Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft
File: VChf_ulzEsUcOoBf-TQOvsM1JyA.mft (raw, json)
Hash identifier: Cd75zAt7IojVv7Gb4/Da4edpQ9qiNrWS2NNLxrBKtv0=
Subject key identifier: 89:5D:ED:DD:AE:EE:88:62:11:6B:D4:24:8D:D2:44:5C:03:E9:20:26
Authority key identifier: 54:28:5F:FE:E9:73:12:C5:1C:3A:80:5F:F9:34:0E:BE:C3:35:27:20
Certificate issuer: /CN=54285ffee97312c51c3a805ff9340ebec3352720
Certificate serial: 01977865EE720A958B47D5669D632E9DD96F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VChf_ulzEsUcOoBf-TQOvsM1JyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft
Manifest number: 1595
Signing time: Mon 16 Jun 2025 11:00:35 +0000
Manifest this update: Mon 16 Jun 2025 11:00:35 +0000
Manifest next update: Tue 17 Jun 2025 11:00:35 +0000
Files and hashes: 1: Ca-8iz_zQCrKysmx5A1KTglY5iE.roa (hash: QQcsgeeci4CpJE1THj53EE0/b4qFL4RDwyCbpu7M9gI=)
2: VChf_ulzEsUcOoBf-TQOvsM1JyA.crl (hash: 0r7I/K+3GWNDfDaSXtlpUyiRrtLIH3O8vdyNlhjdjpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VChf_ulzEsUcOoBf-TQOvsM1JyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:65:ee:72:0a:95:8b:47:d5:66:9d:63:2e:9d:d9:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54285ffee97312c51c3a805ff9340ebec3352720
Validity
Not Before: Jun 16 11:00:35 2025 GMT
Not After : Jun 17 11:00:35 2025 GMT
Subject: CN=895dedddaeee8862116bd4248dd2445c03e92026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:79:05:8c:ca:5d:1e:cb:ac:57:35:91:27:45:
fa:36:ab:11:e9:64:1a:10:c7:85:8f:1a:81:a7:0e:
86:17:8d:b4:5a:66:00:8c:a0:55:1e:69:ab:19:ba:
ac:14:eb:fb:da:c8:e5:4a:bd:5e:b7:0c:78:60:12:
76:c3:92:64:08:75:fb:ec:92:e0:62:7f:17:e0:42:
8d:c7:95:d2:c3:ff:25:65:a6:22:84:19:e2:84:f3:
9c:f0:83:15:ed:c5:c0:78:b7:16:c9:1e:d3:1e:35:
67:9f:47:22:20:79:ce:f0:ae:68:31:a1:8b:25:61:
24:c6:de:fa:d2:0e:1b:99:94:81:58:61:7c:7d:74:
e8:54:8f:68:3b:93:ab:8a:14:d0:33:50:ca:98:b7:
fd:cf:e6:59:0d:ae:7d:2f:42:d3:b5:c0:3f:5f:e7:
30:6e:f0:35:cd:ac:a8:a6:bf:d3:fe:3d:ef:54:7c:
f5:76:4e:40:ec:dd:10:74:5d:05:63:1a:18:47:84:
4c:91:26:a4:92:8f:ae:8e:91:9f:ca:af:23:a1:a6:
ba:03:c1:fe:c4:f2:a8:04:88:ba:f4:9e:8b:fe:69:
48:72:5b:cc:f7:95:dc:51:ac:ca:52:d1:53:fc:54:
e2:34:a4:f8:8f:aa:75:22:e0:45:a6:39:d2:e5:68:
dd:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:5D:ED:DD:AE:EE:88:62:11:6B:D4:24:8D:D2:44:5C:03:E9:20:26
X509v3 Authority Key Identifier:
keyid:54:28:5F:FE:E9:73:12:C5:1C:3A:80:5F:F9:34:0E:BE:C3:35:27:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VChf_ulzEsUcOoBf-TQOvsM1JyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:db:29:91:7b:47:08:ba:c8:3d:d7:ca:5c:2a:34:55:d8:21:
43:05:27:1c:a6:8f:ac:6a:21:91:bf:25:cf:81:23:9d:96:50:
2a:34:de:b1:15:bc:a0:fa:e4:54:b0:e6:ba:7e:6a:6d:39:d0:
31:b8:49:2a:98:d3:f8:fa:95:0e:dd:98:a0:b6:a6:50:11:ce:
d9:5f:3e:7b:13:aa:da:1a:14:70:4a:7b:38:72:8e:c1:ca:f7:
db:a2:ae:27:dd:a5:17:88:28:9a:48:df:3c:0e:c1:a6:66:92:
5a:44:f2:0f:e4:88:21:3b:10:95:48:e3:65:1c:55:09:85:6c:
2f:28:29:26:52:3c:f9:33:0d:8b:fa:fb:56:57:f7:62:3d:1e:
49:95:60:3d:43:f9:bc:bb:6c:07:ac:83:71:31:78:20:61:fb:
a7:8b:af:53:c8:54:b2:f3:5f:2e:32:9b:97:e5:21:50:a1:a6:
50:2b:ea:76:1e:cb:98:22:fa:16:3d:91:e1:66:29:ce:07:c2:
00:aa:ff:8b:f3:aa:dc:28:64:75:f2:62:3d:06:da:8a:a0:68:
0f:1a:bc:84:fa:56:ea:60:d6:c6:82:a3:66:93:38:f6:cb:5e:
f6:1f:98:e5:67:5e:44:ed:a7:22:a6:82:db:d0:9f:e0:69:a7:
77:1a:29:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 20:04:36 2025 by rpki-client