Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft
File: VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft (raw, json)
Hash identifier: HZrxZeyq+g4PXAehjvLsS3Bco5sgTaG80sxoVrdYdm0=
Subject key identifier: 7C:EE:DD:0D:D1:9B:20:3A:64:2C:3B:2F:04:A7:DC:AE:70:AC:C5:4C
Authority key identifier: 54:0F:4A:1B:92:33:8B:49:CA:63:02:12:19:05:9C:E5:70:FF:59:64
Certificate issuer: /CN=540f4a1b92338b49ca63021219059ce570ff5964
Certificate serial: 01977DFA6CD7BD403DFCC5CF9FEC094BEC7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VA9KG5Izi0nKYwISGQWc5XD_WWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft
Manifest number: 03CD
Signing time: Tue 17 Jun 2025 13:00:53 +0000
Manifest this update: Tue 17 Jun 2025 13:00:53 +0000
Manifest next update: Wed 18 Jun 2025 13:00:53 +0000
Files and hashes: 1: VA9KG5Izi0nKYwISGQWc5XD_WWQ.crl (hash: 7vYcK8XPAHBz2RbZavZ5u+O2FfDxHac02VCcADjknjM=)
2: _WaDfELTBc_dUmy6Cu013iGAFy4.roa (hash: 4Ui783wG8atURB8iqdX/TxaJyYCKy9S+Gr0JJXsrTgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VA9KG5Izi0nKYwISGQWc5XD_WWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:fa:6c:d7:bd:40:3d:fc:c5:cf:9f:ec:09:4b:ec:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=540f4a1b92338b49ca63021219059ce570ff5964
Validity
Not Before: Jun 17 13:00:53 2025 GMT
Not After : Jun 18 13:00:53 2025 GMT
Subject: CN=7ceedd0dd19b203a642c3b2f04a7dcae70acc54c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:6c:db:ad:d0:ee:24:87:09:3a:d3:0a:e6:ef:
2c:0a:74:56:4f:5d:8b:ea:d6:44:8a:14:69:a5:a6:
b9:80:72:78:b8:ef:8c:2d:0b:a3:4a:01:96:b3:65:
5c:49:39:6e:2d:8d:7a:6d:26:58:0e:8d:cc:13:e7:
39:84:9a:28:65:45:c0:6c:29:d4:76:ed:77:56:05:
1b:94:9c:ab:80:ba:82:e9:da:7e:ea:87:83:6f:83:
2f:89:43:a5:5b:be:a9:bc:89:04:1a:68:d3:60:7a:
f8:4e:f5:94:af:2c:f2:42:65:6f:93:82:b1:29:d5:
ee:6d:01:c0:d4:27:93:5d:5d:d8:e9:0f:54:96:1c:
44:f3:5f:50:e8:50:47:b9:d2:56:5b:cd:77:dc:84:
f5:1c:14:7a:d3:38:16:73:ba:c3:c4:dc:29:1a:94:
fa:70:1a:6a:03:68:7c:8b:68:d0:74:b3:20:ea:34:
35:91:af:4e:08:57:6e:f3:53:09:b9:0c:51:4e:1a:
05:24:c7:2f:1a:9a:35:7f:97:49:c9:3d:83:c6:60:
03:27:56:fe:a9:a4:fd:8f:a1:e5:4b:be:83:e1:d8:
c2:4f:24:57:27:85:d2:63:01:6d:07:2c:38:fd:f5:
c0:cf:49:f1:0a:25:6b:ff:ed:f3:28:65:3a:4c:14:
51:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:EE:DD:0D:D1:9B:20:3A:64:2C:3B:2F:04:A7:DC:AE:70:AC:C5:4C
X509v3 Authority Key Identifier:
keyid:54:0F:4A:1B:92:33:8B:49:CA:63:02:12:19:05:9C:E5:70:FF:59:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VA9KG5Izi0nKYwISGQWc5XD_WWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:c5:c7:c5:e3:c3:c4:97:11:4e:56:63:e1:36:cd:35:2f:68:
86:3f:80:ca:ab:63:dc:67:8c:d6:1e:ab:8a:f3:fb:de:cc:d7:
1a:0d:2d:ef:a2:c2:30:90:54:93:98:f3:37:3e:cb:ae:6d:a6:
95:c8:31:96:2d:d7:78:1d:fe:11:3d:46:47:1c:13:00:ed:ca:
8f:d5:d3:2d:61:7a:c6:20:44:b6:64:b9:a9:bd:c1:57:61:63:
c3:56:2f:f8:cb:d6:6e:b0:92:e1:67:b7:4e:e6:81:94:a8:f1:
70:93:c3:c5:f4:29:c8:c0:c2:8c:58:3f:23:2c:22:95:27:c4:
ca:d1:ba:1f:2d:0c:23:64:f3:c6:51:35:af:30:38:8c:30:c4:
aa:af:82:66:25:a4:35:b8:83:f1:9a:72:bf:4e:03:b1:ba:b3:
03:31:cc:cc:1c:13:9e:61:7a:14:94:b3:69:5e:34:9e:fa:2d:
7a:5d:f4:34:1f:b4:f9:b1:90:57:4d:72:2a:1d:d5:5c:11:c9:
10:9a:ad:4a:33:41:39:2e:c1:e8:32:3d:a1:58:90:2f:77:65:
27:24:7b:c8:64:e3:0e:cc:ae:3a:27:9c:0f:60:65:42:c5:52:
3c:60:4c:14:4b:63:da:e0:e0:02:39:60:7b:8c:c9:6b:ac:e9:
c1:97:59:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 16:17:56 2025 by rpki-client