Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.mft
File: VHGK9qNvZqkZOTZKr8hkRauKbg4.mft (raw, json)
Hash identifier: DCRrDUZg+JtAx1rcOqzqLglWTmjOSeUVgShAiT9r/LQ=
Subject key identifier: C4:EC:C8:D4:B2:C7:9A:0E:5E:50:44:CC:C8:CA:E3:A6:8D:A9:90:D2
Authority key identifier: 54:71:8A:F6:A3:6F:66:A9:19:39:36:4A:AF:C8:64:45:AB:8A:6E:0E
Certificate issuer: /CN=54718af6a36f66a91939364aafc86445ab8a6e0e
Certificate serial: 019752A208B11E298B9C73FB28330029EE55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHGK9qNvZqkZOTZKr8hkRauKbg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.mft
Manifest number: 1581
Signing time: Mon 09 Jun 2025 03:00:40 +0000
Manifest this update: Mon 09 Jun 2025 03:00:40 +0000
Manifest next update: Tue 10 Jun 2025 03:00:40 +0000
Files and hashes: 1: E6amiYi53XMdG38KpjAggGoL-xU.roa (hash: Z2VRJf48TJk3kvh/qYBt+PTaI/amPskBYdQSciVu6xk=)
2: VHGK9qNvZqkZOTZKr8hkRauKbg4.crl (hash: e6e+ivzhIJKkUG2UnXNv8ZNWBTMsdnh6djjST3OktbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VHGK9qNvZqkZOTZKr8hkRauKbg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 03:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:a2:08:b1:1e:29:8b:9c:73:fb:28:33:00:29:ee:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54718af6a36f66a91939364aafc86445ab8a6e0e
Validity
Not Before: Jun 9 03:00:40 2025 GMT
Not After : Jun 10 03:00:40 2025 GMT
Subject: CN=c4ecc8d4b2c79a0e5e5044ccc8cae3a68da990d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:84:d4:0d:f7:34:b4:95:a1:15:04:38:43:56:
c6:a2:be:d5:b2:88:58:42:e5:93:4f:b9:31:ad:0e:
04:a2:7d:81:ec:05:7f:bb:d3:9f:33:4b:4d:b4:5c:
e4:23:7f:98:9d:79:76:16:27:87:0b:17:c7:7e:c9:
c2:35:c5:73:b2:0b:6f:6b:c6:77:5b:41:ef:ff:0c:
a3:1e:a8:76:b1:93:64:59:ad:31:a9:e0:bd:33:39:
df:57:0f:8f:a6:32:c3:eb:b5:26:cb:83:2e:74:b8:
1d:fb:ee:4b:4f:7d:ad:bb:6d:62:42:d9:fa:03:fe:
c5:66:54:b7:d8:69:01:58:ad:ba:07:3b:9d:11:85:
8f:7c:15:25:eb:9e:f3:49:3b:ac:b9:3b:ad:3e:00:
ee:fa:3a:d6:9b:bb:fd:a6:36:f9:90:3e:c8:3f:7f:
24:59:8e:1f:5b:f9:e2:39:74:53:d2:30:e7:58:ad:
60:64:dc:96:c8:61:c9:23:94:d2:19:dc:d8:38:da:
a9:73:cd:41:a1:c6:d0:d0:fb:bd:56:8a:26:f2:39:
e1:28:33:5f:b2:89:c7:32:9b:f2:80:15:69:a4:ae:
03:35:5d:a2:9d:ad:00:4d:51:76:4e:7c:2a:9b:de:
27:7d:5d:17:1f:31:6b:a5:04:36:aa:11:69:ce:68:
9d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:EC:C8:D4:B2:C7:9A:0E:5E:50:44:CC:C8:CA:E3:A6:8D:A9:90:D2
X509v3 Authority Key Identifier:
keyid:54:71:8A:F6:A3:6F:66:A9:19:39:36:4A:AF:C8:64:45:AB:8A:6E:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHGK9qNvZqkZOTZKr8hkRauKbg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:76:ec:f4:3e:f3:e6:5c:9e:9d:d8:5e:e4:3a:0d:0f:70:61:
6c:b8:d1:72:63:23:a2:97:ce:3b:a0:b5:95:b5:a5:56:32:7c:
8a:53:41:f4:bd:0c:69:c1:03:5b:e8:52:1b:66:7c:1f:0d:44:
41:bf:c1:16:1d:52:56:54:fa:39:fa:1e:db:3e:6f:65:3a:d1:
d3:2d:8c:09:e7:22:49:4f:be:ef:95:20:78:b7:b1:52:ea:66:
12:5f:8e:2c:cb:98:7e:74:d0:8f:dd:68:82:df:74:14:29:c6:
0a:de:a9:ca:8f:8a:26:6f:48:88:dd:b2:99:6d:80:12:ef:33:
01:70:f3:fb:2e:15:82:63:a6:5c:37:61:4e:47:20:65:90:2e:
64:a5:29:61:3c:6c:1a:7d:bd:7f:35:51:4d:61:01:4d:c3:0a:
ec:ea:bf:f9:b8:10:66:80:f1:05:e2:ab:41:d9:34:ba:9d:5c:
96:b8:61:27:e6:97:2f:d0:2e:24:e3:af:c7:dd:36:78:e2:9c:
57:8b:2d:05:89:3b:f8:ec:2b:e3:c7:d7:c7:74:e2:4b:d7:42:
68:63:65:b4:0c:ab:12:c9:7c:8e:2a:b6:b0:53:09:49:f0:df:
be:40:3c:8f:2f:9d:29:80:55:17:e9:70:13:65:02:14:11:a7:
90:56:26:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:30:57 2025 by rpki-client