Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft
File: VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft (raw, json)
Hash identifier: ba0JA2H7RzTnwkbw4LOtklz2F2ZNRUn4oT/w4iVFhBE=
Subject key identifier: D2:A9:4E:B6:40:7E:22:F5:66:83:A7:D1:A0:E1:BD:D5:15:86:06:5E
Authority key identifier: 56:43:41:5C:22:E1:41:97:2C:0D:7E:76:C2:4E:88:B2:24:27:B0:24
Certificate issuer: /CN=5643415c22e141972c0d7e76c24e88b22427b024
Certificate serial: 01976F998CC820AD79BBDB0D2C42E20CAE21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VkNBXCLhQZcsDX52wk6IsiQnsCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 18:00:23 +0000
Manifest this update: Sat 14 Jun 2025 18:00:23 +0000
Manifest next update: Sun 15 Jun 2025 18:00:23 +0000
Files and hashes: 1: 6qanCjcucoDvogEjoEibMas1xCw.roa (hash: iHrFUYTwZPBriNgyEwpJfBAHJGESvwJ6/vI6y1aBDEY=)
2: OJH-3bY7Jey_mmpYXzYEewikSRw.roa (hash: QWW0B/GAEpshetNaEGEwKmz4qiBbm/sCm0lolDcM+Gk=)
3: VkNBXCLhQZcsDX52wk6IsiQnsCQ.crl (hash: G4anDgxW1tQ+lVpFfmM8osGkA/uIacYVw1GoINDvcFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VkNBXCLhQZcsDX52wk6IsiQnsCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 18:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:99:8c:c8:20:ad:79:bb:db:0d:2c:42:e2:0c:ae:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5643415c22e141972c0d7e76c24e88b22427b024
Validity
Not Before: Jun 14 18:00:23 2025 GMT
Not After : Jun 15 18:00:23 2025 GMT
Subject: CN=d2a94eb6407e22f56683a7d1a0e1bdd51586065e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2e:7a:50:8a:76:cd:ea:0e:83:db:04:c0:70:
f9:b0:bd:d0:52:98:04:27:1a:ef:95:1d:28:4b:0a:
d6:12:8a:63:4e:21:8e:93:b0:c7:e5:af:4e:0f:b0:
09:a9:7b:0e:2b:a2:bf:e2:b1:ab:02:cb:16:bf:99:
e7:3c:3e:18:a4:e5:e9:a6:fc:88:7b:e1:71:18:48:
73:30:80:10:75:ca:91:2c:24:a8:fc:5c:83:58:dd:
03:fd:71:f3:2f:3c:78:ae:ef:05:a6:c4:68:d3:42:
d5:1a:37:72:70:ad:26:66:6c:09:b5:6d:03:ed:10:
bb:59:14:f3:4e:b7:10:5a:56:b4:29:ee:c8:9e:fb:
d3:89:a0:eb:0a:37:ff:fe:38:2b:54:bd:35:36:bc:
c8:b1:9d:69:12:57:20:e6:29:ab:c4:8e:16:0d:34:
88:c0:ec:47:b5:37:38:3e:3e:02:d0:af:5e:0a:4f:
a4:9d:f9:e5:9e:01:1a:37:cb:8c:36:84:08:e7:66:
86:95:fc:8e:e1:18:3e:9b:11:e6:38:67:e8:6e:e7:
a3:c6:ab:fc:13:45:eb:ce:7b:e1:5b:4b:0a:7e:b0:
b0:05:61:93:10:69:a3:34:92:e7:74:5e:40:d8:9b:
bb:56:db:b9:35:81:b4:78:67:4e:8c:85:c2:df:4c:
b5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A9:4E:B6:40:7E:22:F5:66:83:A7:D1:A0:E1:BD:D5:15:86:06:5E
X509v3 Authority Key Identifier:
keyid:56:43:41:5C:22:E1:41:97:2C:0D:7E:76:C2:4E:88:B2:24:27:B0:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkNBXCLhQZcsDX52wk6IsiQnsCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:26:64:59:05:48:57:a9:73:52:dc:c8:d4:a8:3d:8a:d4:fb:
29:07:08:ae:19:a6:8b:d4:60:50:77:27:d8:8d:b5:cf:56:9c:
15:bc:54:dc:90:6d:bd:6f:42:49:70:b8:ca:94:27:97:ce:be:
31:13:7e:3f:1e:b8:a1:a3:65:77:c9:e7:df:15:dc:51:a8:11:
eb:7e:1f:3f:97:18:4c:b0:22:d4:b0:cc:5b:31:0d:d6:6d:b3:
92:9d:9e:15:bf:ee:45:ce:1b:9d:94:c9:05:03:0b:54:9a:00:
57:ca:b4:eb:cd:4f:0a:95:2c:ff:71:5e:45:86:94:86:d3:d6:
b8:d4:5a:24:0b:aa:73:af:6b:29:b7:c8:b7:df:70:d5:24:33:
5b:29:34:da:e1:53:ba:d4:50:8b:a5:cf:c0:b6:cd:83:6a:c5:
df:c5:e7:3e:df:a8:75:64:a8:00:40:2d:be:89:94:c9:01:44:
e5:53:e0:70:61:ac:33:2f:4e:bf:90:f7:05:a5:75:9c:95:d0:
a4:1d:9b:98:6b:03:09:60:bf:4b:42:52:ee:21:d1:82:f4:d9:
49:5d:e7:72:a7:48:11:e2:0b:fd:ae:a7:c4:db:78:31:f5:da:
45:26:3b:c5:6b:9b:8b:7e:25:18:a2:51:df:a6:7b:cc:0e:38:
aa:cd:d3:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:42:04 2025 by rpki-client