Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/0c8b0f-5384-4580-89c2-a637650c74ae/1/VwoYGqCQy5cGBaJaelfWU1R_IyQ.mft
File: VwoYGqCQy5cGBaJaelfWU1R_IyQ.mft (raw, json)
Hash identifier: V4kHO+fjx8pHyoO3kElQeaBwlWPC8xG0n4ERFewAKao=
Subject key identifier: FA:E5:6D:48:A1:62:D2:F4:67:33:35:2D:C8:93:95:DB:7E:DE:42:D9
Authority key identifier: 57:0A:18:1A:A0:90:CB:97:06:05:A2:5A:7A:57:D6:53:54:7F:23:24
Certificate issuer: /CN=570a181aa090cb970605a25a7a57d653547f2324
Certificate serial: 01977F0C9C85B70B1FF1A1A302057E3DFFE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VwoYGqCQy5cGBaJaelfWU1R_IyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/0c8b0f-5384-4580-89c2-a637650c74ae/1/VwoYGqCQy5cGBaJaelfWU1R_IyQ.mft
Manifest number: 1597
Signing time: Tue 17 Jun 2025 18:00:22 +0000
Manifest this update: Tue 17 Jun 2025 18:00:22 +0000
Manifest next update: Wed 18 Jun 2025 18:00:22 +0000
Files and hashes: 1: 46uMqFoZIbx_W9-E8n9u53LtPPw.roa (hash: 2dilAY9A0HBjLWWldEcSomY7yF95pmwR+zYOHTlJZo4=)
2: IZTqsNkTgWjmY4RtPaRP8pP_4y4.roa (hash: snBSRgtB4DOLpSGdb4h6kFLqnhtBFWYeDh0vluESnyk=)
3: VwoYGqCQy5cGBaJaelfWU1R_IyQ.crl (hash: ph9apWw+vQ2Kv5+Z+K27XpENVsYSmZVT5LE5ERNUSp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/0c8b0f-5384-4580-89c2-a637650c74ae/1/VwoYGqCQy5cGBaJaelfWU1R_IyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/0c8b0f-5384-4580-89c2-a637650c74ae/1/VwoYGqCQy5cGBaJaelfWU1R_IyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VwoYGqCQy5cGBaJaelfWU1R_IyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 18:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7f:0c:9c:85:b7:0b:1f:f1:a1:a3:02:05:7e:3d:ff:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=570a181aa090cb970605a25a7a57d653547f2324
Validity
Not Before: Jun 17 18:00:22 2025 GMT
Not After : Jun 18 18:00:22 2025 GMT
Subject: CN=fae56d48a162d2f46733352dc89395db7ede42d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:dd:cb:08:5b:b2:13:60:2b:1d:8f:4c:0c:31:
a9:7c:0b:8d:4b:a0:5f:8a:59:52:94:a7:65:1a:e1:
0a:8d:52:bf:01:5f:7e:5f:03:1e:75:6d:db:c3:cc:
80:d8:8b:63:9a:66:e6:93:c4:7a:b1:4b:eb:d0:b8:
2c:a6:37:be:05:db:88:32:78:2a:a7:ae:b7:4c:6f:
45:0b:62:3f:c9:ca:e0:cf:24:43:fa:dd:53:f8:69:
73:7c:16:29:92:1d:7f:fb:be:dd:fc:b2:b7:8a:15:
ce:74:ed:d6:5a:5e:db:2d:60:ce:c6:69:e0:a9:4e:
de:47:64:c5:b9:80:8c:59:38:4d:db:65:74:19:18:
43:09:11:57:02:30:a2:fb:51:76:18:7b:e7:c0:14:
43:5c:8b:18:47:52:70:6a:01:39:ea:96:26:72:65:
9a:87:9a:9e:5e:7e:f3:48:b9:94:ee:59:a3:ba:21:
aa:b9:ac:ed:98:83:18:e4:7e:23:60:85:3d:64:18:
1c:a9:2d:de:31:d5:82:1a:cd:24:ea:fd:08:59:33:
35:1c:37:ca:5d:ad:94:af:a7:a5:d7:81:90:9c:86:
5f:ad:b4:09:87:93:2f:6d:78:9a:e6:29:a4:a4:c2:
f0:f9:27:c3:29:a7:10:21:7b:80:65:8f:ba:09:75:
df:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E5:6D:48:A1:62:D2:F4:67:33:35:2D:C8:93:95:DB:7E:DE:42:D9
X509v3 Authority Key Identifier:
keyid:57:0A:18:1A:A0:90:CB:97:06:05:A2:5A:7A:57:D6:53:54:7F:23:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwoYGqCQy5cGBaJaelfWU1R_IyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0c8b0f-5384-4580-89c2-a637650c74ae/1/VwoYGqCQy5cGBaJaelfWU1R_IyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0c8b0f-5384-4580-89c2-a637650c74ae/1/VwoYGqCQy5cGBaJaelfWU1R_IyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:cf:45:4a:5c:3d:87:56:8b:da:8f:95:54:d1:fd:bd:44:3d:
4b:44:2a:96:e7:4d:0d:25:c4:e8:4a:48:36:44:c2:69:3e:f7:
32:95:88:73:24:cd:46:99:f5:d2:9e:5e:ed:ed:fe:9b:de:53:
7e:0b:11:ae:46:ba:f9:5c:b8:11:d3:ee:cd:76:a4:de:24:4e:
41:79:87:6f:0a:88:c0:be:cf:52:71:4b:e5:32:13:4f:fb:5a:
8f:75:b2:f5:bd:0d:a4:8d:a1:ad:0d:e2:76:f0:ab:91:67:4c:
97:4c:0a:96:4a:fd:df:96:ff:aa:47:79:8b:f5:89:a4:fa:32:
af:68:85:bc:e1:0c:86:8e:8f:23:98:30:69:87:ec:54:57:fe:
b1:b8:3a:bb:84:1d:50:eb:9c:37:43:53:79:17:c1:ec:30:1e:
89:29:36:41:83:4c:08:49:db:c0:4f:bc:20:1b:88:2d:7a:b4:
e1:13:c0:bb:6d:f1:6d:c5:2f:d1:80:78:59:21:5d:cd:5f:06:
43:06:aa:e2:e2:77:a9:29:37:c4:cf:42:2c:1f:e4:4f:dd:b4:
44:a1:40:f1:6a:a7:ad:e0:fb:69:f3:5d:c9:31:f8:06:11:b7:
f6:de:08:4e:18:f2:8e:1d:44:af:ab:a5:09:10:7c:ed:32:bc:
59:f0:5a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 02:37:11 2025 by rpki-client