Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft
File: VtZBSGvcmNSn3gkopC19aOYBXzA.mft (raw, json)
Hash identifier: EDhrLIdRO5l4YOiMWnrkwOCgnGWKACY9K5unHzcGq6E=
Subject key identifier: 58:40:79:FF:F6:0F:47:70:36:20:39:C3:2D:B1:7B:43:55:88:CB:74
Authority key identifier: 56:D6:41:48:6B:DC:98:D4:A7:DE:09:28:A4:2D:7D:68:E6:01:5F:30
Certificate issuer: /CN=56d641486bdc98d4a7de0928a42d7d68e6015f30
Certificate serial: 0197B77C3C1C9CCDF12964764DE8938B2D90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft
Manifest number: 02FA
Signing time: Sat 28 Jun 2025 17:01:01 +0000
Manifest this update: Sat 28 Jun 2025 17:01:01 +0000
Manifest next update: Sun 29 Jun 2025 17:01:01 +0000
Files and hashes: 1: VtZBSGvcmNSn3gkopC19aOYBXzA.crl (hash: WWS5O+4PnlFv/7zgvqjqdRZhS7QrT5IR8k3rOsqW8gs=)
2: WUha7UrsdgndZN2i8LKGRI6xHz0.roa (hash: kPsS0TLTx3ZvH9JmthAMYgEGSgO6LHxlTkfSHRuTvZc=)
3: yJKtS7-IfMFF676uwi1M1lOppi8.roa (hash: 5c6Q91xZZ0lbNTEfg6QUTaBPfiO1ZU7duIXicBXBW1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:3c:1c:9c:cd:f1:29:64:76:4d:e8:93:8b:2d:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56d641486bdc98d4a7de0928a42d7d68e6015f30
Validity
Not Before: Jun 28 17:01:01 2025 GMT
Not After : Jun 29 17:01:01 2025 GMT
Subject: CN=584079fff60f4770362039c32db17b435588cb74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d7:55:3b:4a:d3:7c:da:b9:64:24:11:9e:73:
ca:ac:93:2c:ef:b1:94:c1:66:39:21:22:44:de:3a:
f3:3a:cb:c4:ae:43:d0:a7:35:f3:9e:5b:42:11:63:
2e:17:8a:15:9d:0a:77:c6:69:21:71:66:d6:8e:de:
dc:e2:85:a7:91:20:a6:55:d7:ef:de:65:67:65:1f:
ba:76:7f:48:98:10:6c:6b:62:c3:0a:cd:8d:c0:1b:
83:06:63:0d:74:75:0a:7d:08:98:03:86:4a:d9:25:
97:df:04:1f:a1:0f:47:3b:c0:11:30:29:8c:d6:81:
b4:61:fe:73:3f:c7:6c:55:b3:03:b4:5f:b7:36:e7:
4d:01:61:12:eb:ea:53:de:08:19:ce:0b:d7:5e:41:
f8:cb:61:38:4f:8a:8a:13:da:85:2b:b0:c7:14:06:
76:a0:3d:b1:9c:d6:16:22:12:45:f0:a6:ba:9e:a7:
7e:21:66:7e:5f:c8:7f:33:97:94:83:2b:20:f8:4a:
44:e4:d6:d8:ff:df:dc:82:fb:bc:b2:6c:9f:95:83:
91:4b:ae:c5:e6:d5:34:21:78:e7:ce:06:df:bb:c4:
30:fd:aa:7f:e8:8f:de:cc:3f:92:1c:b0:e2:5c:37:
83:1a:95:27:86:f7:82:fd:87:69:14:f5:c5:c2:fa:
4e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:40:79:FF:F6:0F:47:70:36:20:39:C3:2D:B1:7B:43:55:88:CB:74
X509v3 Authority Key Identifier:
keyid:56:D6:41:48:6B:DC:98:D4:A7:DE:09:28:A4:2D:7D:68:E6:01:5F:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:23:15:12:60:c4:6f:a2:d1:e7:9e:30:37:39:eb:77:c6:2d:
c5:b4:e4:fe:a3:3e:f9:0d:d3:4f:c4:5e:62:e5:0b:0b:ec:0b:
67:cc:30:8d:11:d5:84:d3:a1:0c:5d:6a:2d:e8:23:96:45:53:
d8:5d:fb:cc:c3:55:96:cf:c4:0b:6c:83:43:6e:31:e6:13:f7:
91:d7:ea:cf:71:94:f8:25:92:06:37:b4:2d:71:32:d5:fd:ea:
06:81:98:44:d9:de:e9:26:35:2f:38:08:ae:21:16:6b:66:65:
da:ce:1c:e2:b2:24:5d:f8:5d:6d:8b:3f:2d:ff:29:7e:23:86:
08:f7:17:ba:3b:40:83:40:7c:86:b4:94:f2:69:0c:0f:e4:ae:
8f:fe:7e:90:fe:d9:4d:51:b8:bc:d2:ef:b8:e0:cd:28:d4:00:
e7:37:e0:6e:bc:15:73:bf:ac:45:94:41:ad:4f:7b:a2:29:ad:
84:84:f6:a5:9d:50:54:d0:1e:cf:83:d6:4f:05:10:c6:cb:71:
5f:14:14:4d:7a:79:b3:e3:fe:82:10:81:73:80:13:1d:f6:9c:
00:4b:3e:fc:13:3f:a4:f6:28:99:b8:3c:83:b1:ca:f5:a5:e9:
e1:d9:b8:51:78:94:12:5c:4e:40:53:a6:de:be:97:56:a5:de:
d8:63:91:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:30:07 2025 by rpki-client