Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/dd3dd1-09b5-4aa2-aec0-9fb1ce4d720b/1/VFhKIZ9vUGbYSO0quWTaiWbUCio.mft
File: VFhKIZ9vUGbYSO0quWTaiWbUCio.mft (raw, json)
Hash identifier: f6JztqL9wnTk7iPjT9qVnR4cWeaDR/RXC6NQBG0bRgI=
Subject key identifier: 96:A1:CD:FC:2F:BC:10:99:B0:A2:95:C4:A3:5E:92:50:4C:49:81:3B
Authority key identifier: 54:58:4A:21:9F:6F:50:66:D8:48:ED:2A:B9:64:DA:89:66:D4:0A:2A
Certificate issuer: /CN=54584a219f6f5066d848ed2ab964da8966d40a2a
Certificate serial: 01976E50194ACD5340AB810D17950F36C88B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VFhKIZ9vUGbYSO0quWTaiWbUCio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/dd3dd1-09b5-4aa2-aec0-9fb1ce4d720b/1/VFhKIZ9vUGbYSO0quWTaiWbUCio.mft
Manifest number: 1593
Signing time: Sat 14 Jun 2025 12:00:32 +0000
Manifest this update: Sat 14 Jun 2025 12:00:32 +0000
Manifest next update: Sun 15 Jun 2025 12:00:32 +0000
Files and hashes: 1: VFhKIZ9vUGbYSO0quWTaiWbUCio.crl (hash: wboDyAF6UG6D4W3P6O9RDgpk+xS3jJ1nwiGgDN9bB/0=)
2: yO-xzrVzP9w-99d-1MgI3akuEEw.roa (hash: /wfJmKbrJk5HLRMl66b8UyeroQ01b/DROieeTJUHsw8=)
3: ykuZpqMlHSUIWtYa1mPsmyPe9Ho.roa (hash: yZcmu9TrDVEdaIS3LL1L046LUfG1VEvG/7HySIUseIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/dd3dd1-09b5-4aa2-aec0-9fb1ce4d720b/1/VFhKIZ9vUGbYSO0quWTaiWbUCio.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/dd3dd1-09b5-4aa2-aec0-9fb1ce4d720b/1/VFhKIZ9vUGbYSO0quWTaiWbUCio.mft
rsync://rpki.ripe.net/repository/DEFAULT/VFhKIZ9vUGbYSO0quWTaiWbUCio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:50:19:4a:cd:53:40:ab:81:0d:17:95:0f:36:c8:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54584a219f6f5066d848ed2ab964da8966d40a2a
Validity
Not Before: Jun 14 12:00:32 2025 GMT
Not After : Jun 15 12:00:32 2025 GMT
Subject: CN=96a1cdfc2fbc1099b0a295c4a35e92504c49813b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:25:13:b2:78:bc:bd:c3:27:db:6e:c3:39:ac:
22:0a:1a:55:8c:d5:62:c5:44:19:27:39:3f:c9:b7:
9c:e2:23:ae:5f:94:a5:63:b2:12:1f:02:d1:7d:85:
b4:29:03:e3:91:89:ca:82:4a:77:d6:13:69:1e:f7:
21:2c:95:01:dc:7b:8e:1c:9d:af:06:aa:73:7e:78:
75:9b:d1:61:25:c4:5b:53:fb:58:e3:bd:ca:4a:cb:
0c:08:03:7a:4f:de:24:a8:a3:9f:6d:88:96:6a:38:
36:e1:c2:a2:fe:d1:0f:81:02:08:f0:81:f2:78:40:
65:ee:8f:34:91:0f:22:1b:48:db:0f:a0:d4:26:ef:
1e:04:b4:a7:44:f8:fa:a3:20:3a:8e:92:f9:ce:10:
ba:c7:a8:37:35:9a:89:2b:62:c5:76:4c:98:48:c5:
d8:c9:fd:de:db:f9:69:83:e3:9a:26:dc:a4:06:72:
25:be:eb:a4:45:6e:51:ab:f1:29:76:42:a8:f1:8b:
7c:6a:53:bf:e7:d6:61:ed:33:aa:6f:c7:37:a5:03:
9c:13:57:78:84:77:4f:13:2e:c7:42:bc:fe:97:30:
25:d8:17:0f:79:24:ab:25:f1:d9:2a:9d:de:79:98:
22:d4:b9:f7:13:71:38:08:f3:b0:78:99:e9:ef:1b:
fb:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A1:CD:FC:2F:BC:10:99:B0:A2:95:C4:A3:5E:92:50:4C:49:81:3B
X509v3 Authority Key Identifier:
keyid:54:58:4A:21:9F:6F:50:66:D8:48:ED:2A:B9:64:DA:89:66:D4:0A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VFhKIZ9vUGbYSO0quWTaiWbUCio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/dd3dd1-09b5-4aa2-aec0-9fb1ce4d720b/1/VFhKIZ9vUGbYSO0quWTaiWbUCio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/dd3dd1-09b5-4aa2-aec0-9fb1ce4d720b/1/VFhKIZ9vUGbYSO0quWTaiWbUCio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:3b:72:a1:8a:f5:98:55:d7:0a:15:4a:eb:d4:a3:0f:c5:49:
77:62:50:9e:88:0f:06:47:01:71:96:35:ca:60:48:61:1f:dd:
c2:50:03:c1:ac:d6:2b:05:59:7e:b2:a0:a6:cd:c2:70:49:c7:
cc:6b:5e:84:b1:d9:d5:13:e2:28:6d:df:b6:85:2a:d5:be:7c:
fd:17:a7:fc:f6:c0:e0:23:05:ba:23:db:d6:da:e6:34:b6:c1:
b2:75:f3:37:d1:2e:2c:d5:42:4c:19:6a:ea:93:38:ee:1b:51:
4f:a6:6c:88:85:2b:9e:c4:8d:7a:bb:74:98:5d:7d:76:19:66:
1d:2f:48:a4:e0:a5:a0:df:3d:50:76:be:63:58:f8:a1:f8:58:
13:cc:c7:f8:6f:30:f7:7e:cf:f2:b6:8b:e3:cc:89:00:7c:55:
c7:6b:9b:3c:70:23:3a:9a:10:e5:b0:44:08:2a:78:86:ea:1b:
1d:fc:a7:f1:36:cd:f8:fc:6e:bb:5b:02:ed:54:1c:a6:3e:68:
04:e4:2a:a3:11:ca:54:08:b6:38:11:0f:95:bd:21:44:24:2b:
c3:96:13:40:25:32:82:3c:e4:64:95:5f:86:7f:bf:87:a8:a2:
16:54:0e:17:37:93:cc:a5:8f:57:6d:d4:db:89:57:04:2a:d5:
ba:0f:6a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:27:02 2025 by rpki-client