Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/VdXcniIBEqJ8FSvDI4kDiXSuRXI.mft
File: VdXcniIBEqJ8FSvDI4kDiXSuRXI.mft (raw, json)
Hash identifier: UXbwjXvyhvuAIO/zY0dEICzwVR/5fcPZMKjQSPbqQVQ=
Subject key identifier: D5:85:C8:6B:25:54:DC:E9:FD:11:26:58:43:ED:B6:A2:06:30:D6:58
Authority key identifier: 55:D5:DC:9E:22:01:12:A2:7C:15:2B:C3:23:89:03:89:74:AE:45:72
Certificate issuer: /CN=55d5dc9e220112a27c152bc32389038974ae4572
Certificate serial: 01976F6306B9062AD376D0151514DD3A8720
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VdXcniIBEqJ8FSvDI4kDiXSuRXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/VdXcniIBEqJ8FSvDI4kDiXSuRXI.mft
Manifest number: 12A8
Signing time: Sat 14 Jun 2025 17:00:50 +0000
Manifest this update: Sat 14 Jun 2025 17:00:50 +0000
Manifest next update: Sun 15 Jun 2025 17:00:50 +0000
Files and hashes: 1: NgMUQ0h4d6oIArcMJtSW703L-Zc.roa (hash: TJW4OaMrgaRj7E3uX9xVvPrYH4h+lcuQwLF2jUPlChA=)
2: VdXcniIBEqJ8FSvDI4kDiXSuRXI.crl (hash: k3mOOtiyubiT6Y40nqUtZCyXNi42twUAgC7u/ImJDWI=)
3: h9epvE3XZbxuQFOC07DHje9oldc.roa (hash: dmaD3wbg4kagfJA96eYctyQPytlbvLwfUnrstuptdyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/VdXcniIBEqJ8FSvDI4kDiXSuRXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/VdXcniIBEqJ8FSvDI4kDiXSuRXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/VdXcniIBEqJ8FSvDI4kDiXSuRXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 17:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:63:06:b9:06:2a:d3:76:d0:15:15:14:dd:3a:87:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55d5dc9e220112a27c152bc32389038974ae4572
Validity
Not Before: Jun 14 17:00:50 2025 GMT
Not After : Jun 15 17:00:50 2025 GMT
Subject: CN=d585c86b2554dce9fd11265843edb6a20630d658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:36:2f:f6:fe:4e:b4:45:fe:ca:6f:cd:f8:d9:
e5:a5:7a:d0:b7:d6:74:11:49:df:63:49:b6:a3:2b:
98:fd:b9:0b:94:20:c5:bd:46:3d:6c:69:aa:d4:4e:
04:8a:7a:c1:80:f8:19:e1:ad:43:cf:c1:20:52:51:
95:e9:78:ca:11:0c:76:b4:bf:7e:e1:d7:9d:07:03:
d0:4e:58:ee:cb:11:a2:6a:66:1b:1b:42:f0:dd:dd:
e0:0a:aa:81:45:ca:3a:d3:27:87:9d:6e:f1:44:05:
90:d6:d7:e5:75:e9:51:d9:81:12:81:11:11:3c:9c:
8f:71:ee:d6:76:47:b1:66:c8:72:13:36:cb:39:5d:
85:39:51:9f:96:55:01:63:04:79:22:28:58:8c:1a:
9a:bf:9e:a6:2c:cc:8b:54:6c:99:72:bf:94:a4:e6:
31:73:f1:eb:a3:e1:c3:d4:e7:c0:7d:58:e2:e6:95:
35:01:f9:b5:94:9d:f6:d9:89:cf:38:13:e9:da:c1:
08:da:8e:67:93:df:7b:dd:1f:e1:97:10:61:89:44:
3d:f0:16:3f:3a:9c:12:74:63:c0:da:37:2e:bc:86:
8c:58:ca:74:16:be:c8:c3:b8:91:0d:05:dc:b8:b8:
7c:8a:7e:28:11:17:0a:ac:5f:0d:eb:bc:47:d2:7f:
08:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:85:C8:6B:25:54:DC:E9:FD:11:26:58:43:ED:B6:A2:06:30:D6:58
X509v3 Authority Key Identifier:
keyid:55:D5:DC:9E:22:01:12:A2:7C:15:2B:C3:23:89:03:89:74:AE:45:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VdXcniIBEqJ8FSvDI4kDiXSuRXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/VdXcniIBEqJ8FSvDI4kDiXSuRXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/VdXcniIBEqJ8FSvDI4kDiXSuRXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:1e:e9:e7:a3:7b:bc:40:06:75:15:7e:ec:38:4a:a8:34:37:
cf:b2:cc:c4:7e:04:d6:f0:b4:a1:7a:f6:58:7e:8c:c8:c3:a8:
83:5f:9d:dd:b8:1d:6b:7d:e4:e8:51:45:ef:25:f9:f1:7c:18:
46:08:5c:b3:84:12:f8:6a:ec:35:47:60:04:98:1c:a3:a7:da:
6b:66:d1:e3:18:d6:e7:8e:2e:3b:2d:8f:ae:83:01:cb:06:08:
16:4c:a1:71:c4:9d:ba:17:01:6d:40:e4:c5:0a:65:37:e5:34:
12:09:ca:d7:d7:15:82:30:9a:5f:c6:55:f9:0e:64:64:e0:12:
72:36:f3:54:c1:33:47:3d:6f:cc:29:cc:83:0f:75:6b:f1:3a:
e0:6d:97:d0:5b:5f:3a:58:5a:3a:11:27:f5:e3:f3:c1:70:e4:
87:6e:48:2a:32:89:72:41:12:72:59:a0:cf:1d:d7:df:31:80:
ed:04:b7:cc:f5:d0:0a:71:b0:cf:fc:fc:f3:8e:fe:d3:da:59:
c9:1c:32:8d:21:78:0d:57:ea:77:b1:73:b0:ef:ab:88:0b:85:
b1:56:3f:b3:1f:d2:98:46:d3:99:e0:0f:55:87:f3:bd:9c:89:
7c:d3:06:97:bf:91:5d:2a:33:60:a7:6c:9e:8e:73:09:1c:2f:
3f:5e:8a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:52:43 2025 by rpki-client