Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft
File: VSyaHJxP95PoiL1YPcqYFcxFdMA.mft (raw, json)
Hash identifier: 0+HSe8MrXua5d6EImDxA9hC91SbkitEMUHeddCBCqoc=
Subject key identifier: AF:2F:67:18:A8:45:02:46:A5:2B:13:DD:DC:E4:FD:EC:C3:0E:B0:66
Authority key identifier: 55:2C:9A:1C:9C:4F:F7:93:E8:88:BD:58:3D:CA:98:15:CC:45:74:C0
Certificate issuer: /CN=552c9a1c9c4ff793e888bd583dca9815cc4574c0
Certificate serial: 01976F631BCC5A69F83B2FA93213C8ED4503
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSyaHJxP95PoiL1YPcqYFcxFdMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft
Manifest number: 1521
Signing time: Sat 14 Jun 2025 17:00:55 +0000
Manifest this update: Sat 14 Jun 2025 17:00:55 +0000
Manifest next update: Sun 15 Jun 2025 17:00:55 +0000
Files and hashes: 1: OY4UYP6MQJjL7Sxg2gh9CE4T1RE.roa (hash: ZrfsE/pEoCJELDNN+z7XrdVrqnmY0w2a+56TbedDcbs=)
2: VSyaHJxP95PoiL1YPcqYFcxFdMA.crl (hash: tHpOyLa0t/Sa6j/rlcuqj2+UV4upV1FQp+aNCJXO8pQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VSyaHJxP95PoiL1YPcqYFcxFdMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:63:1b:cc:5a:69:f8:3b:2f:a9:32:13:c8:ed:45:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552c9a1c9c4ff793e888bd583dca9815cc4574c0
Validity
Not Before: Jun 14 17:00:55 2025 GMT
Not After : Jun 15 17:00:55 2025 GMT
Subject: CN=af2f6718a8450246a52b13dddce4fdecc30eb066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6d:76:08:62:c4:9e:f5:a2:4d:8e:78:79:e2:
6a:50:0d:da:80:63:d8:86:87:18:f8:7e:08:7d:f4:
1c:c3:3b:ad:b0:c9:d0:e8:32:b6:6f:3f:e0:d1:e1:
dc:3f:26:68:84:28:d7:ed:42:c3:9b:1f:2f:0a:0d:
f0:d2:ab:b7:63:53:7d:0f:9d:6a:49:42:f0:08:92:
64:8f:91:b3:8d:5b:e4:bf:26:77:f0:f3:c6:75:6d:
c3:ab:aa:06:79:94:09:cc:ab:47:74:06:cf:a9:e9:
47:09:17:35:da:02:bf:bc:7f:dd:fd:e0:ec:a2:31:
f9:05:a7:b5:63:f1:30:a8:95:23:15:a4:43:fa:5e:
a6:fa:64:7b:a0:5c:7a:e6:86:8d:6a:22:16:89:aa:
fc:4d:1d:4a:f5:4d:5b:dd:bd:df:ed:39:e3:bd:32:
38:f8:20:67:ec:0a:89:43:66:b9:92:64:17:48:eb:
e0:e0:51:4d:18:09:a6:8d:a9:a3:8b:6f:6b:c8:11:
ed:c1:4e:30:32:db:22:1f:2a:56:32:cd:51:68:7e:
24:5c:b2:7a:46:a7:53:f3:f1:75:b9:99:0f:b2:85:
23:34:04:a4:91:be:2e:71:c9:3a:56:44:f7:74:65:
e7:26:71:b3:3e:d6:f8:5b:ef:fa:3a:a2:7d:f6:e0:
e5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:2F:67:18:A8:45:02:46:A5:2B:13:DD:DC:E4:FD:EC:C3:0E:B0:66
X509v3 Authority Key Identifier:
keyid:55:2C:9A:1C:9C:4F:F7:93:E8:88:BD:58:3D:CA:98:15:CC:45:74:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSyaHJxP95PoiL1YPcqYFcxFdMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:93:a3:d6:3f:48:e5:b8:77:69:e6:46:fa:cb:e7:5f:f1:b4:
5e:39:e3:07:57:07:f0:94:a2:ae:ca:ab:c0:cb:16:87:e7:bd:
48:8d:0b:9e:2a:53:3a:ab:2e:a4:62:21:f8:ba:95:2b:4e:e7:
4e:a4:7d:ee:d1:11:d0:d9:2b:27:29:ae:6b:36:39:f4:06:59:
8f:78:0a:17:55:0b:b4:34:77:32:12:3a:15:b1:90:35:fc:ff:
e5:7a:c9:6e:40:b8:d1:c1:43:50:5b:9d:c5:8c:f2:8c:48:a5:
aa:58:19:98:fb:e5:68:86:b9:67:7f:ef:da:d5:52:38:93:bd:
ec:a2:80:b7:50:16:3d:b2:33:0b:e6:d8:29:b2:77:69:2b:29:
ae:c5:77:9b:e5:8b:4e:4b:fa:e2:a0:65:94:9e:16:04:1a:9d:
70:06:4d:48:a5:6e:e7:f2:a5:33:cc:23:cf:20:b2:57:4e:46:
a1:c3:87:cc:24:88:89:8c:9c:14:ab:77:c2:30:d6:d0:5f:93:
a1:62:84:e0:2b:10:87:44:75:99:15:e4:f5:1e:27:36:52:1a:
b8:80:1a:12:41:cc:eb:34:b4:58:81:a8:9a:2e:b5:e1:5a:b4:
cc:6b:57:94:f2:1e:38:84:f0:56:5e:64:fb:25:9a:53:5f:85:
fa:13:ee:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:57:57 2025 by rpki-client