
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.mft
File: VPQtulHsKDXT5NCj2MSL8yL2vbU.mft (raw, json)
Hash identifier: +Y3CnIA+4XvMf4K18YUyDrZ57WJFhdM0PpdLRbMVKvI=
Subject key identifier: 05:86:10:A9:F8:48:40:12:00:85:B4:14:B3:21:11:A3:EB:2A:4B:E5
Authority key identifier: 54:F4:2D:BA:51:EC:28:35:D3:E4:D0:A3:D8:C4:8B:F3:22:F6:BD:B5
Certificate issuer: /CN=54f42dba51ec2835d3e4d0a3d8c48bf322f6bdb5
Certificate serial: 0197B6A204AA25243A1040EDC03C6A733592
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VPQtulHsKDXT5NCj2MSL8yL2vbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.mft
Manifest number: 0A36
Signing time: Sat 28 Jun 2025 13:02:40 +0000
Manifest this update: Sat 28 Jun 2025 13:02:40 +0000
Manifest next update: Sun 29 Jun 2025 13:02:40 +0000
Files and hashes: 1: VPQtulHsKDXT5NCj2MSL8yL2vbU.crl (hash: xRlJzKDVdA0h9EO8xtdaUBIZDClXDyVH5ebhAJ5q00c=)
2: mUHt0oKQoXS4NriBI7EGKLoM09o.roa (hash: SD6es8T2Vz3P454Q+Wryhaz45Qcvfh6pBeSnz1RWRNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/VPQtulHsKDXT5NCj2MSL8yL2vbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:04:aa:25:24:3a:10:40:ed:c0:3c:6a:73:35:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54f42dba51ec2835d3e4d0a3d8c48bf322f6bdb5
Validity
Not Before: Jun 28 13:02:40 2025 GMT
Not After : Jun 29 13:02:40 2025 GMT
Subject: CN=058610a9f84840120085b414b32111a3eb2a4be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ef:62:66:e9:6b:00:f5:8e:6b:d9:0f:79:c4:
18:87:3a:d2:9a:3c:e1:76:ea:97:b3:cc:b4:e7:2b:
ab:dd:55:2a:a7:38:b2:fa:57:ab:64:21:25:e7:72:
ac:2e:50:81:84:1b:ba:c7:7f:17:0c:30:fd:2f:1b:
66:f9:4a:74:45:6b:d6:5e:bb:8b:c7:eb:62:3a:61:
c3:11:80:04:5d:37:f0:dc:d2:4f:ae:df:e4:0b:3e:
0f:54:8c:f3:49:d6:1d:a4:e7:42:f7:98:71:d8:1b:
8e:82:cc:90:45:f2:07:86:4d:4d:1f:63:f6:2d:09:
9f:25:e8:7f:ac:95:78:9e:ab:f4:07:7e:f7:77:77:
01:ee:0c:4c:60:77:4f:7e:b6:f4:91:5d:dd:0c:25:
cb:be:a2:5c:76:44:93:41:41:56:e0:3c:54:e0:44:
5d:b2:0c:d9:a5:e2:75:1d:2b:2a:b1:cc:4d:51:cf:
e2:5d:c9:18:10:f9:15:6a:26:2d:e2:c9:b6:9f:95:
01:3a:7f:91:74:8b:84:94:36:84:be:09:90:37:fb:
f4:f3:76:48:5a:71:03:4d:15:8d:c5:b3:67:b3:db:
cc:c3:c0:17:1f:3c:77:3a:5c:93:07:85:5b:d7:82:
80:fa:e4:92:54:1f:31:b2:11:ee:af:e3:b1:1b:bd:
89:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:86:10:A9:F8:48:40:12:00:85:B4:14:B3:21:11:A3:EB:2A:4B:E5
X509v3 Authority Key Identifier:
keyid:54:F4:2D:BA:51:EC:28:35:D3:E4:D0:A3:D8:C4:8B:F3:22:F6:BD:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VPQtulHsKDXT5NCj2MSL8yL2vbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:c4:dc:8c:9a:2c:67:4b:9f:53:7e:54:1b:63:03:63:3c:d7:
87:95:22:2a:f2:7d:6f:be:53:24:ff:93:19:a0:82:61:23:4f:
6c:bb:29:3f:ba:74:9d:92:ce:5c:ba:a0:7a:f8:7d:bc:96:3f:
54:00:b5:45:89:e7:8e:50:b9:06:ec:6b:da:ed:ac:7c:02:f5:
c6:7f:17:b4:fb:66:f3:f8:fc:b0:a4:de:df:af:1f:45:5d:55:
20:a8:4a:ab:2b:9f:dd:ca:6e:c2:17:f2:bf:2b:9d:27:26:88:
3f:31:ec:0e:fd:f9:b8:78:39:33:5c:4e:1f:27:a0:8b:43:c8:
09:1d:8b:d5:8a:6b:bb:63:be:34:59:9f:01:6c:88:3e:d4:14:
44:47:0b:09:9d:f7:44:07:a9:0a:52:bf:70:84:e9:02:66:0d:
ea:1b:01:3a:2e:71:17:e7:59:02:ea:b0:28:3f:9f:95:fe:37:
e0:93:f7:c0:79:df:46:1d:01:50:06:f7:27:45:94:68:ce:6f:
b3:a9:3f:73:c4:27:8d:9d:33:8d:47:dc:34:9d:86:3e:77:ac:
43:5a:cb:69:79:2c:5b:af:70:94:73:ce:76:61:69:d8:eb:2b:
6b:0a:bb:b3:dc:6b:9f:17:cd:f7:48:ea:4d:47:3b:57:c1:27:
8e:ee:c3:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:07:29 2025 by rpki-client