Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3623e5-342e-4c9f-9183-0d3ad36eb161/1/VGWtK05zj1QvoOaBOPNiZkQeKaA.mft
File: VGWtK05zj1QvoOaBOPNiZkQeKaA.mft (raw, json)
Hash identifier: xyYsRkeEFyOZRCTfB2civxZv0xoI/jMd2TLHvn1T+Ig=
Subject key identifier: 49:97:6B:3B:F7:49:8C:22:A9:9C:CF:68:01:C5:70:BE:B1:36:EC:0B
Authority key identifier: 54:65:AD:2B:4E:73:8F:54:2F:A0:E6:81:38:F3:62:66:44:1E:29:A0
Certificate issuer: /CN=5465ad2b4e738f542fa0e68138f36266441e29a0
Certificate serial: 01974A7A9C614F7338CBD684288B2A9251C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGWtK05zj1QvoOaBOPNiZkQeKaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3623e5-342e-4c9f-9183-0d3ad36eb161/1/VGWtK05zj1QvoOaBOPNiZkQeKaA.mft
Manifest number: 0C2A
Signing time: Sat 07 Jun 2025 13:00:38 +0000
Manifest this update: Sat 07 Jun 2025 13:00:38 +0000
Manifest next update: Sun 08 Jun 2025 13:00:38 +0000
Files and hashes: 1: 7lJVxJeG2kQzily5Ys3pzO4Cx3c.roa (hash: 2p7G908u5hNgOkOPybVcD1KwXNRQ1cpOLTMbKHUwi8k=)
2: VGWtK05zj1QvoOaBOPNiZkQeKaA.crl (hash: qUJyECiktKIZOk1xfEKvx2NfCkW1b7M5GyMgJfxw0H8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3623e5-342e-4c9f-9183-0d3ad36eb161/1/VGWtK05zj1QvoOaBOPNiZkQeKaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/3623e5-342e-4c9f-9183-0d3ad36eb161/1/VGWtK05zj1QvoOaBOPNiZkQeKaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGWtK05zj1QvoOaBOPNiZkQeKaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:9c:61:4f:73:38:cb:d6:84:28:8b:2a:92:51:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5465ad2b4e738f542fa0e68138f36266441e29a0
Validity
Not Before: Jun 7 13:00:38 2025 GMT
Not After : Jun 8 13:00:38 2025 GMT
Subject: CN=49976b3bf7498c22a99ccf6801c570beb136ec0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3d:b8:9c:44:35:93:c4:31:02:3a:f2:0d:e1:
94:73:0a:40:49:a6:01:4a:9b:16:49:72:ba:4e:58:
b2:b8:7b:c3:15:75:ab:74:ec:3d:a8:8d:ec:96:f7:
a1:6e:ae:67:a5:b5:c0:60:2d:fc:eb:90:8d:a1:9d:
61:07:4b:81:2c:5b:04:ba:2c:e6:5f:68:50:47:1a:
15:26:c7:c2:83:0c:15:d2:48:16:e8:47:24:b8:30:
28:55:5d:c6:4c:79:8f:2c:69:dd:30:4e:c0:1a:31:
db:92:f4:33:06:73:ea:27:97:01:80:1c:95:e7:14:
89:56:12:e7:19:4d:e8:56:c6:eb:9c:08:2b:fc:38:
6b:40:f3:fe:ab:32:2d:4e:d2:be:83:bd:6e:dd:66:
bd:35:80:32:59:44:95:36:70:cc:cc:8b:bd:3f:d8:
70:28:4e:8a:2e:9f:b9:a1:d3:4e:2d:34:f8:ed:53:
f8:5d:8e:1a:5c:4b:0f:e4:ed:38:16:3d:eb:95:51:
a1:20:f0:76:58:09:f6:2d:08:6b:19:b0:83:54:66:
bf:8c:59:3f:61:e8:c1:e9:8a:61:fd:5b:47:82:d0:
d0:47:9b:1a:e0:2c:71:9a:91:65:3b:5f:48:d6:ff:
f9:5c:c4:4d:56:b9:70:8b:2e:ee:a2:12:f7:57:2b:
28:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:97:6B:3B:F7:49:8C:22:A9:9C:CF:68:01:C5:70:BE:B1:36:EC:0B
X509v3 Authority Key Identifier:
keyid:54:65:AD:2B:4E:73:8F:54:2F:A0:E6:81:38:F3:62:66:44:1E:29:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGWtK05zj1QvoOaBOPNiZkQeKaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3623e5-342e-4c9f-9183-0d3ad36eb161/1/VGWtK05zj1QvoOaBOPNiZkQeKaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3623e5-342e-4c9f-9183-0d3ad36eb161/1/VGWtK05zj1QvoOaBOPNiZkQeKaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:0c:29:84:94:49:8e:f2:fe:18:ab:1d:e4:8e:b1:ed:0b:44:
78:05:13:fb:74:5e:66:a4:fb:fb:c5:a0:bf:96:5a:1b:6a:d0:
95:c5:d8:03:4e:1c:06:10:32:d8:03:ab:38:33:c0:77:2a:c8:
fd:73:44:ca:2a:7b:f9:d3:d8:e9:81:93:f8:90:10:85:96:3a:
37:d0:04:22:c7:bc:2b:ef:49:ec:ec:23:7e:c5:00:f9:ad:28:
9f:30:40:bf:8c:ac:a2:ea:e0:95:b4:c4:77:02:b5:9a:3f:31:
6a:46:6d:9c:39:ff:20:ea:bd:05:bf:7e:ba:4f:d2:86:08:56:
d9:59:44:0a:d1:5b:7e:d0:1a:d3:60:30:78:83:fa:4b:ed:ea:
47:ff:51:9d:bc:38:d1:ce:ad:3c:bf:0d:37:03:79:00:ce:2b:
19:55:cf:55:e9:62:10:6c:27:3a:66:73:e6:d8:bc:45:4e:3c:
bc:fd:3f:7c:bc:8f:4f:b9:27:aa:ce:7b:64:f4:96:63:ca:90:
0b:6e:61:ab:e5:48:bf:04:dc:60:7a:26:66:af:14:a9:9c:ec:
e3:b7:9b:8b:f8:1b:7b:e3:f9:7c:18:26:23:82:8f:b2:8b:b7:
3a:f8:ce:9c:c7:18:d3:63:ce:6a:2f:b1:8b:5e:7f:1a:4a:1f:
74:b8:80:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:31:23 2025 by rpki-client