Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
File: VSrToLS3ToWvVPWK11owJrffcYE.mft (raw, json)
Hash identifier: TEkrqMcF4JkN59g0L6X+Fad/gEdSnnNrdLCidUf7HTw=
Subject key identifier: 43:26:E2:B1:3E:C0:5F:93:45:11:D8:A9:46:5F:9B:10:DA:51:3F:06
Authority key identifier: 55:2A:D3:A0:B4:B7:4E:85:AF:54:F5:8A:D7:5A:30:26:B7:DF:71:81
Certificate issuer: /CN=552ad3a0b4b74e85af54f58ad75a3026b7df7181
Certificate serial: 01976CCFEE96122AA14144E954184980195E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSrToLS3ToWvVPWK11owJrffcYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
Manifest number: 15C9
Signing time: Sat 14 Jun 2025 05:00:55 +0000
Manifest this update: Sat 14 Jun 2025 05:00:55 +0000
Manifest next update: Sun 15 Jun 2025 05:00:55 +0000
Files and hashes: 1: 6jmBqQ69ucquob5LYoU8XO0aoaM.roa (hash: iVwx0LgAhkHT9krjXAM19RbPrDxsVzpzta/Wm4cdzGM=)
2: Tc3s-2xco0JsiKKHs4HafxTscjs.roa (hash: ldDhuMj8RJQOwqkPXb97Us2/HhGxeidwxkit00ybDDk=)
3: VSrToLS3ToWvVPWK11owJrffcYE.crl (hash: JZRsdpLwNUb9ZXwwNKaCLuOgJZ41QP9cFvxl7Q4L/cs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VSrToLS3ToWvVPWK11owJrffcYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:ee:96:12:2a:a1:41:44:e9:54:18:49:80:19:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552ad3a0b4b74e85af54f58ad75a3026b7df7181
Validity
Not Before: Jun 14 05:00:55 2025 GMT
Not After : Jun 15 05:00:55 2025 GMT
Subject: CN=4326e2b13ec05f934511d8a9465f9b10da513f06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a5:8b:6a:cf:ed:1f:b5:77:22:fe:16:7b:fb:
83:0f:82:0a:b0:8a:89:e0:ec:0e:da:5b:43:f9:b9:
26:62:f6:2a:c2:ae:63:06:f8:4c:d4:28:10:01:44:
f1:6b:74:7e:c2:45:ee:3f:3f:4f:1d:cf:f9:a3:d8:
6e:0d:9d:81:2e:34:61:e7:d3:0a:8b:aa:c3:cd:a7:
00:5a:ed:f3:2b:ad:41:6d:42:43:8f:43:10:13:17:
15:6e:bd:c5:e9:3c:da:f0:f5:87:b1:62:50:c7:8e:
86:02:99:ef:7a:53:48:10:65:53:9b:57:dc:0a:cd:
66:9b:03:d7:d1:5c:f7:11:e3:d2:09:0e:c9:67:db:
70:7d:28:f3:bc:d0:e1:16:67:53:7c:26:0f:7e:f7:
c2:d1:e5:d9:16:20:42:da:2c:de:81:92:56:24:aa:
7f:f5:37:0e:ae:41:1c:3f:4b:39:df:9a:18:ee:b9:
2a:64:31:73:a0:b7:39:67:cd:a1:2f:78:be:03:71:
07:a1:77:18:46:43:0d:9b:f2:f1:f9:bd:fe:5f:aa:
1a:88:a2:69:ee:c4:95:9c:29:93:17:31:1e:2a:aa:
b1:a2:ba:72:14:e2:21:30:de:5c:00:be:76:3d:42:
23:b8:3b:19:89:68:31:3f:ff:20:e9:e5:49:28:d7:
3e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:26:E2:B1:3E:C0:5F:93:45:11:D8:A9:46:5F:9B:10:DA:51:3F:06
X509v3 Authority Key Identifier:
keyid:55:2A:D3:A0:B4:B7:4E:85:AF:54:F5:8A:D7:5A:30:26:B7:DF:71:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSrToLS3ToWvVPWK11owJrffcYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:9f:58:e5:47:4a:af:5a:03:a7:2d:32:8b:d7:45:83:95:98:
60:72:f7:fd:e0:08:eb:fa:58:9a:43:19:e0:c7:24:bf:d3:0c:
67:cc:52:21:5d:17:61:9a:5b:f8:5a:a9:7f:bd:9e:74:b6:2a:
bc:3a:83:ce:91:09:15:29:b3:b5:ff:54:91:f4:9e:61:f3:b6:
d2:eb:4c:e1:23:d6:56:a4:33:33:b1:32:43:56:ad:43:46:7a:
67:25:59:f2:3b:6d:e6:ff:c7:0f:ef:35:d6:34:0b:49:33:f1:
a6:07:76:b4:a7:60:0b:e3:2d:4e:be:4c:21:da:60:4b:8b:af:
a0:7a:e1:08:5d:fd:f8:be:a0:1c:fd:b5:c4:a3:d4:b0:f0:d3:
21:c3:54:89:76:56:47:34:4d:42:fd:a2:e9:27:1d:86:0e:46:
49:2c:0d:b9:79:8f:d3:28:18:32:5f:7d:1a:92:1e:de:fc:7d:
12:d8:f5:ec:5d:1c:65:81:ab:d9:ed:ea:65:46:7a:ee:1b:9d:
10:c9:9f:b0:bf:6d:5d:a6:3d:96:46:65:59:f6:c5:02:99:1f:
62:10:d9:97:d7:8f:c4:e6:12:15:98:2d:76:27:00:ef:62:ac:
22:d7:2c:22:4d:95:1e:b8:af:30:ec:d9:c5:c9:1b:1d:ac:bd:
a7:94:06:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:09:51 2025 by rpki-client