Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/d158e1-512b-4486-af87-b490a6d6be25/1/VXe0uHq4aspXflbjjVuKWBPMzD0.mft
File: VXe0uHq4aspXflbjjVuKWBPMzD0.mft (raw, json)
Hash identifier: iIuSZ1fXKUZKLlmfACYdG8WMmG5626MGUwnYxP/Jo6M=
Subject key identifier: 3D:6A:A0:1B:24:8F:37:B4:C9:C0:06:E6:47:6F:63:BF:C9:88:EA:D8
Authority key identifier: 55:77:B4:B8:7A:B8:6A:CA:57:7E:56:E3:8D:5B:8A:58:13:CC:CC:3D
Certificate issuer: /CN=5577b4b87ab86aca577e56e38d5b8a5813cccc3d
Certificate serial: 01976CCF9E19FEC49A270985AE7FBD764BD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VXe0uHq4aspXflbjjVuKWBPMzD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/d158e1-512b-4486-af87-b490a6d6be25/1/VXe0uHq4aspXflbjjVuKWBPMzD0.mft
Manifest number: 10C1
Signing time: Sat 14 Jun 2025 05:00:35 +0000
Manifest this update: Sat 14 Jun 2025 05:00:35 +0000
Manifest next update: Sun 15 Jun 2025 05:00:35 +0000
Files and hashes: 1: P9bs-w5DkWpu1aBuTV3PHAzvH6Q.roa (hash: oAepJ4+j0gmtz7XxqoB+yGPsz6tmKuFLhq6h9fcVyTY=)
2: VXe0uHq4aspXflbjjVuKWBPMzD0.crl (hash: lf7KURiCChSFyitim9vOC+O28Outx1q3Rvv3vfbKc7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/d158e1-512b-4486-af87-b490a6d6be25/1/VXe0uHq4aspXflbjjVuKWBPMzD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/d158e1-512b-4486-af87-b490a6d6be25/1/VXe0uHq4aspXflbjjVuKWBPMzD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VXe0uHq4aspXflbjjVuKWBPMzD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:9e:19:fe:c4:9a:27:09:85:ae:7f:bd:76:4b:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5577b4b87ab86aca577e56e38d5b8a5813cccc3d
Validity
Not Before: Jun 14 05:00:35 2025 GMT
Not After : Jun 15 05:00:35 2025 GMT
Subject: CN=3d6aa01b248f37b4c9c006e6476f63bfc988ead8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:99:57:5b:45:0d:5d:70:aa:63:48:cd:9f:98:
e1:ca:bb:10:96:d5:1e:b0:9e:22:9c:fd:8c:f6:ba:
b0:1d:b8:16:79:ae:7b:fc:87:95:97:06:66:e9:1c:
0e:f7:06:c5:f4:c3:06:02:5d:a2:1c:ba:f5:11:89:
11:ad:1e:53:9e:b3:ff:aa:4b:5a:b1:2a:97:23:0c:
74:ef:b9:23:b4:5f:7c:1b:82:10:bf:b9:0e:e2:c0:
1a:06:44:9a:59:e1:7c:2d:70:5c:60:f2:2c:9c:88:
55:4a:26:ea:01:7d:a0:f4:5f:9b:7b:cc:53:52:8c:
df:0b:3f:03:c7:53:c4:51:54:03:82:be:93:8e:08:
33:56:a7:85:4b:60:c3:58:8a:3d:b3:6c:0d:a5:06:
5b:ba:fd:a0:bc:c4:a9:54:70:3c:91:48:57:70:44:
31:3d:c5:3f:81:73:8b:51:2b:44:b9:70:61:a6:28:
d7:b5:3c:1e:e7:41:64:62:22:7b:8d:c2:c1:d3:6e:
c7:d4:20:1a:34:04:9d:44:c0:6a:7a:73:22:76:52:
84:fa:8b:c8:16:79:06:d0:b8:2d:db:f7:15:a0:92:
e4:3c:40:91:05:30:6e:20:28:55:0e:ee:9e:0f:99:
40:5c:08:4f:dd:87:89:ed:b5:a0:ec:5f:f8:d6:51:
15:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:6A:A0:1B:24:8F:37:B4:C9:C0:06:E6:47:6F:63:BF:C9:88:EA:D8
X509v3 Authority Key Identifier:
keyid:55:77:B4:B8:7A:B8:6A:CA:57:7E:56:E3:8D:5B:8A:58:13:CC:CC:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXe0uHq4aspXflbjjVuKWBPMzD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d158e1-512b-4486-af87-b490a6d6be25/1/VXe0uHq4aspXflbjjVuKWBPMzD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d158e1-512b-4486-af87-b490a6d6be25/1/VXe0uHq4aspXflbjjVuKWBPMzD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:23:fd:2f:0f:de:1f:84:4b:48:66:8b:f1:1c:2f:2e:38:24:
9b:5c:8f:be:57:a6:8a:92:39:9d:34:97:4d:1a:0b:45:66:ad:
0e:69:b3:03:94:31:f1:5d:76:a9:c3:20:92:a4:de:88:67:29:
62:3d:67:e2:5b:cf:e7:ed:68:47:28:7c:bc:b1:2a:0f:c3:8d:
3a:b6:93:b0:e8:8a:7c:82:ea:6e:42:08:fd:96:5f:52:e8:08:
61:e9:00:c9:ae:b7:28:74:37:0e:c7:15:67:e5:d0:39:f8:7f:
89:d1:eb:01:a5:51:0b:7c:38:66:84:c3:80:e1:87:40:4f:94:
d9:ef:f1:b0:5e:03:ef:61:5f:df:5b:55:3b:b5:dc:81:a9:21:
fa:73:6c:a8:3f:d4:e1:35:cb:57:83:a6:55:56:aa:3e:d4:68:
a8:db:28:db:c0:fc:3f:0d:c9:de:47:3a:e1:10:ac:11:58:9b:
16:e9:c7:c8:be:08:fd:1f:a9:38:10:2f:8a:6d:87:5d:08:e1:
44:20:f8:06:f9:40:e7:6a:79:66:96:2e:62:1b:16:b1:07:f0:
ca:4f:6e:ee:5e:b1:a8:f8:6d:36:77:e1:a8:20:53:a3:15:d1:
4d:dc:b5:d5:1d:4c:ea:31:51:bb:79:d4:a1:a4:ef:f9:bf:6c:
2b:f7:5f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:56:34 2025 by rpki-client