Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.mft
File: VFmECNI871JWD36q1OHbDIYgYsM.mft (raw, json)
Hash identifier: ghX2TMW7NvFc+/5RXdHyu5At2lA+I3QtHDXuCdAptis=
Subject key identifier: 2F:1B:72:08:F3:4C:13:88:09:47:21:F4:BF:F7:AA:F5:65:EC:84:1A
Authority key identifier: 54:59:84:08:D2:3C:EF:52:56:0F:7E:AA:D4:E1:DB:0C:86:20:62:C3
Certificate issuer: /CN=54598408d23cef52560f7eaad4e1db0c862062c3
Certificate serial: 0197B7EA191371FFFDF09E5E97E0976047DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VFmECNI871JWD36q1OHbDIYgYsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 19:01:01 +0000
Manifest this update: Sat 28 Jun 2025 19:01:01 +0000
Manifest next update: Sun 29 Jun 2025 19:01:01 +0000
Files and hashes: 1: 9dTJ-nYACxpnRY5rhOVsQaAIp6o.roa (hash: IImECG5Z8yt26nxcW9N1eIdxFCugxBSzO203A94ADp0=)
2: VFmECNI871JWD36q1OHbDIYgYsM.crl (hash: 7GgnbUVsjJy4humuNudRHW6HYz/cON8RNXu8DRzSe0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VFmECNI871JWD36q1OHbDIYgYsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:19:13:71:ff:fd:f0:9e:5e:97:e0:97:60:47:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54598408d23cef52560f7eaad4e1db0c862062c3
Validity
Not Before: Jun 28 19:01:01 2025 GMT
Not After : Jun 29 19:01:01 2025 GMT
Subject: CN=2f1b7208f34c1388094721f4bff7aaf565ec841a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:31:0e:ed:da:8f:59:75:8a:fa:d0:45:f9:6c:
6b:28:54:41:1b:46:ae:2b:d1:6f:d6:46:37:b5:0f:
08:95:3e:eb:fe:ce:7f:c4:c5:e4:41:e6:07:88:54:
66:eb:6e:86:cf:66:a1:e4:7e:e2:4e:fd:61:7b:95:
00:6d:b0:ab:13:fc:7b:ba:47:4d:cd:10:bd:b9:a4:
38:a1:e8:ae:b5:d0:ca:11:6a:59:51:41:e6:21:7c:
29:a5:ce:d9:e0:b0:c5:d2:59:10:d2:81:74:4f:38:
b6:82:23:a1:9f:fd:3f:ec:55:44:c6:fb:28:52:13:
a8:ec:c7:2d:9e:68:00:0b:fe:a3:3b:3f:aa:0e:cf:
48:4c:2f:98:30:9e:97:14:5c:ef:a4:5c:fc:8b:cc:
f3:8e:63:89:d0:8c:be:91:8c:9c:36:a9:d1:d6:b0:
4e:e0:0a:7d:1b:4d:b1:7f:69:82:5c:b2:cb:ad:66:
e4:a7:35:bb:b3:7d:26:0e:13:39:0a:6f:f4:76:5d:
aa:09:cd:56:3d:6c:e4:15:61:4d:b8:9e:24:de:41:
e5:79:09:e1:14:15:33:41:4d:ed:9e:a1:4d:74:98:
bf:5e:7a:14:5f:d2:e4:6c:d9:f1:90:e7:8a:0f:13:
a5:8f:49:26:4f:09:8b:b9:fa:8d:55:61:fc:46:c9:
5c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:1B:72:08:F3:4C:13:88:09:47:21:F4:BF:F7:AA:F5:65:EC:84:1A
X509v3 Authority Key Identifier:
keyid:54:59:84:08:D2:3C:EF:52:56:0F:7E:AA:D4:E1:DB:0C:86:20:62:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VFmECNI871JWD36q1OHbDIYgYsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:a5:04:01:57:3a:16:0d:a9:93:b2:4f:7e:c2:6b:29:c7:57:
24:a8:55:de:74:94:07:0f:d9:fd:df:a2:bf:3c:af:7d:96:c0:
0f:80:39:fc:e3:cd:94:f1:13:f9:92:49:93:d8:bf:65:66:14:
b1:d1:b9:dc:04:ea:75:4f:c0:9a:e4:77:02:6d:b0:b0:ef:c9:
6b:87:7c:21:fa:c0:46:e0:3d:5e:cc:fc:f6:e7:01:d3:9b:c7:
f9:e2:a6:65:ea:e0:43:55:2a:17:18:21:55:5c:17:78:1d:6c:
46:a8:e3:38:36:5a:6e:e4:9b:68:60:51:12:44:aa:d3:f8:61:
1b:44:fe:6f:44:76:bf:1e:05:8f:66:ba:6e:f8:79:2a:76:dd:
e3:bd:44:e1:98:e7:ae:4c:6b:42:6d:e5:97:53:6e:12:8e:25:
63:28:71:48:36:5c:40:c6:08:f8:bf:4e:ef:fa:51:3e:62:63:
58:cd:ca:f0:d6:7d:65:fb:fa:e5:67:b9:fd:e0:0a:58:ed:e1:
83:cc:1e:d7:a6:26:e8:e1:39:60:b8:89:aa:aa:b5:b6:a2:b9:
90:d0:21:5f:57:5c:c2:ce:75:a6:b0:e1:3d:a7:24:ed:83:4e:
a6:a9:2f:8b:f2:cb:6f:1d:74:fa:e2:ea:6d:8e:c5:ef:e5:0c:
ff:88:bd:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:39:27 2025 by rpki-client