Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/05e994-318d-4a54-b629-173f0096bd85/1/VdBq_SbSUiNCenoNX54xWQY_vKM.mft
File: VdBq_SbSUiNCenoNX54xWQY_vKM.mft (raw, json)
Hash identifier: cM6xijmyrAxxI0Fr78odJ9R161mYcenWuIVQW4Hmbfg=
Subject key identifier: 2B:92:E3:D1:48:60:66:97:89:A1:DF:DE:B4:CB:DF:77:19:73:AB:D1
Authority key identifier: 55:D0:6A:FD:26:D2:52:23:42:7A:7A:0D:5F:9E:31:59:06:3F:BC:A3
Certificate issuer: /CN=55d06afd26d25223427a7a0d5f9e3159063fbca3
Certificate serial: 0197703E8F81A435A5CCB6C564D1F2B91B12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VdBq_SbSUiNCenoNX54xWQY_vKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/05e994-318d-4a54-b629-173f0096bd85/1/VdBq_SbSUiNCenoNX54xWQY_vKM.mft
Manifest number: 0F89
Signing time: Sat 14 Jun 2025 21:00:37 +0000
Manifest this update: Sat 14 Jun 2025 21:00:37 +0000
Manifest next update: Sun 15 Jun 2025 21:00:37 +0000
Files and hashes: 1: LGr3W12gg5B5iAQGS4LlAtKKquM.roa (hash: E6DrGRYtfy1QPOk4PfrfkhjZuBFDW5GfEmSOYSVlg/k=)
2: VdBq_SbSUiNCenoNX54xWQY_vKM.crl (hash: uX0yrON70FcUWhu37OKLlb5Uywizd/mHZlR8QMhTCEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/05e994-318d-4a54-b629-173f0096bd85/1/VdBq_SbSUiNCenoNX54xWQY_vKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/05e994-318d-4a54-b629-173f0096bd85/1/VdBq_SbSUiNCenoNX54xWQY_vKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VdBq_SbSUiNCenoNX54xWQY_vKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:3e:8f:81:a4:35:a5:cc:b6:c5:64:d1:f2:b9:1b:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55d06afd26d25223427a7a0d5f9e3159063fbca3
Validity
Not Before: Jun 14 21:00:37 2025 GMT
Not After : Jun 15 21:00:37 2025 GMT
Subject: CN=2b92e3d14860669789a1dfdeb4cbdf771973abd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fe:3b:fc:bd:7b:4e:3c:a7:7e:0a:99:76:91:
c4:e7:46:d0:33:5c:33:69:8e:a1:5e:31:59:50:dd:
46:21:d8:fe:35:93:e8:29:ed:6a:c4:c0:4e:2e:79:
cc:51:94:bb:87:58:e0:ce:7c:43:fc:26:ff:da:b3:
02:e3:9d:4e:10:d6:3f:8c:d7:93:fd:b3:21:83:1b:
bc:fa:43:47:65:51:a6:2d:01:98:68:77:a2:8f:02:
b5:c0:8d:25:0c:81:fb:d2:46:5a:64:8f:42:5e:5c:
46:3b:e4:92:8a:3b:26:a9:1c:dc:14:c3:b5:68:35:
9b:75:8f:3b:80:9b:7a:49:2c:1f:4d:49:70:cc:75:
f2:56:a3:53:df:8c:62:41:33:7d:f8:29:f9:50:46:
a1:d9:04:ee:2c:08:07:bd:72:54:c1:20:31:38:b9:
f3:f0:dd:e9:11:e1:2a:7c:8c:c8:e0:0f:5f:77:80:
3a:24:9a:ee:d7:b7:95:f0:aa:7e:f4:1c:76:08:84:
b3:35:ef:c5:56:cc:62:0f:de:8d:63:cf:81:50:f2:
15:2e:e4:40:35:37:2a:03:90:1a:36:0e:49:3b:ea:
cb:6b:b4:40:23:3b:92:ba:17:27:e1:ba:ce:0f:f1:
0b:ae:b3:33:47:e2:36:c7:05:fd:35:42:fa:61:0a:
0b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:92:E3:D1:48:60:66:97:89:A1:DF:DE:B4:CB:DF:77:19:73:AB:D1
X509v3 Authority Key Identifier:
keyid:55:D0:6A:FD:26:D2:52:23:42:7A:7A:0D:5F:9E:31:59:06:3F:BC:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VdBq_SbSUiNCenoNX54xWQY_vKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/05e994-318d-4a54-b629-173f0096bd85/1/VdBq_SbSUiNCenoNX54xWQY_vKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/05e994-318d-4a54-b629-173f0096bd85/1/VdBq_SbSUiNCenoNX54xWQY_vKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:9c:cb:d2:03:56:d7:04:3c:9e:bb:96:5b:8c:f9:eb:fe:d1:
0b:e7:f7:0a:d5:47:36:82:68:71:98:4c:ce:2f:aa:23:1e:ab:
ab:70:ff:17:3f:c2:5c:5f:2e:e9:d7:a5:a9:b1:b8:a1:3a:ce:
30:c0:f8:4b:ed:1e:b2:75:5e:dd:09:a7:07:cf:d5:69:cc:3e:
d6:7f:a9:ad:dd:d2:29:6b:94:51:95:09:b7:12:de:cd:5d:33:
69:4c:56:ff:49:7c:54:5d:13:09:89:9a:4c:fd:01:b3:be:b2:
20:75:ba:7e:ea:1a:08:16:65:e0:22:61:7f:06:de:f2:1c:a4:
44:a4:3b:9b:a2:46:2a:a0:a7:b7:fe:47:9a:63:0e:f4:ef:a5:
61:a1:94:af:b3:de:6c:21:89:f3:7c:fe:0f:1e:31:b4:8c:9a:
8f:22:5b:c6:87:8b:93:dc:2c:b0:85:23:48:ec:be:a2:61:18:
f4:6d:37:5a:28:f6:15:a5:7c:d5:2b:8b:aa:ae:75:16:2d:e2:
a0:5b:36:4c:79:26:6a:e1:64:06:17:ef:34:04:75:4d:ea:3c:
93:eb:fd:aa:5d:36:12:bc:63:de:98:9c:3c:d6:be:0b:1a:2d:
32:91:40:65:dd:c8:2e:e3:3a:54:ce:ce:ec:df:55:ab:98:1d:
d3:52:c7:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:39:33 2025 by rpki-client