Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.mft
File: VCG6S1ORYtfvGRpWYgSeUf3DYis.mft (raw, json)
Hash identifier: Xa1u56m7Tj6YYXUySFh8FFHCM/OeCErxiKQAnnwxrD8=
Subject key identifier: EB:72:B9:99:67:10:32:DD:A8:A7:8F:B2:40:68:7D:3E:77:C3:61:E3
Authority key identifier: 54:21:BA:4B:53:91:62:D7:EF:19:1A:56:62:04:9E:51:FD:C3:62:2B
Certificate issuer: /CN=5421ba4b539162d7ef191a5662049e51fdc3622b
Certificate serial: 01976C2B4A8C4BB6B5CB6623E8F9BDFD922D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCG6S1ORYtfvGRpWYgSeUf3DYis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 02:01:05 +0000
Manifest this update: Sat 14 Jun 2025 02:01:05 +0000
Manifest next update: Sun 15 Jun 2025 02:01:05 +0000
Files and hashes: 1: QA9NVOBnP4tDAeAGKeBBrJK6jXk.roa (hash: /S3zUwTrf17IztbM7bS/w8GxX/h5PWsNVviHHhl5zF8=)
2: VCG6S1ORYtfvGRpWYgSeUf3DYis.crl (hash: fmQ+pLRFHRlrO6KYKQDJO34Z2V/271U8c98dycfjmbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.mft
rsync://rpki.ripe.net/repository/DEFAULT/VCG6S1ORYtfvGRpWYgSeUf3DYis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:4a:8c:4b:b6:b5:cb:66:23:e8:f9:bd:fd:92:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5421ba4b539162d7ef191a5662049e51fdc3622b
Validity
Not Before: Jun 14 02:01:05 2025 GMT
Not After : Jun 15 02:01:05 2025 GMT
Subject: CN=eb72b999671032dda8a78fb240687d3e77c361e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bc:6e:de:30:86:0a:d9:99:56:c8:e7:f5:7a:
f0:a2:3e:53:6c:f3:21:5c:4f:31:49:a5:49:e4:d4:
61:b0:0e:7f:38:39:dc:b3:70:51:a3:4e:66:42:00:
06:bc:9e:ae:01:37:16:34:94:56:e9:e7:98:04:7e:
c9:c1:12:fe:ac:48:c7:65:00:64:4e:16:dd:db:c8:
f7:50:ff:c3:81:1b:8b:45:43:31:bc:e5:91:cc:8b:
39:83:10:d4:a2:10:0d:04:03:66:a0:dd:27:86:ac:
d1:84:9f:f0:35:5f:27:ca:11:ff:60:6a:44:f9:08:
3f:96:58:7a:65:92:81:31:e7:ab:c2:12:d4:34:fa:
fb:33:63:dd:a9:fe:3f:d7:b5:f4:0b:cc:4b:92:75:
6a:cc:69:38:23:74:ef:48:fc:4c:1b:1e:18:4b:22:
7c:14:f0:b6:cd:6e:93:09:2e:b0:88:43:69:e8:98:
77:6c:52:9d:8d:61:d9:d2:40:23:87:b4:3b:d8:bc:
46:86:87:26:0b:ee:2d:06:c0:55:7e:dc:9e:92:24:
70:a7:54:90:47:87:60:71:4b:7f:42:60:77:78:92:
3b:36:b4:df:6a:a3:fc:18:ac:e6:85:39:4b:b0:4f:
04:88:74:f8:09:1a:47:27:51:20:6d:9b:b2:29:67:
cb:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:72:B9:99:67:10:32:DD:A8:A7:8F:B2:40:68:7D:3E:77:C3:61:E3
X509v3 Authority Key Identifier:
keyid:54:21:BA:4B:53:91:62:D7:EF:19:1A:56:62:04:9E:51:FD:C3:62:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCG6S1ORYtfvGRpWYgSeUf3DYis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:c9:65:8b:2d:e7:d0:eb:0b:b3:02:10:b9:68:ea:c8:ef:ae:
e9:03:e4:5a:38:2b:97:2d:9c:92:6f:bc:99:4a:52:32:c9:41:
95:45:fc:55:c5:44:3f:54:8b:7e:61:61:6e:b0:4b:2e:af:a4:
ec:68:61:94:b1:ec:81:fa:ae:c0:55:a9:64:51:62:8a:8a:7e:
db:9a:f0:5b:dc:5a:30:28:c4:42:6b:d1:23:c3:9c:8a:82:61:
bf:06:6b:f6:ed:cc:9b:7b:e4:28:75:fd:55:8e:55:c5:cb:c7:
e7:a1:1d:08:c4:53:17:5d:67:f6:b2:50:e2:95:f8:6a:d2:7b:
2e:0d:99:3f:be:9a:6e:c3:45:d9:02:16:78:01:61:89:d8:2e:
88:00:55:2a:6a:3e:59:03:2e:d9:ef:ac:51:38:94:25:f3:bb:
59:f8:23:3a:22:6b:e1:06:aa:35:f2:39:76:e1:39:35:04:3b:
4c:fd:a1:1d:aa:64:19:3a:ef:d9:84:5b:6c:17:74:92:c5:3c:
89:c0:04:e2:b3:3c:77:45:c5:2d:c6:a1:53:a3:84:2d:cb:1d:
cf:6f:d6:da:e9:b1:8b:82:19:48:31:3c:0c:2f:b0:3a:ff:40:
49:97:14:b2:35:73:82:80:f0:ff:76:07:da:fb:37:57:46:ea:
34:97:d3:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:02:11 2025 by rpki-client