Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft
File: VDxcNKYv--2PwPDsAbQsDFDufvc.mft (raw, json)
Hash identifier: 8+Uu8RG1lcXdYqWeIjcMYvgPB1mnAmYMY/+ceEcaIXw=
Subject key identifier: D4:FB:04:C8:35:CC:B2:2F:A2:FB:E5:9D:F4:32:E8:00:3B:21:96:E3
Authority key identifier: 54:3C:5C:34:A6:2F:FB:ED:8F:C0:F0:EC:01:B4:2C:0C:50:EE:7E:F7
Certificate issuer: /CN=543c5c34a62ffbed8fc0f0ec01b42c0c50ee7ef7
Certificate serial: 0197B632DCB36D7360A0575ABD1ACE778AE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft
Manifest number: 07CC
Signing time: Sat 28 Jun 2025 11:01:15 +0000
Manifest this update: Sat 28 Jun 2025 11:01:15 +0000
Manifest next update: Sun 29 Jun 2025 11:01:15 +0000
Files and hashes: 1: 3OLIMizXOJwfjWRWiEBjpUKJwIU.roa (hash: QMFZT0i3XGS+MsKzCsZOmKPi7vfVCyuG5tTyqhdATNA=)
2: PVF7wnGzCTMj-DMi0Yh7tJoQV50.roa (hash: ifNzodbn64RIKDxyUKgvxQYTPT/TGzAFj9xlomWoMYM=)
3: VDxcNKYv--2PwPDsAbQsDFDufvc.crl (hash: QYsV8H7bojSDCC3VysVFLBYpgrignyjeMv/v/6kyFYA=)
4: aP1xgGw8H7jCOI-VSZ01nj8-4CM.roa (hash: tc+u6WTs4frUnC9+3IttTv0/u7Rmmf/DRJCt109dDEg=)
5: egWiNnqY9Vl0Wup08EirG2JX11M.roa (hash: cdwWkaZBw0jnB5ddN/k9GlCFftOqTidrPnaELenZvX8=)
6: lSBrUQBEKuTSY6AdNT1ZVvcTRx8.roa (hash: G+WOXA6z8Ino3VGaelG9h3UW5mZBPuWh+ANhGCA7MB0=)
7: tRNUe3Kk3eWia8VX_dKXZILdgjE.roa (hash: JStwVDR6ukqM/F9+GpHeAO0i8HlEBKkQBbaoGUyV6eY=)
8: y56Nfh76gjyCOcGtBhnizTX0loY.roa (hash: dmNc2ZsuWYEatVtEk4lt6dGr12Zbm0hnX7vLaFN6FWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:dc:b3:6d:73:60:a0:57:5a:bd:1a:ce:77:8a:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543c5c34a62ffbed8fc0f0ec01b42c0c50ee7ef7
Validity
Not Before: Jun 28 11:01:15 2025 GMT
Not After : Jun 29 11:01:15 2025 GMT
Subject: CN=d4fb04c835ccb22fa2fbe59df432e8003b2196e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:50:20:7f:a4:60:00:be:4a:dd:81:14:ff:b5:
6d:cb:28:3e:30:10:3b:a5:21:3d:ad:d3:cd:72:16:
02:50:a3:a7:fa:ed:bb:5e:65:8f:66:90:1b:86:2c:
a3:92:56:f5:81:57:72:87:60:cd:89:7f:3b:47:30:
73:9d:85:eb:6c:dc:9e:41:56:9f:78:43:b1:02:26:
6b:b3:cb:cd:f2:6b:88:09:20:7c:eb:19:14:25:39:
2a:e9:f1:1f:c9:01:60:12:f9:b7:09:83:0c:89:36:
73:6d:7b:e1:e7:34:37:08:95:d6:d5:3d:8e:a3:53:
28:2b:8b:8f:30:92:99:1f:5a:d7:ee:70:57:a5:a8:
83:3b:6c:91:4a:b3:d6:9f:32:b3:8c:ad:6d:9c:86:
83:86:b6:3d:ad:67:15:52:5f:cb:8b:aa:1d:e6:24:
d6:37:5d:59:20:d1:0b:cf:8a:2e:de:ce:01:e2:33:
35:f0:f7:77:20:e3:64:e8:92:62:a0:c9:0f:6c:6a:
ee:6c:ba:f0:c6:c8:13:19:0c:bc:9d:75:17:b1:5c:
0c:42:8f:79:cd:0c:ca:f1:75:2d:8c:bb:36:1d:c8:
a4:13:33:69:56:f1:dc:f8:73:74:f6:68:24:12:3d:
97:5d:31:68:67:26:17:15:23:94:ba:64:a6:8f:89:
a7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:FB:04:C8:35:CC:B2:2F:A2:FB:E5:9D:F4:32:E8:00:3B:21:96:E3
X509v3 Authority Key Identifier:
keyid:54:3C:5C:34:A6:2F:FB:ED:8F:C0:F0:EC:01:B4:2C:0C:50:EE:7E:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:23:42:f6:1a:5e:ff:cc:e3:e4:70:d3:4f:1e:02:e6:63:09:
58:21:2d:f6:59:65:f7:93:7e:e1:d8:4c:ec:f8:a2:ce:a1:cc:
e6:93:1f:45:a1:f2:62:c9:1e:eb:e4:2e:c4:07:ed:52:e0:5c:
4a:74:1d:9e:82:cf:ec:3c:12:26:d7:4b:87:c0:9d:3a:4a:6b:
b0:cf:ac:b5:13:18:96:ec:0c:f4:9a:1c:03:0f:d2:a2:8c:03:
15:ec:f6:57:6c:c1:29:d7:48:db:32:28:87:0a:cc:47:b2:43:
31:fd:5c:05:2f:c4:39:c0:e6:aa:d4:94:09:54:97:7a:67:8c:
ce:5f:d9:28:21:ef:1a:b2:33:53:1e:22:63:08:40:e4:c5:bd:
dd:be:24:be:5f:e5:d6:81:2d:9c:36:33:9c:1c:a1:87:a8:b1:
65:44:38:40:da:67:5d:c9:74:06:be:4d:7c:8c:9e:b2:3d:01:
60:5d:dc:35:60:b4:48:80:8f:d1:08:80:09:d3:b4:8c:70:08:
f5:c1:6e:c1:23:34:8a:17:c2:17:29:db:6f:ea:9e:1a:1e:6d:
59:c7:b2:0c:35:4f:25:70:a9:06:92:aa:52:02:ae:b3:97:47:
c0:ea:8d:55:13:46:56:70:e0:21:07:a6:a6:24:f6:43:e8:fd:
26:ff:a1:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:42:22 2025 by rpki-client