Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
File: VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft (raw, json)
Hash identifier: Hfh2SLuZEXz+pe7XJ4mUcjp7UIT2fYTc9f5ixAp+Gj0=
Subject key identifier: 4A:94:53:F1:1F:53:FD:92:88:BF:96:D6:D5:AB:AF:5B:9C:85:89:A3
Authority key identifier: 56:40:13:E3:46:4C:16:CD:85:89:B0:52:02:FB:0F:0C:59:10:DC:A3
Certificate issuer: /CN=564013e3464c16cd8589b05202fb0f0c5910dca3
Certificate serial: 019769977B462E702ACB4897D674144B790A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
Manifest number: 11E9
Signing time: Fri 13 Jun 2025 14:00:24 +0000
Manifest this update: Fri 13 Jun 2025 14:00:24 +0000
Manifest next update: Sat 14 Jun 2025 14:00:24 +0000
Files and hashes: 1: A4Hv6ilbj-Hq-sEQxHCFjnJGPcg.roa (hash: vN/GanH0kropaMl+FMWa5RxvA+BoMIEwdjLhlP/xzOQ=)
2: VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl (hash: T0tNmWWkSa0fZHfjt8ZRfnDaNadDdiqhzkfxSdvbDWw=)
3: WgPDUokIULDOoR23_fynyfvKx_M.roa (hash: NwpkKrEJI8Ok8ZmB6AQ+ABltD2vjaUnrA6fGbqaFIS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:97:7b:46:2e:70:2a:cb:48:97:d6:74:14:4b:79:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=564013e3464c16cd8589b05202fb0f0c5910dca3
Validity
Not Before: Jun 13 14:00:24 2025 GMT
Not After : Jun 14 14:00:24 2025 GMT
Subject: CN=4a9453f11f53fd9288bf96d6d5abaf5b9c8589a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fe:e9:c6:58:d6:49:ff:69:dd:4c:0a:e6:cd:
72:e6:2b:35:e4:df:a7:12:58:05:5d:bb:0b:67:12:
7f:a2:01:96:29:23:0c:97:35:dc:58:3b:e5:dd:23:
08:ad:b3:bf:aa:9a:d5:6f:eb:e7:f1:57:56:94:85:
96:1e:0c:19:e7:24:46:d3:1f:50:9a:a7:a2:ee:0b:
f6:9b:43:ed:ea:71:c9:94:2e:88:a9:f1:72:37:8b:
86:50:91:a4:47:66:ed:3c:c8:5c:ad:08:04:6b:95:
0a:5d:d4:20:94:0d:6f:a2:cd:fc:ee:4e:a2:29:cf:
2d:3d:c5:82:c2:46:1c:6f:7c:e8:5b:9b:47:c8:1f:
eb:1b:69:0e:32:07:f3:fa:f4:cd:38:8d:e4:67:26:
1f:aa:6d:e2:d4:f6:40:ae:12:39:23:7d:2f:17:5f:
30:30:ed:0d:09:32:d8:d7:02:03:34:77:23:7f:a0:
16:6b:78:ed:69:e3:d2:31:e0:ba:af:1e:6d:00:24:
00:93:97:e0:3f:96:dc:3e:96:cb:11:e2:f4:d0:ce:
4a:16:ca:e4:ae:6c:b7:49:64:d3:8e:b7:6c:2e:cc:
c2:7c:32:9c:23:88:49:d1:96:37:81:86:e6:07:31:
0f:b5:8d:2e:ea:77:42:29:43:b2:a4:56:6a:47:9a:
21:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:94:53:F1:1F:53:FD:92:88:BF:96:D6:D5:AB:AF:5B:9C:85:89:A3
X509v3 Authority Key Identifier:
keyid:56:40:13:E3:46:4C:16:CD:85:89:B0:52:02:FB:0F:0C:59:10:DC:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:2e:5a:80:f4:10:39:45:1b:d8:8f:e6:c1:51:c3:53:b0:8f:
43:0b:d8:33:89:e1:51:98:1e:e0:46:29:5d:0f:b0:01:86:9d:
0f:1b:4e:a7:6c:47:66:fa:a4:83:af:a4:29:30:a6:86:1c:31:
dc:c9:50:74:64:28:0a:0c:23:e5:14:d0:ba:9d:e2:6d:d3:32:
55:70:f2:e3:40:a0:0b:12:f0:64:8b:40:5f:fe:90:2f:c0:08:
8e:91:9e:db:06:64:14:5e:0c:43:73:9a:1f:2d:45:be:61:5e:
6e:e6:41:53:29:fd:7a:c9:e3:b0:3d:5c:56:5b:93:51:6b:2b:
37:6f:c5:19:11:55:76:d9:e6:2b:62:f5:1a:e9:e3:76:54:a0:
e1:f2:1b:ad:8b:34:05:52:d8:45:17:5d:d4:50:23:e9:36:95:
39:00:6d:c6:2d:e7:69:e8:72:49:48:49:a1:43:1e:13:5d:14:
a1:9d:ef:30:c1:65:36:29:22:19:9e:31:26:9f:97:7b:8c:07:
90:c6:d2:0c:b0:c9:cf:c1:9c:12:b1:dc:4c:dc:b5:4d:70:3a:
f1:56:20:20:e0:19:c5:4e:68:81:94:13:54:b3:31:3e:bd:38:
d8:42:1a:4e:38:ed:3d:3d:b9:51:f4:ca:17:3e:a8:7d:b0:51:
8d:21:16:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:19:23 2025 by rpki-client