Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/7bb207-f471-4b67-8cb7-e15a6c3e4ea6/1/VqAi3rCSj10aCl-wDpbK1MfZEdg.mft
File: VqAi3rCSj10aCl-wDpbK1MfZEdg.mft (raw, json)
Hash identifier: UNJvj99Ju7N8nLuQbGfUfyRgzFjp9RtJ9FUCGhpFQ8k=
Subject key identifier: 04:11:DC:E4:04:2C:80:AD:E1:37:6B:2D:77:89:A1:0F:9D:21:F9:7E
Authority key identifier: 56:A0:22:DE:B0:92:8F:5D:1A:0A:5F:B0:0E:96:CA:D4:C7:D9:11:D8
Certificate issuer: /CN=56a022deb0928f5d1a0a5fb00e96cad4c7d911d8
Certificate serial: 01977AF9480E79BEDA3D9B8E6EF426EF0732
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VqAi3rCSj10aCl-wDpbK1MfZEdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/7bb207-f471-4b67-8cb7-e15a6c3e4ea6/1/VqAi3rCSj10aCl-wDpbK1MfZEdg.mft
Manifest number: 1596
Signing time: Mon 16 Jun 2025 23:00:46 +0000
Manifest this update: Mon 16 Jun 2025 23:00:46 +0000
Manifest next update: Tue 17 Jun 2025 23:00:46 +0000
Files and hashes: 1: 3boydbqbtwhdZ5CEmeaE1nZurKs.roa (hash: mbSzXY+NpIFX8W+6ZeObuPOdikS5E/3lRNbdaeW4oXA=)
2: VqAi3rCSj10aCl-wDpbK1MfZEdg.crl (hash: jObVBtgrdmyIUF0nt7Lvf5PvlAu/naIZh4YzXQCXRdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/7bb207-f471-4b67-8cb7-e15a6c3e4ea6/1/VqAi3rCSj10aCl-wDpbK1MfZEdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/7bb207-f471-4b67-8cb7-e15a6c3e4ea6/1/VqAi3rCSj10aCl-wDpbK1MfZEdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/VqAi3rCSj10aCl-wDpbK1MfZEdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 21:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:f9:48:0e:79:be:da:3d:9b:8e:6e:f4:26:ef:07:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56a022deb0928f5d1a0a5fb00e96cad4c7d911d8
Validity
Not Before: Jun 16 23:00:46 2025 GMT
Not After : Jun 17 23:00:46 2025 GMT
Subject: CN=0411dce4042c80ade1376b2d7789a10f9d21f97e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5e:83:af:21:48:0b:d8:af:43:4f:97:4e:5f:
ce:42:57:68:21:0c:58:ac:0c:94:a4:b8:8b:0a:7a:
8c:e1:d0:68:6e:3f:4f:7b:1c:d6:2f:3c:47:d0:98:
02:7d:fd:82:1f:a6:dc:08:b3:ca:73:13:8e:49:a6:
af:d7:84:51:6b:5c:dd:6c:13:1e:2b:ab:77:c7:24:
e6:6c:cd:fd:49:10:db:f2:89:4e:9d:02:ad:00:e6:
45:a9:de:25:a8:53:a2:f3:5b:63:5d:f1:14:96:4b:
9c:47:a7:66:ff:f5:27:a6:74:b3:25:7a:8f:8e:51:
12:ab:f8:0f:98:04:44:6f:2d:ed:dc:7c:16:46:32:
81:02:71:b0:ce:1b:ba:99:d0:d0:fd:09:02:86:a9:
cc:c9:42:de:ba:2b:01:2e:63:56:c8:5c:4f:9e:da:
a0:36:7e:61:79:21:e9:54:bd:28:66:8d:e7:25:31:
3f:b2:a5:fe:9e:3c:a7:1a:b3:9c:69:46:d4:82:95:
14:74:23:c3:0a:a3:cc:07:eb:5d:4b:9f:3a:6d:34:
28:23:e0:42:ae:41:87:a1:12:72:d3:6d:8f:87:6d:
3e:65:87:17:9b:62:8c:ae:86:48:62:33:71:8e:89:
e3:cc:31:0c:90:71:df:8f:ab:ee:5f:d9:84:e2:12:
4e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:11:DC:E4:04:2C:80:AD:E1:37:6B:2D:77:89:A1:0F:9D:21:F9:7E
X509v3 Authority Key Identifier:
keyid:56:A0:22:DE:B0:92:8F:5D:1A:0A:5F:B0:0E:96:CA:D4:C7:D9:11:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VqAi3rCSj10aCl-wDpbK1MfZEdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bb207-f471-4b67-8cb7-e15a6c3e4ea6/1/VqAi3rCSj10aCl-wDpbK1MfZEdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bb207-f471-4b67-8cb7-e15a6c3e4ea6/1/VqAi3rCSj10aCl-wDpbK1MfZEdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:db:9c:88:dd:fa:0e:4e:6f:2d:93:ab:7f:1b:3e:a8:61:5f:
f0:79:f7:6a:2a:39:1d:cd:69:4d:e2:94:86:64:dd:08:44:8b:
34:aa:c5:03:6f:7a:db:5d:e3:af:b0:c6:49:cb:ff:80:e4:32:
a6:a2:62:15:49:8e:13:56:99:e8:e4:a6:33:5b:de:7b:9b:af:
03:dc:7a:de:66:0b:2b:a0:2e:9f:23:19:fd:d7:4b:18:dc:1e:
1f:fc:ab:e4:41:98:3d:56:cf:0e:e1:e8:fb:2b:b1:b4:2c:92:
1b:41:e6:76:2c:99:b6:2a:f0:bf:b3:43:6a:96:ca:3f:a4:b1:
74:b0:7e:62:20:95:50:07:8d:cc:92:1d:ce:1d:b0:66:d1:01:
75:c2:9a:9b:79:28:ce:4b:b9:d6:fa:82:93:95:01:99:ae:d5:
41:00:ad:dc:2b:84:f0:6e:4b:9c:4c:41:81:82:6a:d9:b4:f0:
34:76:40:38:f8:cd:a8:17:43:78:24:6a:c1:3a:0f:54:28:6e:
01:97:18:f0:07:d2:20:12:ec:89:25:ca:1b:ac:79:cc:77:d3:
e9:f7:7f:96:51:05:af:90:ea:cc:f6:d6:cc:21:fd:d9:ed:ab:
5d:c4:7f:4f:44:ce:0b:72:6f:59:a4:05:ec:a4:d9:aa:df:bc:
18:0c:ef:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 03:27:23 2025 by rpki-client