Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c8aa4e-dd01-4a1a-8cc0-edf409fedfca/1/VUg02oYAyWxf3pEnj1IObA0m__M.mft
File: VUg02oYAyWxf3pEnj1IObA0m__M.mft (raw, json)
Hash identifier: XAjs1nHk1LaMmfLPmYB6NKoSNv3HIEsQFZeP/h+ga0k=
Subject key identifier: 15:71:84:C2:1E:15:E6:DC:68:44:50:4C:31:C1:F3:58:1C:19:A7:51
Authority key identifier: 55:48:34:DA:86:00:C9:6C:5F:DE:91:27:8F:52:0E:6C:0D:26:FF:F3
Certificate issuer: /CN=554834da8600c96c5fde91278f520e6c0d26fff3
Certificate serial: 0197696156B5CC60017DB3E95BF3D6320216
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VUg02oYAyWxf3pEnj1IObA0m__M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/c8aa4e-dd01-4a1a-8cc0-edf409fedfca/1/VUg02oYAyWxf3pEnj1IObA0m__M.mft
Manifest number: 158D
Signing time: Fri 13 Jun 2025 13:01:16 +0000
Manifest this update: Fri 13 Jun 2025 13:01:16 +0000
Manifest next update: Sat 14 Jun 2025 13:01:16 +0000
Files and hashes: 1: 5ViHo8CP-gF060JRbv2sDnYVvwI.roa (hash: QuO6jCw1G7bEtuq5gtmVrfr4TZNPSxo88gcCHtVd/jE=)
2: 8fof93hByfwq17Ckt-3keL0U8qE.roa (hash: fPV8OZM9BBwYkvL7Bz4KdU4owCtM7tBBVj0Rie52yyQ=)
3: VUg02oYAyWxf3pEnj1IObA0m__M.crl (hash: XRZRI9vUmn9ImSJR+ItE6tdMekB4lZmwdCSpj+JO4/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/c8aa4e-dd01-4a1a-8cc0-edf409fedfca/1/VUg02oYAyWxf3pEnj1IObA0m__M.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/c8aa4e-dd01-4a1a-8cc0-edf409fedfca/1/VUg02oYAyWxf3pEnj1IObA0m__M.mft
rsync://rpki.ripe.net/repository/DEFAULT/VUg02oYAyWxf3pEnj1IObA0m__M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:56:b5:cc:60:01:7d:b3:e9:5b:f3:d6:32:02:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=554834da8600c96c5fde91278f520e6c0d26fff3
Validity
Not Before: Jun 13 13:01:16 2025 GMT
Not After : Jun 14 13:01:16 2025 GMT
Subject: CN=157184c21e15e6dc6844504c31c1f3581c19a751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:57:51:6c:9c:28:1b:a7:2b:9a:6e:d8:cc:70:
90:81:c5:78:08:8c:2c:ac:a5:33:db:a6:cb:3a:47:
f6:3b:50:da:71:b9:00:ef:f7:d9:bc:0e:48:d8:98:
ed:51:d9:4a:58:33:77:b1:d6:b2:d3:26:21:f6:58:
e2:a6:70:9e:bd:ab:1f:79:43:a8:b8:51:ec:b4:e1:
0c:63:3f:69:05:77:43:d2:ca:57:6b:c1:f1:37:43:
14:72:0f:08:9f:db:f6:8a:98:60:01:34:37:fc:86:
bb:e5:e2:a7:f3:8f:a8:f1:4b:8f:57:de:87:6f:6e:
78:b9:f1:82:81:aa:b5:46:70:ad:06:b6:df:77:fd:
46:31:c1:40:2b:93:90:91:fe:7e:55:60:45:77:7d:
61:b9:1f:36:9c:cb:47:45:2c:04:f1:0b:4f:03:6f:
80:66:fe:98:58:d4:ff:83:19:0c:57:21:51:40:12:
55:c4:33:11:41:62:31:5c:5f:9c:1f:12:db:f4:20:
9a:6c:9b:c0:76:b4:8e:24:13:81:f6:a0:15:2a:b1:
6a:aa:69:8a:d1:82:5c:91:10:99:6d:a7:cb:5a:eb:
8e:ce:06:a1:d4:98:66:d3:12:5b:0b:fc:ac:59:68:
69:93:bb:76:94:98:04:8b:ac:5d:38:bf:05:27:47:
c5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:71:84:C2:1E:15:E6:DC:68:44:50:4C:31:C1:F3:58:1C:19:A7:51
X509v3 Authority Key Identifier:
keyid:55:48:34:DA:86:00:C9:6C:5F:DE:91:27:8F:52:0E:6C:0D:26:FF:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUg02oYAyWxf3pEnj1IObA0m__M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c8aa4e-dd01-4a1a-8cc0-edf409fedfca/1/VUg02oYAyWxf3pEnj1IObA0m__M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c8aa4e-dd01-4a1a-8cc0-edf409fedfca/1/VUg02oYAyWxf3pEnj1IObA0m__M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:f4:98:7a:18:af:42:75:0b:a5:34:c2:64:74:e7:3e:24:ca:
64:98:30:5b:3f:00:91:da:3c:97:36:6b:ec:4d:57:a5:f7:cd:
b7:b3:7d:5d:9f:6a:61:8a:b2:c2:23:aa:79:31:a1:97:e2:32:
42:94:17:ff:1f:c4:bf:e7:02:72:25:da:69:37:a2:cd:18:d5:
40:b6:00:b8:d0:37:e1:da:9c:e0:70:7c:d6:1f:c3:96:5a:e7:
b2:1d:7c:37:fa:35:67:ff:c6:77:f4:f3:52:e7:43:d3:50:94:
09:b2:88:49:a2:74:1d:96:99:6b:88:5f:e5:16:ba:82:f3:26:
3c:f4:41:5a:45:b5:e3:8b:fb:89:67:5a:af:69:6a:44:07:69:
50:1c:f0:cd:0f:65:59:74:4a:8d:cd:b9:79:fb:71:6a:ec:42:
2e:1d:e8:40:ae:0b:d7:d6:fa:2d:9f:06:64:d0:ee:1b:42:d4:
a5:8c:fd:13:20:8a:8a:aa:19:48:97:43:92:72:f1:ab:08:eb:
b5:b7:ae:a9:da:1f:68:83:90:77:21:92:73:97:cf:d0:20:7f:
a0:32:ea:32:15:64:19:1f:3b:df:b8:8a:0f:b2:a4:a8:ed:8e:
4a:9f:40:90:87:98:0e:2e:24:7b:34:73:db:1e:fd:8d:e7:75:
36:7b:ee:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:30:21 2025 by rpki-client