Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/VZp2lBLS2WO0kevjHUQRHcr8zJQ.mft
File: VZp2lBLS2WO0kevjHUQRHcr8zJQ.mft (raw, json)
Hash identifier: 2urbSxkM+A74fqBx7QWB0BIIuWHzTs6UjUhn7XBiVYQ=
Subject key identifier: 90:17:AB:B8:8F:B0:BE:32:91:FA:7D:2E:BF:93:DD:72:04:6B:D4:26
Authority key identifier: 55:9A:76:94:12:D2:D9:63:B4:91:EB:E3:1D:44:11:1D:CA:FC:CC:94
Certificate issuer: /CN=559a769412d2d963b491ebe31d44111dcafccc94
Certificate serial: 019769609DF99EBEF1080B69C487C970C4C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZp2lBLS2WO0kevjHUQRHcr8zJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/VZp2lBLS2WO0kevjHUQRHcr8zJQ.mft
Manifest number: 0470
Signing time: Fri 13 Jun 2025 13:00:28 +0000
Manifest this update: Fri 13 Jun 2025 13:00:28 +0000
Manifest next update: Sat 14 Jun 2025 13:00:28 +0000
Files and hashes: 1: VZp2lBLS2WO0kevjHUQRHcr8zJQ.crl (hash: EzFBm0EwQ0O3u39k1HTPpEfTdoefILqRl2rKBQl5u8s=)
2: r1lquQ-XjIWjOg1LAkyGn6KMjo0.roa (hash: wZhXEM3Xxa5+Fz5oyJ1++QkvfDJcpfPRAfCqMyTq70w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/VZp2lBLS2WO0kevjHUQRHcr8zJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/VZp2lBLS2WO0kevjHUQRHcr8zJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VZp2lBLS2WO0kevjHUQRHcr8zJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:9d:f9:9e:be:f1:08:0b:69:c4:87:c9:70:c4:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=559a769412d2d963b491ebe31d44111dcafccc94
Validity
Not Before: Jun 13 13:00:28 2025 GMT
Not After : Jun 14 13:00:28 2025 GMT
Subject: CN=9017abb88fb0be3291fa7d2ebf93dd72046bd426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:2d:10:3f:e9:f7:b3:90:21:f2:db:6c:ec:31:
33:93:65:6a:6d:83:d8:ee:3f:7f:24:53:a5:dc:d3:
26:e3:f6:88:00:3e:71:92:c0:9a:12:35:32:53:e7:
da:18:45:c2:5f:0f:d5:02:d5:76:1c:23:9a:78:0a:
bd:03:f6:75:26:af:49:e6:32:e2:b6:b9:de:ab:22:
b5:3c:61:2d:13:0b:cd:43:b8:a4:e6:78:ac:33:e9:
dd:a6:d9:df:98:b1:2c:42:37:36:a8:c3:d3:36:d4:
7a:77:17:96:5f:d9:eb:38:38:04:d7:8e:29:1f:47:
c4:e2:d6:c1:57:d4:28:83:18:fa:ac:cc:bd:c0:61:
e6:4a:29:c5:d1:9e:00:62:80:c7:b1:67:e0:6e:d9:
c8:67:0e:7c:bd:c6:cc:4e:30:b1:72:81:e0:e4:4e:
b4:d2:99:ee:ac:07:31:76:2b:54:4a:25:0d:04:83:
fd:cf:b6:d3:1d:ae:ab:10:5f:67:d9:72:01:66:95:
d8:c5:6e:56:3b:30:4f:37:f2:77:b2:5e:7f:d6:f6:
90:b9:12:65:26:aa:bc:47:b2:e0:45:75:f8:95:05:
a5:d2:94:3a:75:01:d0:85:f3:c3:48:1a:b3:5b:36:
53:16:11:47:28:0f:68:ef:0d:7a:d7:a3:c0:9c:bc:
d1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:17:AB:B8:8F:B0:BE:32:91:FA:7D:2E:BF:93:DD:72:04:6B:D4:26
X509v3 Authority Key Identifier:
keyid:55:9A:76:94:12:D2:D9:63:B4:91:EB:E3:1D:44:11:1D:CA:FC:CC:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZp2lBLS2WO0kevjHUQRHcr8zJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/VZp2lBLS2WO0kevjHUQRHcr8zJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/VZp2lBLS2WO0kevjHUQRHcr8zJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:f9:84:93:87:e5:9a:c4:20:94:dc:54:09:8e:bb:35:cc:88:
f1:97:da:4c:8f:a5:e4:0c:a2:c3:01:90:f6:8a:42:3c:cd:7e:
a9:64:39:62:98:f6:13:68:18:9c:8e:55:4a:7e:9d:8b:bf:93:
0a:f8:df:23:ed:58:f9:7e:2c:ab:0d:49:be:9f:7d:89:c3:e6:
49:73:50:0d:03:7b:55:a6:0e:76:86:85:fc:26:bc:c3:a3:c6:
b1:46:7b:df:08:9e:6f:26:05:cb:b4:4e:10:30:2c:20:80:90:
40:cf:ad:a3:70:6b:e3:2c:e6:d0:44:87:53:1f:42:3b:8c:ea:
87:f9:b4:c3:0f:8a:49:a8:f7:17:61:9c:ee:fa:27:b3:1d:ab:
86:8e:f9:ca:52:2c:02:c3:78:e7:a2:3b:b6:ba:04:2c:3f:dc:
13:31:be:01:c2:ff:4f:a3:be:fb:71:0a:11:0f:98:1f:fb:59:
cd:8d:e0:a2:d0:6d:00:a9:1e:77:b2:b7:70:30:a7:2d:77:a5:
51:ac:06:25:10:ce:c8:89:9b:04:15:2e:54:26:c9:dd:11:70:
aa:3c:c6:8e:db:2d:e1:60:33:8b:60:14:48:d7:34:34:f5:b4:
8d:ff:da:80:4a:5d:d1:5d:ca:e5:c2:cf:b7:9e:91:13:be:f4:
0b:c7:c3:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:10:45 2025 by rpki-client