Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/9d698d-d277-497f-833d-a2127c2aa1b3/1/vstVJuhB53DLVWTzBMxmluqx5Ls.mft
File: vstVJuhB53DLVWTzBMxmluqx5Ls.mft (raw, json)
Hash identifier: 1mFepBYghyQNsDjdUjFDkpfJJlB+cE7e36BXm0qy5R4=
Subject key identifier: C1:7C:47:D7:35:C2:BE:4E:FC:44:F8:12:43:57:DA:63:9D:9A:DC:4C
Authority key identifier: BE:CB:55:26:E8:41:E7:70:CB:55:64:F3:04:CC:66:96:EA:B1:E4:BB
Certificate issuer: /CN=becb5526e841e770cb5564f304cc6696eab1e4bb
Certificate serial: 0197499F676447EC1206555E1C9D3C9F04BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vstVJuhB53DLVWTzBMxmluqx5Ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/9d698d-d277-497f-833d-a2127c2aa1b3/1/vstVJuhB53DLVWTzBMxmluqx5Ls.mft
Manifest number: 04B8
Signing time: Sat 07 Jun 2025 09:01:12 +0000
Manifest this update: Sat 07 Jun 2025 09:01:12 +0000
Manifest next update: Sun 08 Jun 2025 09:01:12 +0000
Files and hashes: 1: HD7ZQ20BrfhIQig7jEtYMWBXqig.roa (hash: 0U8nx89LMB5Sbx+cfc6esGNSApn9xmAb50VsRUl9HHk=)
2: vstVJuhB53DLVWTzBMxmluqx5Ls.crl (hash: MyyEW0jkK02vN5JIcKjjcAvLDlu5olTO3qpEDAzxKYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/9d698d-d277-497f-833d-a2127c2aa1b3/1/vstVJuhB53DLVWTzBMxmluqx5Ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/9d698d-d277-497f-833d-a2127c2aa1b3/1/vstVJuhB53DLVWTzBMxmluqx5Ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/vstVJuhB53DLVWTzBMxmluqx5Ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:67:64:47:ec:12:06:55:5e:1c:9d:3c:9f:04:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=becb5526e841e770cb5564f304cc6696eab1e4bb
Validity
Not Before: Jun 7 09:01:12 2025 GMT
Not After : Jun 8 09:01:12 2025 GMT
Subject: CN=c17c47d735c2be4efc44f8124357da639d9adc4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:3e:24:af:75:53:6a:b8:fa:b3:eb:e5:84:28:
05:4b:91:a3:ed:1f:a3:67:2b:da:30:23:fd:0f:17:
06:ed:03:b2:92:7a:7e:e7:d7:dc:2f:75:01:86:96:
81:8a:59:c9:0a:77:a2:77:b6:72:38:71:1c:71:51:
4c:4b:d7:4f:f2:f2:9d:81:a2:fe:8c:ed:25:a8:e3:
b8:82:4b:51:43:e5:6f:31:f8:98:81:bf:1a:b7:72:
8f:5b:4f:49:7a:6d:f3:26:29:09:c3:43:29:da:84:
fa:1c:01:bf:f0:39:be:ee:b6:12:8f:97:85:87:b9:
bf:09:4b:b2:10:51:e6:5b:fe:f5:2c:c9:43:76:c3:
ea:91:32:5b:b2:37:5b:38:83:2f:de:42:20:88:2d:
12:55:d4:a4:ba:15:69:c4:4a:83:98:5d:3e:39:06:
31:ce:31:f2:2e:30:b2:a7:8c:89:ad:82:7f:53:8e:
31:ca:85:f4:c5:60:01:aa:f9:15:d0:ba:a6:f9:dd:
1e:e9:b7:0f:6b:5b:f5:39:65:92:5f:79:51:7d:d2:
61:6d:e8:57:c4:d1:72:ea:70:cb:d8:8f:1c:14:0b:
a5:93:ee:fa:1e:88:e7:c9:13:39:a8:b3:69:0a:6b:
03:2d:8e:1e:2b:49:9b:68:72:cf:9d:5e:a5:22:3e:
32:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:7C:47:D7:35:C2:BE:4E:FC:44:F8:12:43:57:DA:63:9D:9A:DC:4C
X509v3 Authority Key Identifier:
keyid:BE:CB:55:26:E8:41:E7:70:CB:55:64:F3:04:CC:66:96:EA:B1:E4:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vstVJuhB53DLVWTzBMxmluqx5Ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/9d698d-d277-497f-833d-a2127c2aa1b3/1/vstVJuhB53DLVWTzBMxmluqx5Ls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/9d698d-d277-497f-833d-a2127c2aa1b3/1/vstVJuhB53DLVWTzBMxmluqx5Ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:6f:ee:4e:bd:e9:88:83:bf:3a:d9:41:dd:76:bb:38:1b:83:
b8:50:40:cc:1e:71:09:2e:19:d9:46:2d:bb:b2:81:35:e4:ac:
c7:19:59:1b:71:0c:db:01:9e:69:08:11:2e:d9:94:0b:9a:33:
65:21:c8:61:53:37:36:7c:1c:12:11:2a:3a:e4:22:36:16:a3:
84:40:02:5d:a2:51:9d:f8:5e:e4:d9:c4:0f:a3:47:48:42:5b:
47:84:8d:8f:77:bf:66:73:a9:02:28:72:8f:dd:93:eb:d0:42:
2c:64:ce:60:5d:be:73:09:6b:04:4f:2a:a5:b2:6b:5e:38:b8:
f3:5d:5a:2c:11:43:1e:61:8b:40:80:1b:76:bc:5a:21:6e:85:
8a:5a:bf:dd:04:f6:e4:1f:49:4a:91:41:77:1a:38:66:0b:94:
a3:71:19:b9:b9:e5:5f:e8:6e:e6:27:2b:05:3f:f7:1a:ba:eb:
04:db:4a:ce:f7:4e:77:fc:ea:12:9f:ae:09:71:fc:00:7c:08:
f0:58:29:4c:1e:1d:31:c6:e5:19:7d:0d:2e:ed:72:de:65:9d:
bb:94:5d:5c:be:5c:8c:80:99:fb:17:12:73:46:e3:c8:0f:87:
af:66:5c:ee:08:6d:c6:f6:47:a8:35:54:27:73:cf:dc:a9:6c:
a4:e4:21:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:12:45 2025 by rpki-client