Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.mft
File: VbU-iTBDTHKlgHoFUIK5hZmycH8.mft (raw, json)
Hash identifier: VbbjwfPAO66pN9wc8Me0ZsXuzRwNAHO+LCI7hddw5Wc=
Subject key identifier: 2E:27:E5:13:03:30:62:ED:1E:70:69:AD:49:61:46:3E:5A:C6:A0:2B
Authority key identifier: 55:B5:3E:89:30:43:4C:72:A5:80:7A:05:50:82:B9:85:99:B2:70:7F
Certificate issuer: /CN=55b53e8930434c72a5807a055082b98599b2707f
Certificate serial: 019748FA245098B354CAE7229926E841617D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbU-iTBDTHKlgHoFUIK5hZmycH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.mft
Manifest number: FD
Signing time: Sat 07 Jun 2025 06:00:42 +0000
Manifest this update: Sat 07 Jun 2025 06:00:42 +0000
Manifest next update: Sun 08 Jun 2025 06:00:42 +0000
Files and hashes: 1: UfsWVLXlKS-YeedBQ6KLEcHVpj4.roa (hash: boZrSX+IxVlQdGAIp3Em+CvprqHqmfbsNvAMqDk06S4=)
2: VbU-iTBDTHKlgHoFUIK5hZmycH8.crl (hash: gLlCfjvehsTMeqWMYGovkTSs7LnDzT9hoqVIYG2GWhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbU-iTBDTHKlgHoFUIK5hZmycH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:24:50:98:b3:54:ca:e7:22:99:26:e8:41:61:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55b53e8930434c72a5807a055082b98599b2707f
Validity
Not Before: Jun 7 06:00:42 2025 GMT
Not After : Jun 8 06:00:42 2025 GMT
Subject: CN=2e27e513033062ed1e7069ad4961463e5ac6a02b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:da:7b:7a:e8:19:e0:b5:af:0f:a5:24:f3:63:
c4:f0:05:ee:ab:7a:24:3d:73:ee:ff:72:30:63:3c:
44:60:31:95:97:59:36:7f:8c:5a:3e:29:e7:b4:e9:
c7:66:f3:90:51:d2:da:de:61:cf:4d:5a:7e:32:ae:
31:a2:bd:a0:c1:e5:07:a4:20:57:5d:a2:03:c5:e8:
56:9f:f9:63:26:1e:54:56:93:40:ea:20:64:2c:00:
0f:3e:ab:fb:1b:98:ec:9a:88:c8:3f:dd:47:43:26:
c6:1e:80:fe:39:dd:9a:4f:37:5e:f6:95:53:5e:d2:
c8:47:93:64:e2:8d:1c:2f:1c:f9:78:56:ac:78:58:
b6:b2:a4:1b:11:b8:fd:f0:8d:d2:cf:1f:a5:db:a6:
fa:d6:64:0e:4f:fd:2d:a6:ab:91:ce:61:4a:c7:03:
a6:0e:0d:be:3d:6b:ec:eb:48:5b:c6:2e:e2:a3:c2:
79:5f:1b:a9:64:c5:00:14:37:d6:73:e8:87:f1:aa:
da:aa:4b:ba:6a:df:7c:a2:e4:67:8e:b1:4c:b3:37:
b7:76:38:ec:5a:8e:a8:54:f7:7f:9e:0f:69:d0:33:
5d:57:55:b3:d8:fb:c8:d1:2d:99:00:70:81:74:8b:
4f:f5:03:7d:d2:af:51:94:00:ae:a4:0f:cb:f3:0d:
af:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:27:E5:13:03:30:62:ED:1E:70:69:AD:49:61:46:3E:5A:C6:A0:2B
X509v3 Authority Key Identifier:
keyid:55:B5:3E:89:30:43:4C:72:A5:80:7A:05:50:82:B9:85:99:B2:70:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbU-iTBDTHKlgHoFUIK5hZmycH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:8a:3e:d0:5a:ae:10:8a:74:71:87:ba:66:a8:a7:1c:d0:09:
6c:fa:11:3e:10:94:89:b8:de:6c:13:56:ad:32:79:d3:cd:1d:
8b:9d:98:52:3f:83:f4:64:69:f7:df:8b:44:4f:80:2d:1e:4b:
0c:5b:37:3f:a8:8e:86:fe:b0:bb:c2:d6:c4:11:d2:00:2a:ea:
70:99:f8:4b:95:de:20:95:c8:e7:c9:ea:0c:c4:57:25:39:5c:
3d:04:1b:98:d2:73:ed:7f:1c:a9:7f:b5:79:36:78:61:bb:09:
4b:c6:19:23:80:90:42:2f:09:e7:64:10:f3:5a:9d:fb:f7:8b:
38:3e:66:60:fa:ca:bd:73:be:00:18:52:cb:e5:cc:8b:73:ee:
29:33:e8:f2:45:66:91:ab:80:92:25:de:d8:82:a5:7c:0e:0c:
0a:c6:98:41:61:18:0d:11:e4:36:40:fe:43:6a:7a:10:93:21:
64:0d:56:60:14:8c:21:7f:9f:3f:ca:60:e5:c2:0e:1e:b4:e9:
73:41:21:13:7d:92:3f:81:a5:c8:22:4d:dd:c3:88:bd:e1:5a:
db:d9:ea:0b:4e:13:a7:4c:d2:9d:cb:ea:72:88:65:e8:11:9d:
43:9d:6c:7b:6c:fc:a0:f3:a2:53:b1:84:81:84:bf:ab:a1:b4:
05:b0:9c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:48:55 2025 by rpki-client