5:ee:4b:80:79:c5:06:fe:40:0a:f3:d5:48:7c:
4b:f6:61:8a:9b:45:27:00:2b:3f:f7:21:67:b6:e8:
0f:ef:3a:fb:2a:1e:34:d5:66:79:f7:48:76:0b:0b:
93:6f:87:eb:57:80:ff:b1:a3:dc:b2:bc:94:56:78:
00:97:5a:0b:e0:ff:94:5f:33:29:3f:ed:8e:53:29:
f6:b9:b2:bd:23:32:3a:68:bc:b3:b2:9a:4d:91:47:
01:05:a3:47:21:77:62:9b:e0:e2:36:4e:0c:ef:26:
31:e9:4d:22:45:ab:5f:51:27:d3:af:62:34:a8:61:
92:9c:7d:93:f5:4c:ed:3c:aa:b5:47:95:8f:6e:8e:
54:d3:f5:c7:0c:6c:79:9c:60:61:af:fc:33:f3:63:
8a:23:46:fa:f9:8b:69:ff:92:03:f0:25:6d:83:b4:
be:2c:e2:79:87:31:99:13:7e:bb:3e:32:8e:1a:ff:
a4:3b:4a:a7:b7:27:64:1f:5c:14:37:ad:e3:cc:13:
e8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:5E:55:A5:D2:4E:3B:44:B3:E6:0D:F2:89:FA:90:AF:B8:72:32:9E
X509v3 Authority Key Identifier:
keyid:55:50:E0:6E:E0:2C:5A:32:E5:4D:C8:98:53:B4:AA:37:8F:86:04:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VVDgbuAsWjLlTciYU7SqN4-GBPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/VVDgbuAsWjLlTciYU7SqN4-GBPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/VVDgbuAsWjLlTciYU7SqN4-GBPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:30:a1:5a:2f:6a:50:cc:97:38:88:e6:ec:fc:65:87:df:b4:
ae:89:a8:07:44:56:8c:48:07:f8:67:f0:93:ab:61:23:56:9d:
d0:b7:52:96:d2:c7:8d:66:42:9e:fa:35:d3:18:62:a9:30:3c:
04:ba:8f:57:0b:9d:e7:20:40:42:f2:8b:79:9f:4a:6b:c9:83:
b0:0e:08:11:73:36:0a:3d:ec:ad:3a:15:cc:af:50:d6:df:62:
4f:7a:bd:05:8e:71:0e:ee:15:ca:72:04:f5:47:40:7b:ca:22:
a4:d0:22:1b:63:e6:b9:f0:c3:60:53:dd:d4:0b:d3:f9:58:0d:
8d:53:d3:d3:3c:b1:6d:8f:28:7f:ab:d2:53:84:fb:51:0c:15:
94:5a:f6:88:c2:b6:8f:bc:64:1a:05:6f:e1:c9:ff:5e:27:b8:
ff:f6:49:ed:2e:28:2a:c7:5e:2f:3e:7c:de:25:bb:bc:ee:44:
36:57:af:04:78:b0:51:cc:b0:30:a2:cf:7b:71:80:78:8f:0b:
d5:4f:51:da:05:bc:f6:f0:9a:12:e5:10:f4:84:72:08:6d:cd:
1d:f3:04:d9:92:18:a0:d8:d8:10:11:73:42:59:c3:68:d7:49:
ad:3f:05:ce:78:28:82:37:3d:f4:21:93:f7:d1:13:81:e6:4f:
da:0e:1f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:43:18 2025 by rpki-client