
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.mft
File: VLjgSw4aTU46KN8V61hJPnY3frA.mft (raw, json)
Hash identifier: 2UMeJlfdRMbsMt9+iWs74xqMdPjVkhS6CiF63kS8q6g=
Subject key identifier: 90:DF:29:DB:41:5D:48:00:AC:D6:15:CB:89:5C:44:DA:BA:42:EB:57
Authority key identifier: 54:B8:E0:4B:0E:1A:4D:4E:3A:28:DF:15:EB:58:49:3E:76:37:7E:B0
Certificate issuer: /CN=54b8e04b0e1a4d4e3a28df15eb58493e76377eb0
Certificate serial: 019768F30B377481A10A5A2CB1883840EDF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLjgSw4aTU46KN8V61hJPnY3frA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.mft
Manifest number: 158C
Signing time: Fri 13 Jun 2025 11:00:47 +0000
Manifest this update: Fri 13 Jun 2025 11:00:47 +0000
Manifest next update: Sat 14 Jun 2025 11:00:47 +0000
Files and hashes: 1: UwlL4l1LRiE3vykISfbzsy5TSkQ.roa (hash: ENtIGGU96W9e4YjxZ7Qzg80Ai/cpSTda8jT8DyJC8KM=)
2: VLjgSw4aTU46KN8V61hJPnY3frA.crl (hash: 58MvyU0knDCU5s3+tycRbi/WDCxxl1AdsS+qu8OONuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VLjgSw4aTU46KN8V61hJPnY3frA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f3:0b:37:74:81:a1:0a:5a:2c:b1:88:38:40:ed:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54b8e04b0e1a4d4e3a28df15eb58493e76377eb0
Validity
Not Before: Jun 13 11:00:47 2025 GMT
Not After : Jun 14 11:00:47 2025 GMT
Subject: CN=90df29db415d4800acd615cb895c44daba42eb57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a6:ec:16:4b:3e:13:f7:d6:e4:a1:b8:3f:63:
30:48:a5:fa:d6:ed:83:55:78:75:69:41:90:97:12:
18:5f:30:f3:bf:67:b6:46:85:91:0b:63:d2:bc:06:
3b:58:b3:f4:ce:91:57:a3:c8:2b:59:48:30:11:cd:
42:fb:25:af:48:9b:70:7b:e0:a5:db:79:b2:3f:51:
58:4f:20:bd:57:c1:9b:6e:6d:e1:59:b6:73:bb:7b:
17:0d:5e:5e:a7:c2:6a:39:d1:89:56:fe:22:9d:ff:
13:14:21:70:83:ba:ac:41:bc:ab:0c:30:6f:aa:84:
27:71:b6:48:06:d5:fd:95:2a:15:5a:92:d4:77:db:
89:80:81:11:49:8e:4c:d9:ff:40:2b:f8:3b:1f:b7:
e9:a7:b5:4c:9f:d3:69:b0:7a:53:66:05:8b:7c:f1:
da:a0:24:e3:b9:60:33:4f:36:d9:56:e3:11:31:bf:
4f:c5:be:e7:64:76:0e:ca:ba:6c:cb:50:02:3a:39:
4c:08:11:f4:3d:b9:e1:0d:e9:11:a4:73:53:34:b8:
5f:12:5b:1d:77:20:b2:79:7f:0e:17:5c:12:4c:e6:
44:0b:6d:7f:70:50:b6:b9:6b:5a:cc:ae:63:18:f3:
fe:99:66:e2:f0:ab:c5:e0:9e:03:95:e7:e0:7b:d2:
33:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:DF:29:DB:41:5D:48:00:AC:D6:15:CB:89:5C:44:DA:BA:42:EB:57
X509v3 Authority Key Identifier:
keyid:54:B8:E0:4B:0E:1A:4D:4E:3A:28:DF:15:EB:58:49:3E:76:37:7E:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLjgSw4aTU46KN8V61hJPnY3frA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:31:9a:76:f1:e8:03:08:23:e6:09:78:6e:75:11:56:d6:83:
8e:4c:8d:7f:13:ac:25:a4:69:f4:18:34:e8:f1:87:72:48:e2:
f8:c9:73:c4:fc:00:80:97:7c:1b:a6:ea:c8:f8:3a:b0:ac:d5:
40:4a:c5:5e:84:5b:81:e2:fb:64:b8:9d:0e:af:af:a5:33:53:
08:c7:a7:ea:76:b1:10:f0:c2:d0:d7:49:e6:de:73:33:bf:88:
7b:c6:54:f2:cd:c7:74:c1:ae:1b:fa:15:63:9a:4d:cd:cd:a3:
da:1b:be:3e:eb:a5:e0:bd:7a:91:5b:c4:03:82:4b:65:e5:2f:
14:a4:34:75:64:51:c9:67:50:96:42:7e:6c:5f:6b:ce:55:af:
f1:cd:5e:68:b2:83:3d:f1:84:3e:c5:88:2d:aa:34:07:f1:bb:
d9:21:66:03:8a:ef:b6:64:4a:9a:8b:c0:ae:ab:03:26:89:79:
81:ef:af:3b:14:0a:df:2b:61:76:76:8b:37:4d:23:1a:0c:73:
e6:2f:62:fa:ea:65:4e:fc:f8:5d:5d:a9:03:33:58:bb:4a:ea:
74:6a:62:3c:64:88:a4:eb:1c:0a:7a:88:40:a6:36:83:89:67:
09:30:ee:c1:8f:8c:a2:38:52:99:4b:cd:26:08:8d:54:cc:f5:
6a:3e:86:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:51:18 2025 by rpki-client