Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/b37216-3ea6-4f90-983b-09c8148bd23f/1/VZcyBKNpaAWG3if5RvyBZlYyqoM.mft
File: VZcyBKNpaAWG3if5RvyBZlYyqoM.mft (raw, json)
Hash identifier: h4RS7vnUfvsXJkKAlI3IiahAAm30F4lsv6dACMi9sZY=
Subject key identifier: FB:84:F9:F8:6E:06:26:98:98:F1:06:84:47:F2:CC:84:C1:47:35:1A
Authority key identifier: 55:97:32:04:A3:69:68:05:86:DE:27:F9:46:FC:81:66:56:32:AA:83
Certificate issuer: /CN=55973204a369680586de27f946fc81665632aa83
Certificate serial: 0197B6D78D7778638D17E307999EDD55E65A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZcyBKNpaAWG3if5RvyBZlYyqoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/b37216-3ea6-4f90-983b-09c8148bd23f/1/VZcyBKNpaAWG3if5RvyBZlYyqoM.mft
Manifest number: D5
Signing time: Sat 28 Jun 2025 14:01:09 +0000
Manifest this update: Sat 28 Jun 2025 14:01:09 +0000
Manifest next update: Sun 29 Jun 2025 14:01:09 +0000
Files and hashes: 1: VZcyBKNpaAWG3if5RvyBZlYyqoM.crl (hash: /wLHs7TUvwD7KYYoaDY+B+tnx8XFoQ7tPGqo8oVbC04=)
2: mSTn9O6BnESLT6h3yoW1YArpQb4.roa (hash: 7y3jZgmc8JKyp1pmRABgyXmd8BIDMBzt7/dcJJXvkSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/b37216-3ea6-4f90-983b-09c8148bd23f/1/VZcyBKNpaAWG3if5RvyBZlYyqoM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/b37216-3ea6-4f90-983b-09c8148bd23f/1/VZcyBKNpaAWG3if5RvyBZlYyqoM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VZcyBKNpaAWG3if5RvyBZlYyqoM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:8d:77:78:63:8d:17:e3:07:99:9e:dd:55:e6:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55973204a369680586de27f946fc81665632aa83
Validity
Not Before: Jun 28 14:01:09 2025 GMT
Not After : Jun 29 14:01:09 2025 GMT
Subject: CN=fb84f9f86e06269898f1068447f2cc84c147351a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3f:ac:df:73:99:bd:66:0e:de:9c:7f:ac:2d:
aa:2a:ae:96:c7:6b:20:06:d9:66:1f:06:bc:90:11:
ae:3a:46:8a:8a:d5:6b:0e:83:12:10:94:24:df:f4:
33:c4:31:e1:6e:92:5c:a3:c5:9b:11:b3:25:2d:5f:
77:d3:e1:93:22:72:22:50:76:20:64:12:47:8e:07:
fb:91:67:87:a1:69:f6:27:7d:6d:2c:df:3b:75:c9:
83:fb:e8:c6:2b:18:f5:ac:d0:88:b1:b5:05:46:25:
6f:58:04:24:02:dc:e4:e5:78:de:58:2a:19:83:45:
dd:cc:52:b2:72:dc:d0:b5:65:ee:38:93:e1:a7:30:
55:be:47:fe:36:00:8f:8e:3a:40:0a:76:cd:aa:ba:
7a:af:0d:53:52:24:17:ef:83:2c:19:56:b8:19:92:
46:ff:53:38:72:03:78:18:e9:f0:a5:e0:9b:e8:a7:
b5:16:f1:f4:56:03:3d:b7:3b:72:12:2b:8a:a0:21:
95:07:d2:01:ff:c0:86:c9:cb:86:77:57:c2:2b:98:
0c:90:a8:0b:38:c4:fc:96:97:9a:42:30:4e:46:1c:
e7:ce:d5:b2:91:6e:47:27:28:45:ec:a8:67:ac:7c:
73:f4:5e:6c:0d:dc:9a:ba:b9:f1:90:d8:9f:37:ad:
13:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:84:F9:F8:6E:06:26:98:98:F1:06:84:47:F2:CC:84:C1:47:35:1A
X509v3 Authority Key Identifier:
keyid:55:97:32:04:A3:69:68:05:86:DE:27:F9:46:FC:81:66:56:32:AA:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZcyBKNpaAWG3if5RvyBZlYyqoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b37216-3ea6-4f90-983b-09c8148bd23f/1/VZcyBKNpaAWG3if5RvyBZlYyqoM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b37216-3ea6-4f90-983b-09c8148bd23f/1/VZcyBKNpaAWG3if5RvyBZlYyqoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:3b:f1:d6:ca:8d:a6:ee:9d:7a:90:cb:84:dc:ea:c5:e4:20:
72:d2:af:77:63:d9:ca:f9:ad:66:1c:39:ab:7d:bc:59:08:95:
f3:8c:b3:ec:0d:9c:49:3d:91:72:b2:6e:0c:30:88:b2:cf:14:
2e:ac:8d:34:a6:d5:c0:bf:c0:39:b0:98:e5:2d:4f:54:05:a2:
10:b6:2b:28:9c:e8:86:5c:6c:62:92:0c:d4:9b:bf:86:46:0b:
05:b8:83:4f:7e:88:f3:b6:23:b7:32:54:18:75:12:54:a9:45:
9a:13:29:00:a6:08:ba:41:57:90:58:ee:d6:df:de:8a:6c:a2:
49:93:6d:38:e0:fa:71:96:e4:9f:ff:0d:b4:c2:b5:b9:94:86:
17:b6:f6:e4:01:c3:c3:6e:04:70:64:86:f7:39:e3:54:e4:67:
dc:4c:6e:c7:5a:f3:2a:1b:e3:75:e9:d8:9e:76:1a:c9:84:6a:
5d:54:a0:da:e5:c1:33:5c:ee:cc:b4:ab:b4:99:11:4c:19:2e:
9e:48:18:c9:7f:b2:6c:8a:4f:6d:51:cb:4f:38:bd:9f:c0:d0:
b5:e4:60:93:7e:c6:69:5c:b5:9f:cc:20:68:b1:c0:1d:1b:e3:
cb:2d:cb:49:99:78:16:55:08:46:ea:58:a8:93:01:ea:fd:48:
c5:61:5c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:52:21 2025 by rpki-client