
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/d2e8d7-593f-4afb-b6b3-b9d8cfc19cec/1/VFqyo3EuJVakQ0uLrdbEB6VnMSE.mft
File: VFqyo3EuJVakQ0uLrdbEB6VnMSE.mft (raw, json)
Hash identifier: fVn2pdamyY87IHiQCPE0Ra6PrLoboTgsTS8DCP/B7PY=
Subject key identifier: 72:FD:84:82:4B:1D:A2:A6:77:48:EE:0A:E3:9A:E3:88:20:2A:1E:B7
Authority key identifier: 54:5A:B2:A3:71:2E:25:56:A4:43:4B:8B:AD:D6:C4:07:A5:67:31:21
Certificate issuer: /CN=545ab2a3712e2556a4434b8badd6c407a5673121
Certificate serial: 0197B6D79DCA97205E3E72E1A89C7987624F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VFqyo3EuJVakQ0uLrdbEB6VnMSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/d2e8d7-593f-4afb-b6b3-b9d8cfc19cec/1/VFqyo3EuJVakQ0uLrdbEB6VnMSE.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 14:01:13 +0000
Manifest this update: Sat 28 Jun 2025 14:01:13 +0000
Manifest next update: Sun 29 Jun 2025 14:01:13 +0000
Files and hashes: 1: 380YDW07MOVrCK11CLTk18E_sTc.roa (hash: pzHRMdqzu6N1d9SDcGlJcx1JSMXi9O/wGKz1T02CpOQ=)
2: VFqyo3EuJVakQ0uLrdbEB6VnMSE.crl (hash: gWqMm0T5K0M5oBKE6COk/sNcsYt6+f6RWCQvG0XeJts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/d2e8d7-593f-4afb-b6b3-b9d8cfc19cec/1/VFqyo3EuJVakQ0uLrdbEB6VnMSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/d2e8d7-593f-4afb-b6b3-b9d8cfc19cec/1/VFqyo3EuJVakQ0uLrdbEB6VnMSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VFqyo3EuJVakQ0uLrdbEB6VnMSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:9d:ca:97:20:5e:3e:72:e1:a8:9c:79:87:62:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=545ab2a3712e2556a4434b8badd6c407a5673121
Validity
Not Before: Jun 28 14:01:13 2025 GMT
Not After : Jun 29 14:01:13 2025 GMT
Subject: CN=72fd84824b1da2a67748ee0ae39ae388202a1eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:42:f5:2f:e6:d7:47:0a:0e:3f:62:fe:2e:dd:
a9:f2:0d:71:40:7d:7a:28:bc:76:6d:9f:b2:ba:ea:
6e:f6:67:de:bb:c2:94:30:b8:d1:7d:40:7b:78:43:
29:5d:99:2a:33:7a:8e:e3:fe:66:a1:e5:68:8e:7c:
a2:7a:8e:94:96:cf:14:00:2f:83:ab:ff:a4:b8:d3:
53:46:1e:21:3a:25:9e:e6:83:01:23:fc:65:bc:53:
88:58:b5:eb:d1:42:9d:68:c1:52:2b:97:5c:a4:6b:
2a:54:e2:31:36:67:4f:c0:23:a0:75:8d:fd:59:b2:
6d:d8:e7:71:07:d0:22:e3:0d:5e:57:b5:8d:89:56:
9c:d7:4a:88:13:11:45:8f:e7:53:de:81:b2:4c:11:
87:88:d0:05:ef:65:b7:b8:98:bf:6f:68:64:70:ac:
e5:21:c4:e0:b5:a1:26:5e:a5:d1:57:17:fe:4c:72:
11:85:a8:2a:c7:6b:65:66:ed:e0:81:1c:78:0d:3f:
18:de:3e:cb:a3:d1:90:b8:9e:d7:71:09:30:f9:90:
2c:00:12:6d:02:4d:90:31:08:c8:10:e3:c8:8a:27:
07:7c:03:be:f0:e6:1c:37:ed:b8:1b:44:7b:39:4b:
89:2c:bf:be:93:b2:67:a9:17:67:fb:97:ee:e8:27:
82:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:FD:84:82:4B:1D:A2:A6:77:48:EE:0A:E3:9A:E3:88:20:2A:1E:B7
X509v3 Authority Key Identifier:
keyid:54:5A:B2:A3:71:2E:25:56:A4:43:4B:8B:AD:D6:C4:07:A5:67:31:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VFqyo3EuJVakQ0uLrdbEB6VnMSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/d2e8d7-593f-4afb-b6b3-b9d8cfc19cec/1/VFqyo3EuJVakQ0uLrdbEB6VnMSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/d2e8d7-593f-4afb-b6b3-b9d8cfc19cec/1/VFqyo3EuJVakQ0uLrdbEB6VnMSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:86:f7:14:e7:28:3d:91:b7:58:4e:d0:ae:79:54:4c:a7:99:
2d:33:cf:db:db:56:6d:28:bb:74:dc:4d:43:33:93:d1:f7:3a:
0e:e7:53:26:9c:40:c7:1f:07:59:28:d0:2a:49:72:ea:bd:19:
31:5e:c1:c7:1c:41:b0:35:c2:34:bc:7a:6b:f9:e6:c6:89:c3:
71:61:96:ef:0e:b5:94:2c:b7:f9:98:21:82:76:77:cd:b1:ab:
18:60:93:9c:a5:21:42:b6:a1:f4:25:d3:b8:e8:e3:7d:65:5d:
a4:dc:a5:fb:75:f4:1d:b6:15:7a:90:7b:a7:7e:0e:5d:8d:d7:
68:a1:70:32:d5:7e:1d:fc:0e:e5:d6:98:3c:a4:5d:15:c2:45:
e7:5f:2a:d6:c1:46:f2:c2:4b:7e:9e:59:58:9a:13:2f:70:70:
e0:1c:05:7b:0e:b4:4c:7d:58:a8:77:4e:75:52:c5:43:6a:13:
9b:e9:96:6c:9a:67:4e:7b:50:02:03:19:55:de:bb:fa:20:21:
1b:8e:c7:a0:88:0b:dd:d2:47:bb:14:53:63:7d:09:4b:93:b4:
34:08:fb:ec:e3:9e:a4:b9:57:c0:70:63:35:af:1a:c5:9c:ba:
8d:c7:a7:c3:37:21:70:6b:76:85:13:05:e7:4b:3d:ff:50:8e:
e5:8f:d1:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:51:58 2025 by rpki-client