Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft
File: VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft (raw, json)
Hash identifier: TiXIALAsaqOlV1M+RxGo/QfoZybca0c3orypShEuK5Y=
Subject key identifier: 2B:4A:C3:EE:48:14:06:EE:F8:98:0D:23:D0:11:09:FA:AE:B6:31:D6
Authority key identifier: 54:0B:63:D1:9D:86:EA:34:5C:9B:5F:16:93:00:C3:A2:9D:4C:31:C4
Certificate issuer: /CN=540b63d19d86ea345c9b5f169300c3a29d4c31c4
Certificate serial: 0197B9A1C7600A174FA50FE3D3D768EF6B80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAtj0Z2G6jRcm18WkwDDop1MMcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft
Manifest number: 15B7
Signing time: Sun 29 Jun 2025 03:01:16 +0000
Manifest this update: Sun 29 Jun 2025 03:01:16 +0000
Manifest next update: Mon 30 Jun 2025 03:01:16 +0000
Files and hashes: 1: QgsJlqJcTUYG8ULdRGgE3NFD82g.roa (hash: js71yBiScUO+PfDSCeaEzOg8Fh9K6ktXB24Y7dBG/Eo=)
2: VAtj0Z2G6jRcm18WkwDDop1MMcQ.crl (hash: C932cB3EcAaJHgwQNk9yxVu05e9lLEAdWZBQtFUg+nM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAtj0Z2G6jRcm18WkwDDop1MMcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 03:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:c7:60:0a:17:4f:a5:0f:e3:d3:d7:68:ef:6b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=540b63d19d86ea345c9b5f169300c3a29d4c31c4
Validity
Not Before: Jun 29 03:01:16 2025 GMT
Not After : Jun 30 03:01:16 2025 GMT
Subject: CN=2b4ac3ee481406eef8980d23d01109faaeb631d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7b:07:10:af:a3:ec:04:b3:96:94:bc:71:60:
cc:74:9a:93:1b:c5:db:ea:16:1d:69:64:c8:36:95:
d3:11:ab:92:d1:4a:21:85:50:a3:f7:96:41:00:99:
1f:fc:d8:c3:c5:60:19:87:16:8c:1a:23:0a:6e:20:
82:21:ef:7b:8f:dd:ab:7a:e1:25:f9:f1:0d:a6:c1:
4e:3c:73:e8:ad:6a:b8:be:9c:15:40:ff:8d:47:93:
b7:9f:45:cb:77:74:88:94:78:b7:74:7e:7f:f8:29:
c2:35:d6:ed:51:64:1c:e4:5f:4d:34:0f:cd:78:1a:
ff:52:1b:ef:06:19:43:2f:dc:b4:20:32:41:f1:fb:
de:c6:da:a1:07:bf:15:c8:76:e6:69:c8:5b:30:a4:
5e:e7:0e:98:04:39:96:9b:a9:08:9f:ea:0d:f5:98:
3e:bc:40:c4:0e:77:07:4a:f1:cf:bb:88:fd:82:04:
7f:76:07:24:6d:d7:57:e4:68:b5:b4:e9:95:35:88:
0b:9e:15:d9:4c:32:9f:34:b9:be:9a:ba:7a:23:95:
85:28:4a:48:7c:9e:40:6f:c0:37:3b:9b:a8:f1:71:
38:ee:a1:21:13:9f:a0:f4:6b:dd:fe:6d:b0:f2:71:
70:10:46:7c:18:34:8c:55:f1:c6:b4:fe:98:10:32:
fb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:4A:C3:EE:48:14:06:EE:F8:98:0D:23:D0:11:09:FA:AE:B6:31:D6
X509v3 Authority Key Identifier:
keyid:54:0B:63:D1:9D:86:EA:34:5C:9B:5F:16:93:00:C3:A2:9D:4C:31:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAtj0Z2G6jRcm18WkwDDop1MMcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:b8:7d:12:73:86:24:2b:a6:84:6e:26:0b:d7:f9:2b:df:2e:
6a:05:ae:02:0f:2a:e4:01:4b:d3:3e:ee:56:99:16:dc:b3:56:
ce:41:b3:e5:f2:99:aa:84:46:f8:01:30:dd:43:48:6a:c6:0c:
4f:a2:1c:19:21:50:02:47:12:04:80:81:a3:dd:20:61:b1:e5:
67:69:b1:b8:e3:52:4a:a6:39:00:80:61:f2:6d:01:7c:06:10:
4e:a8:bd:d7:8b:10:cb:34:95:20:d3:f6:c3:70:e0:a4:a0:5a:
90:4b:00:b3:ba:9d:1a:20:b1:cb:b3:12:d7:07:53:56:bb:12:
c7:78:9d:1d:3a:d2:b3:5a:38:64:7f:31:62:b2:e9:1a:6a:46:
1e:b3:2c:36:77:90:b3:e1:33:20:3f:77:08:58:9e:a4:56:45:
2b:74:57:28:1c:16:cb:1f:c2:d1:39:02:7b:dd:d0:04:86:c0:
c9:32:43:ca:ae:e9:f2:63:09:3e:9f:71:77:c0:c6:27:47:2e:
e2:9b:1f:3b:18:d2:11:ee:35:62:d9:f5:33:d9:cd:a3:c1:7d:
a2:25:98:af:69:d2:d4:63:d1:4a:e7:f6:75:e8:fe:4a:b0:5a:
a3:55:2d:17:61:2d:5c:37:e2:e5:31:5d:a8:dc:63:c7:cd:d9:
88:95:f5:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:51:24 2025 by rpki-client