Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft
File: VSyaHJxP95PoiL1YPcqYFcxFdMA.mft (raw, json)
Hash identifier: ZCN8wtog/c7vPSWdrojsNCucZh7hDeJATOaZBEUw268=
Subject key identifier: DF:FC:B8:CD:63:1C:64:97:9B:14:14:F8:28:2C:B3:AB:9D:8D:4A:1A
Authority key identifier: 55:2C:9A:1C:9C:4F:F7:93:E8:88:BD:58:3D:CA:98:15:CC:45:74:C0
Certificate issuer: /CN=552c9a1c9c4ff793e888bd583dca9815cc4574c0
Certificate serial: 019746D4EDA7DCD09FBD11F60BF3C487BF98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSyaHJxP95PoiL1YPcqYFcxFdMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft
Manifest number: 150C
Signing time: Fri 06 Jun 2025 20:00:48 +0000
Manifest this update: Fri 06 Jun 2025 20:00:48 +0000
Manifest next update: Sat 07 Jun 2025 20:00:48 +0000
Files and hashes: 1: OY4UYP6MQJjL7Sxg2gh9CE4T1RE.roa (hash: ZrfsE/pEoCJELDNN+z7XrdVrqnmY0w2a+56TbedDcbs=)
2: VSyaHJxP95PoiL1YPcqYFcxFdMA.crl (hash: 5OeNt5mdz77ODJ9Nv2JVlijHpGr14Fr9gNonEpR17WQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VSyaHJxP95PoiL1YPcqYFcxFdMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:d4:ed:a7:dc:d0:9f:bd:11:f6:0b:f3:c4:87:bf:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552c9a1c9c4ff793e888bd583dca9815cc4574c0
Validity
Not Before: Jun 6 20:00:48 2025 GMT
Not After : Jun 7 20:00:48 2025 GMT
Subject: CN=dffcb8cd631c64979b1414f8282cb3ab9d8d4a1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:78:c3:24:e9:87:d3:18:6c:87:47:4b:07:78:
51:6c:35:ea:73:c2:14:af:ef:54:2d:6b:5d:5f:03:
7b:15:01:7e:fd:57:92:93:93:9f:50:32:d1:4a:48:
90:40:d0:16:b8:01:48:7e:09:50:f4:47:7e:fa:cb:
14:82:7e:b0:94:ff:e1:08:64:78:38:19:b1:37:43:
79:b4:35:ee:98:a0:96:cd:69:ac:97:14:b4:5d:68:
82:04:43:2f:95:47:da:7d:59:6e:b8:bf:ba:f5:74:
b9:67:0f:e6:cb:2f:67:1e:04:40:d9:35:42:ea:84:
31:2a:5b:c4:5a:db:35:ba:a6:c4:29:bc:07:d5:3b:
db:16:15:30:00:bb:0c:69:d1:2d:ab:66:c6:a5:36:
dc:1d:2c:de:33:f0:6b:ee:84:30:68:15:19:b6:ac:
8a:4f:d3:94:b8:b6:91:30:ae:f3:86:57:b7:bf:ff:
13:9a:b9:e9:58:97:48:fe:fe:71:a5:bb:f7:0b:4a:
54:ea:42:6e:e3:e9:92:e1:b8:78:89:79:79:dd:a6:
4e:07:ef:17:ff:39:81:2b:ae:51:99:38:9f:38:ee:
06:3c:4c:62:e3:40:66:8f:1d:91:b2:dc:af:bd:79:
73:64:f0:ee:6f:8f:a1:51:10:d4:90:5c:bf:96:80:
8e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:FC:B8:CD:63:1C:64:97:9B:14:14:F8:28:2C:B3:AB:9D:8D:4A:1A
X509v3 Authority Key Identifier:
keyid:55:2C:9A:1C:9C:4F:F7:93:E8:88:BD:58:3D:CA:98:15:CC:45:74:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSyaHJxP95PoiL1YPcqYFcxFdMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:2a:a9:86:1f:dd:a5:01:45:e4:e2:91:bf:95:8c:cc:1c:69:
16:e8:c5:64:62:9b:9e:df:86:49:b7:47:f7:88:3a:d9:a7:f1:
46:a2:2c:1e:00:4f:04:8c:b7:c0:36:d0:63:20:e8:f6:5b:88:
c1:49:5f:21:d1:2b:e0:e9:10:85:cd:84:6f:cd:39:73:36:f9:
1f:f4:9f:5f:7d:b3:05:6c:11:22:d8:20:4d:24:89:4c:c1:8e:
71:32:e0:14:4c:e1:c2:f7:be:98:e6:8b:bb:d2:6e:4e:c3:3a:
ed:4e:72:60:89:0b:e9:50:e4:ad:22:a3:2a:2b:f5:eb:8b:3f:
8d:eb:a9:d7:d0:23:40:84:c4:06:a8:d7:ec:4d:d5:40:4b:44:
a0:ad:44:da:1d:26:39:ea:a3:29:0e:dc:18:6b:44:7a:13:e9:
68:e8:4a:ac:08:9d:60:51:82:48:49:f9:45:7a:46:a7:22:4c:
79:ab:c1:55:5f:17:d1:0f:96:c9:92:e0:16:56:c0:19:f9:54:
0d:be:b3:81:cf:e5:c4:93:16:2a:48:96:a3:1c:0b:f5:c5:c2:
1f:0a:8d:55:b9:2c:35:4a:b4:cf:b0:a4:ec:75:8c:07:b8:b4:
c2:e1:3e:57:7e:e8:b1:f0:06:b2:1f:88:2f:fc:6d:7a:e2:59:
6b:ee:c8:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:00:27 2025 by rpki-client