Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
File: VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft (raw, json)
Hash identifier: PNZ2u1XKjxgWO3CwiYZ4Tyo0gZ73WH4ReRY9ONqkpt0=
Subject key identifier: 09:01:7E:19:12:07:CE:50:2F:5E:0B:AF:A3:2C:C7:71:73:CF:90:1B
Authority key identifier: 54:A6:C4:6D:7D:90:FE:B4:A7:28:AF:0F:8A:E1:1B:FA:0D:4F:8C:B1
Certificate issuer: /CN=54a6c46d7d90feb4a728af0f8ae11bfa0d4f8cb1
Certificate serial: 0197B70E66E9463CEB0D36C381EB82423FDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
Manifest number: 0902
Signing time: Sat 28 Jun 2025 15:01:03 +0000
Manifest this update: Sat 28 Jun 2025 15:01:03 +0000
Manifest next update: Sun 29 Jun 2025 15:01:03 +0000
Files and hashes: 1: 3wR1X7qeiV3Us_sYJwiLPsDNiag.roa (hash: sVmRoOG1wqqDxd7JOMuBur0va/KN44y5/hVue29WGbc=)
2: VKbEbX2Q_rSnKK8PiuEb-g1PjLE.crl (hash: 2bHesCVDqMWvNUJ/UBaga+b4WRyCvAIragk3Qz7pQWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:66:e9:46:3c:eb:0d:36:c3:81:eb:82:42:3f:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54a6c46d7d90feb4a728af0f8ae11bfa0d4f8cb1
Validity
Not Before: Jun 28 15:01:03 2025 GMT
Not After : Jun 29 15:01:03 2025 GMT
Subject: CN=09017e191207ce502f5e0bafa32cc77173cf901b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:93:6c:af:57:7a:54:0f:ef:7a:91:12:8f:b9:
b9:ea:90:6a:d1:23:10:d2:b9:8f:b7:1b:fd:6f:51:
7f:fb:8e:fb:ee:5c:37:e0:2f:61:f3:07:48:37:17:
de:62:ee:58:fd:67:58:90:67:49:d4:90:3d:05:2c:
77:df:0a:fa:3a:97:45:4b:a8:2f:d8:6d:9e:0e:0e:
7f:33:6a:0c:44:fd:a3:4b:1d:07:da:03:40:67:32:
82:07:2f:fc:d8:ec:95:88:54:13:5e:a3:76:05:4d:
f6:06:d6:ca:d0:48:a4:57:4f:5c:97:2f:07:45:2a:
2f:e9:a9:33:8f:2f:1a:de:cb:3b:09:7b:2f:54:e7:
47:00:4e:6f:3f:e2:09:b7:5b:25:62:44:ef:04:9d:
2b:8c:13:ad:9c:cc:67:b5:cc:7e:7c:8e:59:50:0f:
b3:06:22:3a:bf:90:4f:ed:51:32:1f:64:70:6a:63:
02:71:da:3c:73:57:d0:5e:34:b0:93:89:33:53:d7:
55:b2:17:0d:32:55:10:a6:82:1c:fa:2d:f2:20:3c:
1c:4d:cd:f4:88:7f:c9:14:5c:28:00:c6:d9:08:3c:
5d:be:bf:a0:fd:46:22:10:96:dd:8b:ee:08:af:aa:
45:4d:a9:b4:d1:84:03:bd:7c:65:65:2e:e4:d7:e9:
24:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:01:7E:19:12:07:CE:50:2F:5E:0B:AF:A3:2C:C7:71:73:CF:90:1B
X509v3 Authority Key Identifier:
keyid:54:A6:C4:6D:7D:90:FE:B4:A7:28:AF:0F:8A:E1:1B:FA:0D:4F:8C:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:1f:17:95:6e:fb:5c:6e:56:d2:c3:2c:00:46:b2:8b:e7:38:
a0:33:f0:04:71:26:3c:05:d0:93:20:89:d9:10:f9:79:9c:ea:
0e:3b:3c:db:cb:00:cc:42:1b:b9:46:6c:62:0a:b2:e1:6f:57:
70:05:5d:bb:ce:82:a1:cf:8f:ac:02:35:a8:1c:93:2b:c4:ca:
bc:50:1b:70:76:24:8d:11:8f:4b:bf:b9:fe:d9:ad:45:2d:c8:
5b:77:56:55:03:13:c8:56:b4:1e:65:1e:3a:1f:d3:6e:c8:7f:
70:bc:90:81:a4:80:69:f4:2e:bb:6b:31:61:b8:86:fa:cb:a2:
e0:ed:ad:5d:ed:be:0c:eb:32:7e:f8:a7:36:07:0c:b5:47:5b:
6f:ac:bb:a6:2a:bf:40:3a:a4:62:4e:c2:b1:47:dd:92:cb:fb:
5e:b5:fc:0f:e2:ef:59:f0:43:80:75:84:ba:b2:8b:5a:8c:22:
2d:1b:a5:4e:6f:37:6f:7e:4c:73:2a:97:02:00:bd:57:af:aa:
17:a0:33:f9:bd:43:0c:9c:46:2a:73:16:cb:a1:f3:2c:dd:6d:
17:a5:34:63:fd:75:b3:9c:47:65:cb:5e:5f:f1:ed:69:63:0b:
f6:f2:9e:50:44:50:fe:ca:96:f1:2b:e1:9c:b5:24:9c:35:26:
5e:41:67:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:33:16 2025 by rpki-client