Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.mft
File: VHGK9qNvZqkZOTZKr8hkRauKbg4.mft (raw, json)
Hash identifier: PIrOdez8Zz6Yo/s7YvLaJd+NXlsfYJYacn8umJvIEGY=
Subject key identifier: 1F:0F:41:42:B0:F4:45:B8:F9:2F:AE:C0:62:6F:E3:2D:A4:60:9C:2E
Authority key identifier: 54:71:8A:F6:A3:6F:66:A9:19:39:36:4A:AF:C8:64:45:AB:8A:6E:0E
Certificate issuer: /CN=54718af6a36f66a91939364aafc86445ab8a6e0e
Certificate serial: 0197586D33D226A6B4035409AB9AA488B6DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHGK9qNvZqkZOTZKr8hkRauKbg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.mft
Manifest number: 1584
Signing time: Tue 10 Jun 2025 06:00:41 +0000
Manifest this update: Tue 10 Jun 2025 06:00:41 +0000
Manifest next update: Wed 11 Jun 2025 06:00:41 +0000
Files and hashes: 1: E6amiYi53XMdG38KpjAggGoL-xU.roa (hash: Z2VRJf48TJk3kvh/qYBt+PTaI/amPskBYdQSciVu6xk=)
2: VHGK9qNvZqkZOTZKr8hkRauKbg4.crl (hash: qCPvmYlk/9OF4HPkq8oUUKdk4r/D/ZI7q+AHJEz7w68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VHGK9qNvZqkZOTZKr8hkRauKbg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:6d:33:d2:26:a6:b4:03:54:09:ab:9a:a4:88:b6:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54718af6a36f66a91939364aafc86445ab8a6e0e
Validity
Not Before: Jun 10 06:00:41 2025 GMT
Not After : Jun 11 06:00:41 2025 GMT
Subject: CN=1f0f4142b0f445b8f92faec0626fe32da4609c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f8:3e:e3:a0:8c:e1:7b:76:ae:a0:3c:13:f2:
ff:09:3d:3f:56:cd:3a:7b:e8:c8:c0:c5:6f:71:ba:
10:ae:b7:c9:a0:56:54:a2:26:68:4c:07:a6:95:e9:
06:15:8c:2b:11:6b:c9:dd:85:ca:19:1c:e8:26:08:
a9:97:b3:b7:0c:c9:3b:d3:2b:6d:11:33:0f:37:3b:
ae:24:6c:d2:c1:84:60:ab:99:b4:8c:0d:c1:c3:30:
dc:9b:d3:7b:17:a6:c8:17:52:43:a5:3e:d0:fe:56:
92:4d:3d:59:f5:9e:a4:07:0f:07:d7:e8:55:0c:e7:
35:a5:bc:ef:66:a2:d9:12:bd:e8:f2:cc:4c:1f:54:
9b:c9:e6:bb:70:c4:93:d4:c8:93:8b:9f:66:c7:86:
ad:c6:79:9d:c9:aa:92:d7:cf:3b:41:8f:8c:12:67:
a8:3b:f7:16:99:1c:86:f4:c9:77:3a:ca:8d:23:b2:
5f:c3:a6:85:d2:7d:e8:fe:c3:dc:a4:fe:77:24:04:
82:96:48:6b:a5:bf:ca:61:29:df:07:f3:bb:55:c2:
bf:21:ad:6b:f1:f6:2d:f9:5e:f5:ed:2d:09:2b:08:
61:b1:5c:6e:fa:e0:a3:ec:b9:4f:0e:91:da:4b:a3:
e3:0a:0d:ca:c3:b3:58:1b:cc:48:0f:f1:14:73:33:
54:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:0F:41:42:B0:F4:45:B8:F9:2F:AE:C0:62:6F:E3:2D:A4:60:9C:2E
X509v3 Authority Key Identifier:
keyid:54:71:8A:F6:A3:6F:66:A9:19:39:36:4A:AF:C8:64:45:AB:8A:6E:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHGK9qNvZqkZOTZKr8hkRauKbg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:20:85:00:39:a5:57:b0:7a:55:ef:10:5a:2d:e6:ba:81:7e:
89:53:f9:a4:3a:50:38:74:55:15:f1:31:5a:70:ce:b5:80:5d:
b8:e9:e4:b4:f9:4d:79:eb:06:d1:67:53:13:ef:7d:54:b6:38:
63:f3:ec:a6:1a:00:25:62:71:d5:0e:8e:5b:c0:46:d3:c2:ca:
cb:b1:01:ab:54:70:64:c3:44:75:59:88:c6:74:f9:39:ec:3c:
f0:ce:81:07:c7:6b:f6:ff:48:11:e9:cc:cf:10:3b:cf:23:e0:
da:50:3b:79:e1:99:be:6f:a9:72:90:67:e0:d3:91:ff:1c:07:
e5:66:23:dd:08:ac:01:ab:25:8a:55:e1:2b:21:54:c3:7e:3e:
ea:a9:3e:f1:13:5e:a3:7a:92:a3:50:63:8d:46:53:80:1c:b6:
dc:9f:54:3f:52:9d:26:e2:23:90:60:0d:0b:d3:8b:f9:33:40:
6c:17:a4:5a:cf:f8:57:30:3c:cc:0a:d5:67:c4:ad:62:a2:ff:
c5:a1:1e:0a:32:6f:48:5d:66:31:90:2e:cd:5b:19:84:92:78:
c7:10:95:6a:30:35:28:c6:05:cd:87:d3:e2:c5:f2:fd:09:b4:
88:4c:c8:d5:d8:15:60:25:6e:6c:26:87:2c:2c:a8:8b:bf:2e:
a7:13:93:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 16:21:31 2025 by rpki-client