Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/VHkd3iyb3qNmzn7GxagAxdpjNFQ.mft
File: VHkd3iyb3qNmzn7GxagAxdpjNFQ.mft (raw, json)
Hash identifier: IoooE/+CIuak6lIos0B35ojPqRwrx96JBHr7WJ3z5Vg=
Subject key identifier: E4:F4:2D:77:97:E3:6D:1A:F2:E3:C1:0F:97:83:4F:58:57:2C:53:74
Authority key identifier: 54:79:1D:DE:2C:9B:DE:A3:66:CE:7E:C6:C5:A8:00:C5:DA:63:34:54
Certificate issuer: /CN=54791dde2c9bdea366ce7ec6c5a800c5da633454
Certificate serial: 0197760978BA1CA3B179CD5630A4ACC2AAE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHkd3iyb3qNmzn7GxagAxdpjNFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/VHkd3iyb3qNmzn7GxagAxdpjNFQ.mft
Manifest number: 134F
Signing time: Mon 16 Jun 2025 00:00:21 +0000
Manifest this update: Mon 16 Jun 2025 00:00:21 +0000
Manifest next update: Tue 17 Jun 2025 00:00:21 +0000
Files and hashes: 1: 45perw_w1j6f13fS2dhRsqX1J5M.roa (hash: DYBg8sY6Y3Ov/VU9uOEBk40lHTsP43PpQZFd0Uj3ouA=)
2: VHkd3iyb3qNmzn7GxagAxdpjNFQ.crl (hash: Ig01R3HJLrpxTyvnFYkQCfJW+Gcf/xoFmj+tFx5JJPo=)
3: lVcXLet5xDC9hx49fSzHNMkhKuQ.roa (hash: yDDXEEZlcdjv6pPGItKtHPkxBZnpxpZ1NCia9fyNgYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/VHkd3iyb3qNmzn7GxagAxdpjNFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/VHkd3iyb3qNmzn7GxagAxdpjNFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VHkd3iyb3qNmzn7GxagAxdpjNFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 20:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:09:78:ba:1c:a3:b1:79:cd:56:30:a4:ac:c2:aa:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54791dde2c9bdea366ce7ec6c5a800c5da633454
Validity
Not Before: Jun 16 00:00:21 2025 GMT
Not After : Jun 17 00:00:21 2025 GMT
Subject: CN=e4f42d7797e36d1af2e3c10f97834f58572c5374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f6:a8:c9:86:ff:0d:93:fc:f0:28:32:de:ee:
d0:44:d7:de:06:e9:39:2e:48:90:f4:5b:11:4e:39:
1e:47:c2:31:70:69:6b:b7:d5:fd:00:17:17:a0:97:
32:68:1e:7d:a3:4f:08:37:cf:c3:53:11:9e:c6:67:
41:88:db:96:09:5e:c6:24:2a:51:34:df:bb:00:aa:
a6:8b:cc:2f:63:54:d5:49:06:1e:c9:85:3c:a0:37:
42:76:b2:27:93:3e:43:53:0a:9c:15:f4:fb:5f:df:
4c:ae:0f:53:ee:27:0b:90:d7:be:b5:cd:36:36:b8:
90:37:61:03:0c:56:2f:64:72:e9:e7:57:b9:40:e4:
f3:c7:ae:0f:42:26:bb:b5:57:42:0b:03:7e:84:5d:
f5:3e:53:48:ff:ea:5b:0e:00:09:d8:67:a8:7c:9d:
29:51:4f:fd:5f:c1:9f:2e:0f:35:75:96:e8:fc:68:
97:33:b8:2a:c9:77:12:de:8a:95:2b:2f:d5:8d:89:
c0:e8:79:f6:2a:07:a3:b3:c0:0c:f2:ad:f3:32:9f:
23:a7:73:e3:78:9d:4f:98:92:b1:fe:4b:7b:04:5d:
57:bd:16:a9:0d:d1:90:dc:40:6e:2b:e5:a3:ce:1a:
0e:66:4a:0e:b9:4f:78:56:51:e5:f8:6c:88:84:da:
ce:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:F4:2D:77:97:E3:6D:1A:F2:E3:C1:0F:97:83:4F:58:57:2C:53:74
X509v3 Authority Key Identifier:
keyid:54:79:1D:DE:2C:9B:DE:A3:66:CE:7E:C6:C5:A8:00:C5:DA:63:34:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHkd3iyb3qNmzn7GxagAxdpjNFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/VHkd3iyb3qNmzn7GxagAxdpjNFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/VHkd3iyb3qNmzn7GxagAxdpjNFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:47:c7:cb:b1:ea:45:58:f2:87:3a:c6:47:fd:1a:c7:34:29:
bd:b8:00:54:3e:09:16:c6:6b:38:b6:f1:fb:41:9a:60:77:2e:
b4:be:ed:48:32:20:9c:66:51:b8:32:f3:85:19:56:ef:05:f8:
d0:1f:4a:86:f3:91:0c:bc:12:87:53:c0:ad:d8:39:43:21:7e:
e2:31:53:cb:8e:7f:fe:50:5b:b2:18:f5:9d:5e:a5:8d:55:86:
9c:12:76:0a:a2:fe:21:c5:55:ec:20:70:98:ca:94:c6:2e:8d:
c4:8a:2a:b1:86:24:ad:3b:53:c1:b6:dc:5e:f1:27:55:db:4b:
22:58:1c:0a:01:a3:90:ed:6f:fc:91:9f:33:8d:c7:9a:6f:14:
34:17:ae:fc:c2:5a:96:dc:6e:40:e0:d8:78:22:45:b8:62:f6:
34:2c:fb:2a:05:67:f5:8c:58:8e:b3:eb:73:79:c8:60:bc:ef:
2b:b5:17:64:0a:ce:8e:98:f4:4a:26:b1:cf:a1:a6:16:85:11:
95:41:7a:36:02:2f:71:2f:b7:c9:86:36:82:a0:46:b2:e2:cf:
f3:05:d0:37:8e:2a:72:e0:b7:b2:e8:bb:b0:ee:f1:63:9a:48:
d0:4e:57:e1:aa:e4:a0:de:41:05:3a:87:f9:77:b4:1f:93:0c:
2d:82:0d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:45:38 2025 by rpki-client