Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c51d08-8575-4bfb-af6e-01889cc03eba/1/VnrJvwvpHgpIZk7ItqZ3CVeiECA.mft
File: VnrJvwvpHgpIZk7ItqZ3CVeiECA.mft (raw, json)
Hash identifier: 5X2xa3KzChTJziDB592xlrIAeUKDUPypnR17Stp7Ak0=
Subject key identifier: 8E:22:14:51:01:32:C3:36:57:26:AD:19:9E:5A:5B:69:06:5C:AF:FD
Authority key identifier: 56:7A:C9:BF:0B:E9:1E:0A:48:66:4E:C8:B6:A6:77:09:57:A2:10:20
Certificate issuer: /CN=567ac9bf0be91e0a48664ec8b6a6770957a21020
Certificate serial: 0197B6A19751DD4E4449AA95A562B9EF08E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VnrJvwvpHgpIZk7ItqZ3CVeiECA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c51d08-8575-4bfb-af6e-01889cc03eba/1/VnrJvwvpHgpIZk7ItqZ3CVeiECA.mft
Manifest number: 077D
Signing time: Sat 28 Jun 2025 13:02:12 +0000
Manifest this update: Sat 28 Jun 2025 13:02:12 +0000
Manifest next update: Sun 29 Jun 2025 13:02:12 +0000
Files and hashes: 1: 2jwJls5Ar4jmarcjJNInWQLllso.roa (hash: LgdCGzIdRce9I75cpLk0D3bK5sO4mVP3fvpXkFLo/bY=)
2: VnrJvwvpHgpIZk7ItqZ3CVeiECA.crl (hash: G0gLRUAAxF6PFNo6O68GEpVS2kdB0cp70yjUGJhr0LI=)
3: fpTc9psmK7mTVjaSZo_0_yvBUR8.roa (hash: UgVFOd+QOH0JwGcBKTwjgIfFrgkGab/yr0muy+SkJYQ=)
4: xMtzp4-tdYsNsJ-wu0ECePe81Q8.roa (hash: gr9W9qCoJ0ynru/M4KfrGWZeR9TrsFz5r0lqSWOfJkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c51d08-8575-4bfb-af6e-01889cc03eba/1/VnrJvwvpHgpIZk7ItqZ3CVeiECA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/c51d08-8575-4bfb-af6e-01889cc03eba/1/VnrJvwvpHgpIZk7ItqZ3CVeiECA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VnrJvwvpHgpIZk7ItqZ3CVeiECA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:97:51:dd:4e:44:49:aa:95:a5:62:b9:ef:08:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=567ac9bf0be91e0a48664ec8b6a6770957a21020
Validity
Not Before: Jun 28 13:02:12 2025 GMT
Not After : Jun 29 13:02:12 2025 GMT
Subject: CN=8e2214510132c3365726ad199e5a5b69065caffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:c4:c5:01:d4:30:e3:00:7f:f7:d6:c1:c6:29:
2a:ba:c3:ae:56:f1:39:b8:aa:4b:61:05:1f:0d:b1:
2c:84:9b:8f:73:39:f8:cc:82:73:37:cb:d1:7d:40:
74:57:c2:03:85:6e:61:40:a6:84:1f:75:7e:dc:e0:
bf:24:60:bb:f3:68:4e:57:a5:7d:da:6f:24:e5:f3:
14:16:0c:d0:0d:76:e2:c4:bc:61:b5:6b:78:49:cc:
5f:92:db:2a:ae:b9:46:01:a9:3c:dd:0d:a1:a7:72:
65:60:ec:d5:0c:a2:13:44:a6:15:40:b2:18:90:f2:
a8:9d:59:68:50:3c:0d:40:24:aa:fc:d4:bf:42:56:
39:53:1d:cb:3c:f7:28:08:a7:62:c6:48:bf:d1:60:
5e:72:f4:4f:d6:96:d0:95:79:de:f7:bd:15:7f:4a:
69:77:99:3b:a9:20:00:32:e6:29:fc:fa:5e:c7:e3:
f1:71:9e:40:06:27:1f:46:28:f4:08:f6:d9:08:7f:
58:4c:7d:79:48:b6:7e:0b:26:40:66:1b:64:0f:e2:
dc:c0:85:aa:01:b0:b4:53:fd:d4:a3:22:64:72:35:
95:53:fc:2a:20:ff:6c:77:f9:f7:21:51:d4:e6:67:
7c:66:e3:32:9e:7b:87:f8:17:cf:a2:48:3a:de:46:
05:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:22:14:51:01:32:C3:36:57:26:AD:19:9E:5A:5B:69:06:5C:AF:FD
X509v3 Authority Key Identifier:
keyid:56:7A:C9:BF:0B:E9:1E:0A:48:66:4E:C8:B6:A6:77:09:57:A2:10:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VnrJvwvpHgpIZk7ItqZ3CVeiECA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c51d08-8575-4bfb-af6e-01889cc03eba/1/VnrJvwvpHgpIZk7ItqZ3CVeiECA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c51d08-8575-4bfb-af6e-01889cc03eba/1/VnrJvwvpHgpIZk7ItqZ3CVeiECA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:b2:08:2f:89:1d:2c:f4:6f:b8:cb:69:1a:06:90:5b:78:0f:
cb:d2:25:97:c1:68:92:26:e1:96:e9:bb:2b:a8:7d:a3:0b:f3:
1d:33:f3:b2:94:d5:98:e0:3f:6c:ed:05:d9:13:e7:15:0e:72:
08:e3:ff:d7:f1:ae:c8:25:04:37:4f:79:b6:45:04:88:fc:59:
08:b7:7c:89:6f:2c:8e:96:f0:d9:72:3a:57:0a:80:f1:0a:62:
42:76:52:57:40:88:26:90:ee:16:ee:e4:50:d4:79:1b:c6:79:
c2:c0:da:b7:ea:38:0b:bf:a3:12:d5:3e:c5:b5:e0:45:61:cd:
3d:9e:92:87:7e:21:da:1b:33:05:2b:5c:d3:ee:ff:2e:78:cc:
71:77:38:a3:f9:ce:c9:0c:a5:cd:dd:f3:6c:24:f6:dc:8e:7c:
b8:c5:7b:03:18:09:10:4a:88:ba:2c:47:64:b1:e5:e9:20:d1:
67:f5:36:71:69:8c:1c:4d:dc:5d:46:7f:67:9d:3b:4b:87:e6:
3f:36:59:72:68:93:d7:fe:ae:68:39:46:f6:54:3e:c7:4a:10:
1a:8f:4c:1a:f4:90:95:34:a5:55:29:de:23:8b:fc:6d:13:43:
49:08:9a:e6:68:6d:c7:e1:a6:53:ab:bc:3a:23:b0:4a:c8:6b:
15:c0:c8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:59:39 2025 by rpki-client