Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.mft
File: VZxkpqxMSXatNiFBKhN0WeZJq54.mft (raw, json)
Hash identifier: 5g0UT44+XYTnXk4j0g1trZ9twVTdwkbzBEksZ4KaDGQ=
Subject key identifier: BF:35:33:50:2A:9A:76:5D:7A:D8:3A:2D:FE:1D:DE:70:93:E4:4B:DD
Authority key identifier: 55:9C:64:A6:AC:4C:49:76:AD:36:21:41:2A:13:74:59:E6:49:AB:9E
Certificate issuer: /CN=559c64a6ac4c4976ad3621412a137459e649ab9e
Certificate serial: 01974F32FA9BD8BE4E89DD73671D6322E90C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZxkpqxMSXatNiFBKhN0WeZJq54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.mft
Manifest number: 1117
Signing time: Sun 08 Jun 2025 11:00:30 +0000
Manifest this update: Sun 08 Jun 2025 11:00:30 +0000
Manifest next update: Mon 09 Jun 2025 11:00:30 +0000
Files and hashes: 1: VS9hlIblCqjoV7wOGER9HcFzw5g.roa (hash: ldQ9iAybiLA+phWuzQvG2tTPk8+fTFZlm2NUmijp+Ac=)
2: VZxkpqxMSXatNiFBKhN0WeZJq54.crl (hash: kEH9l7rS+l1bid4NuSu4YDOCPZc8UshdSVlTAxS8ZTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.mft
rsync://rpki.ripe.net/repository/DEFAULT/VZxkpqxMSXatNiFBKhN0WeZJq54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:32:fa:9b:d8:be:4e:89:dd:73:67:1d:63:22:e9:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=559c64a6ac4c4976ad3621412a137459e649ab9e
Validity
Not Before: Jun 8 11:00:30 2025 GMT
Not After : Jun 9 11:00:30 2025 GMT
Subject: CN=bf3533502a9a765d7ad83a2dfe1dde7093e44bdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0c:6a:9d:fe:88:84:4d:59:5e:23:1f:c4:7d:
a7:ba:e9:67:d8:c2:56:4f:fc:24:dd:5c:15:d1:c3:
44:42:a1:9f:ca:ee:08:e2:41:8c:e0:ed:14:c6:c1:
aa:39:1c:8c:b9:66:cf:9e:d5:09:59:92:ee:34:2b:
22:bf:3f:f8:cd:57:eb:9d:58:e2:2b:a7:be:15:91:
d6:0c:c4:46:44:e6:86:d3:d6:95:24:e2:09:ae:37:
e4:c4:4c:e8:04:cb:f3:08:30:4e:52:72:ab:7f:90:
cd:0f:90:2f:a4:fc:c5:5e:9a:5b:56:be:92:e6:46:
a1:cf:65:e8:c1:73:c9:00:93:a2:db:b4:6a:3c:20:
5d:40:e6:72:37:49:72:45:eb:31:6c:89:a9:29:e1:
58:f4:9f:97:9f:bd:74:9c:a7:db:26:7a:f0:a0:79:
a1:d6:05:b6:b8:0b:46:0d:c8:d6:bd:a6:4e:a2:f6:
09:03:78:c4:16:ac:20:d9:05:2b:90:ee:ec:a6:b5:
62:89:0a:d8:4e:86:e9:f3:52:df:c9:3e:e4:73:65:
ee:ea:77:1d:12:0c:37:ed:32:fc:1a:92:fe:99:6e:
38:6e:42:d2:aa:2d:2f:4f:d3:f0:3b:65:a8:2a:e5:
64:f2:8b:79:d4:69:83:6a:d1:7a:73:a2:45:d5:53:
b2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:35:33:50:2A:9A:76:5D:7A:D8:3A:2D:FE:1D:DE:70:93:E4:4B:DD
X509v3 Authority Key Identifier:
keyid:55:9C:64:A6:AC:4C:49:76:AD:36:21:41:2A:13:74:59:E6:49:AB:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZxkpqxMSXatNiFBKhN0WeZJq54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:80:59:d7:dd:8c:6d:89:d0:a9:93:26:62:cf:de:c0:8a:c1:
8d:c1:e9:d4:71:e3:1c:3d:82:64:7e:53:5c:1f:17:b6:b6:d2:
65:bd:8c:ba:e2:bc:a9:bd:19:28:08:e8:05:db:4a:95:67:e5:
78:ae:95:4f:23:4f:43:59:90:c5:f9:d9:e7:fc:05:4a:58:e7:
71:13:bd:b5:02:8e:e8:3a:bc:bc:d9:ce:d8:c8:09:b8:b6:b1:
f6:2c:a1:eb:9e:13:d5:ea:20:38:fb:88:6f:a1:17:b2:36:d8:
fa:22:24:7a:4e:72:ba:8e:9a:ef:da:92:ee:cd:65:d9:75:fe:
32:eb:df:58:3c:13:6c:cd:45:05:46:31:af:3a:9a:b2:cb:6d:
db:12:8d:98:f7:d0:ca:34:6b:96:84:1a:f5:79:e9:d6:38:75:
eb:39:80:cf:aa:e1:51:e1:84:b3:cc:63:f6:62:80:98:c4:a0:
9b:dc:0f:09:1b:a4:cb:7b:78:2e:fc:17:aa:1e:56:22:e6:f6:
24:cf:a3:9f:92:a1:75:01:3e:85:70:60:24:98:8c:4e:fd:d0:
6c:a4:ad:25:b4:df:0b:39:63:5b:00:31:5f:af:60:e2:64:11:
01:0b:b9:4d:12:a5:eb:e9:6d:1f:73:b0:da:b1:b2:a9:44:a8:
40:a2:2b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:37:07 2025 by rpki-client