Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
File: VHbDyngMxXdErb6QoPOU8dHNcvM.mft (raw, json)
Hash identifier: XJYTOhQltCFApjhZo3mJ44S5HAhT9L/TBu+g6YLlrbw=
Subject key identifier: BB:0D:F5:F8:0B:DF:D3:1F:F2:A9:89:2D:89:1B:A0:A1:94:80:15:C1
Authority key identifier: 54:76:C3:CA:78:0C:C5:77:44:AD:BE:90:A0:F3:94:F1:D1:CD:72:F3
Certificate issuer: /CN=5476c3ca780cc57744adbe90a0f394f1d1cd72f3
Certificate serial: 019771F5F610AE0B3C72E74056583B657153
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHbDyngMxXdErb6QoPOU8dHNcvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
Manifest number: 01FA
Signing time: Sun 15 Jun 2025 05:00:34 +0000
Manifest this update: Sun 15 Jun 2025 05:00:34 +0000
Manifest next update: Mon 16 Jun 2025 05:00:34 +0000
Files and hashes: 1: J1F-UaHfYAClgmD-n-h_bemva1g.roa (hash: LkkLFeCVLkb+GZvSdm+hQS9Yt//NS73l5BEh3ajjGOM=)
2: Mzf3T5ZCYDRP9VJBsVQOjUFWDdY.roa (hash: fMfmlTHaxDxkKj4QIO7HlLPP5wMEtHiZKgYxRA6zmJA=)
3: VHbDyngMxXdErb6QoPOU8dHNcvM.crl (hash: Byro6unF6jbZ8yFr8DEnW/K3eWcVtQia11IkpTKat0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VHbDyngMxXdErb6QoPOU8dHNcvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:f5:f6:10:ae:0b:3c:72:e7:40:56:58:3b:65:71:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5476c3ca780cc57744adbe90a0f394f1d1cd72f3
Validity
Not Before: Jun 15 05:00:34 2025 GMT
Not After : Jun 16 05:00:34 2025 GMT
Subject: CN=bb0df5f80bdfd31ff2a9892d891ba0a1948015c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7d:ca:9b:39:cd:d3:cc:8b:66:30:ab:df:bd:
14:c6:a2:fa:9c:91:f7:99:c4:48:e8:6d:83:c4:43:
42:26:fd:db:e4:f0:0e:44:53:2c:cb:e6:97:90:72:
ad:6c:14:1e:e2:e9:6b:72:0e:b1:3e:72:c0:42:e4:
eb:71:95:df:43:ee:50:96:2c:24:ca:dd:c2:e8:70:
23:c0:f7:20:2e:fd:65:6a:90:19:ee:6b:68:79:78:
7b:ed:cd:18:eb:7c:21:db:9c:9e:bb:42:b7:70:26:
07:9d:ea:28:f6:7b:c3:a3:be:f8:f5:bf:9a:1b:a5:
71:c7:77:b6:0e:bd:e9:70:fe:84:ba:cf:91:28:d9:
d7:be:89:65:22:ff:6f:b9:53:b7:7a:c1:0f:cf:e2:
03:6b:0e:6e:ac:37:29:05:10:7c:4b:ae:a5:45:6f:
92:03:27:5f:e9:49:74:1c:6f:ce:71:22:96:a0:fd:
25:d0:54:68:1f:4d:1b:1a:23:88:a8:36:f7:b2:df:
4c:86:55:4e:80:a7:5e:69:c7:58:03:b1:3e:ae:af:
6c:75:10:31:1c:fc:ba:51:85:52:14:46:27:cd:5d:
bc:1f:0c:ff:23:b0:af:db:4f:ef:25:b5:dd:e6:de:
67:f7:bd:d7:0b:ac:4a:29:cf:a2:05:89:62:e8:7d:
35:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:0D:F5:F8:0B:DF:D3:1F:F2:A9:89:2D:89:1B:A0:A1:94:80:15:C1
X509v3 Authority Key Identifier:
keyid:54:76:C3:CA:78:0C:C5:77:44:AD:BE:90:A0:F3:94:F1:D1:CD:72:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHbDyngMxXdErb6QoPOU8dHNcvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:b7:81:90:2f:73:e2:96:6d:64:dc:9d:c7:a2:d6:16:5c:68:
b6:56:d8:8c:93:a3:95:3a:cf:37:63:a9:96:1b:e9:b5:50:7f:
45:89:6a:c5:56:ab:2b:b8:c3:b5:a2:2c:18:f4:f9:f3:61:b8:
6b:91:48:f2:32:e4:5d:7e:06:37:24:f5:2b:f2:34:c9:7b:7b:
4e:8a:18:25:e1:ed:47:96:b0:97:c2:5d:b7:bc:3b:83:07:b8:
61:85:88:c2:3c:04:f4:2c:48:9e:87:27:91:a7:8a:64:95:58:
7f:60:5c:0e:86:50:c1:4c:39:74:d5:9a:a6:2c:53:76:70:dd:
00:ea:5c:7e:17:33:10:b7:b2:69:b0:01:a1:e0:c8:89:ae:48:
05:f7:ed:5d:15:b7:93:5f:33:9d:55:58:b0:d3:9c:99:80:42:
c3:b5:e2:6c:37:55:c1:66:f2:47:e6:90:03:5e:8b:33:ff:10:
ce:3c:3c:32:3c:31:6b:83:e1:99:11:40:48:b3:42:a8:92:19:
c2:d5:73:d0:08:55:47:dd:c1:f7:53:68:6f:24:5b:ea:cd:6e:
04:35:f1:30:19:c7:0c:09:d1:13:bc:4d:8d:f7:6c:4e:0d:0d:
65:de:de:71:f4:7f:f4:12:06:b6:fb:d8:e7:4b:a0:48:50:a5:
11:6e:f2:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:30:40 2025 by rpki-client