Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/Vr1_at_sbUTRbT4_eY4_K9INo_8.mft
File: Vr1_at_sbUTRbT4_eY4_K9INo_8.mft (raw, json)
Hash identifier: KcuUDnE3pajOXfKTJZDj7u88WFqMDEcn3nPgzaCvMxw=
Subject key identifier: FE:EE:40:A9:89:C1:7C:64:B9:72:65:73:B9:E1:73:78:54:37:58:CD
Authority key identifier: 56:BD:7F:6A:DF:EC:6D:44:D1:6D:3E:3F:79:8E:3F:2B:D2:0D:A3:FF
Certificate issuer: /CN=56bd7f6adfec6d44d16d3e3f798e3f2bd20da3ff
Certificate serial: 0197526B77C71C383041DC9EBD54D57A6B6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vr1_at_sbUTRbT4_eY4_K9INo_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/Vr1_at_sbUTRbT4_eY4_K9INo_8.mft
Manifest number: 1581
Signing time: Mon 09 Jun 2025 02:01:04 +0000
Manifest this update: Mon 09 Jun 2025 02:01:04 +0000
Manifest next update: Tue 10 Jun 2025 02:01:04 +0000
Files and hashes: 1: 1-uUqLBRi2l8Qom0YXKGFyiE_52s.roa (hash: 6O0uoZsxwqn/ZRSGGUR/YkC5bDCXgCwLU9wV4dkd6Ng=)
2: Vr1_at_sbUTRbT4_eY4_K9INo_8.crl (hash: tM9lD0oKDkCxVdLPQQqUset7dExP34coW+x+r+Pcojw=)
3: Yhyd6_3--40XbUHLiYyj2qr-Yoc.roa (hash: 1oOXBnBBaEwXQlaBh7+MdVkKyYQvik1W61cIDXTDdBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/Vr1_at_sbUTRbT4_eY4_K9INo_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/Vr1_at_sbUTRbT4_eY4_K9INo_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vr1_at_sbUTRbT4_eY4_K9INo_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:6b:77:c7:1c:38:30:41:dc:9e:bd:54:d5:7a:6b:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56bd7f6adfec6d44d16d3e3f798e3f2bd20da3ff
Validity
Not Before: Jun 9 02:01:04 2025 GMT
Not After : Jun 10 02:01:04 2025 GMT
Subject: CN=feee40a989c17c64b9726573b9e17378543758cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0b:33:12:49:95:6e:a7:4f:cd:e4:05:ca:1a:
54:31:ed:66:26:17:9d:50:06:a0:7c:e8:ef:00:52:
ac:0c:5c:e4:bf:e1:b9:33:82:d4:62:2c:f3:aa:f4:
a0:60:e3:3b:64:71:58:a2:7b:5c:c3:7f:9c:8a:04:
33:c4:1d:32:ec:23:b8:04:de:40:02:54:dd:89:11:
b8:40:58:55:70:74:0e:73:36:2c:12:ad:7a:25:2b:
c7:90:93:97:33:c7:11:a0:c0:50:7b:00:72:d5:ba:
17:34:f1:cd:fa:dd:2b:46:be:51:23:8c:45:7d:80:
07:61:90:1c:87:b1:e4:ad:ab:76:9d:a5:b2:19:d1:
08:8e:66:dc:85:20:8c:f9:be:46:d8:59:94:86:4c:
0f:4c:17:15:94:8d:b5:d5:f9:d1:0d:54:73:51:06:
8b:bc:a1:39:65:f1:76:f3:08:36:0b:01:11:81:af:
9a:9b:c7:f7:0c:85:6a:5a:d7:51:56:93:ec:bc:22:
a8:d7:17:17:6a:ed:f7:c3:14:5b:a1:c7:65:fb:65:
c3:e1:7d:e8:2f:f7:9b:53:b4:cf:27:31:45:a7:47:
26:b3:12:d8:93:8c:47:77:73:c4:81:e6:4f:5e:d4:
ea:a5:e9:14:4a:b4:aa:c7:43:33:5f:b4:ef:3c:2a:
5d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:EE:40:A9:89:C1:7C:64:B9:72:65:73:B9:E1:73:78:54:37:58:CD
X509v3 Authority Key Identifier:
keyid:56:BD:7F:6A:DF:EC:6D:44:D1:6D:3E:3F:79:8E:3F:2B:D2:0D:A3:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vr1_at_sbUTRbT4_eY4_K9INo_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/Vr1_at_sbUTRbT4_eY4_K9INo_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/Vr1_at_sbUTRbT4_eY4_K9INo_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:49:25:03:a8:39:fa:70:8f:2d:46:1a:4a:b5:c8:31:76:92:
d4:e1:54:ce:4e:ba:0e:0b:5e:a5:01:04:7a:f4:9a:4c:df:99:
6a:ad:86:b7:77:c8:8c:c2:8a:58:31:3c:30:33:39:73:06:68:
dc:a7:be:7e:1a:d6:92:3d:47:ea:1e:57:85:df:e1:4d:08:e8:
2d:a2:de:af:67:67:62:ae:61:df:5e:d8:c3:35:02:e5:61:d7:
89:9d:52:73:0a:46:02:dd:0c:13:f9:ee:c8:1d:32:ee:de:51:
ee:d3:ca:11:24:fe:90:f8:67:6f:28:b4:94:fa:bb:81:29:2e:
4f:8e:ac:30:fd:8a:8e:a0:6b:0b:02:b5:6b:be:9c:4a:e9:c7:
7d:e0:9c:a5:1d:89:ec:34:d6:a0:ee:26:ef:8f:f0:2a:bd:18:
85:d7:f8:ae:ba:97:0b:15:56:0a:27:e3:b3:4b:b6:4b:70:8e:
ef:9c:46:61:76:04:ba:d9:c6:22:4d:44:d9:e6:90:a1:93:46:
e4:19:92:6e:22:b7:10:9b:c8:7d:b1:d7:df:62:d0:93:61:f0:
df:a2:df:39:8a:79:a2:da:12:1d:4a:04:54:39:de:68:93:f1:
b6:eb:3f:83:8d:79:d7:ce:1e:e6:e3:4c:cf:5f:85:1d:08:e3:
00:77:0d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:12:12 2025 by rpki-client