Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.mft
File: VLSHMeKfJ9aHV21oY629oIBwm_4.mft (raw, json)
Hash identifier: nosWsmnm9xYeDEIcrnM6hAgfBIu4SdliJNW3AAD95Do=
Subject key identifier: 70:03:D9:16:B1:BC:EE:D4:6C:4E:0E:DA:B5:C9:28:74:E9:F5:12:7F
Authority key identifier: 54:B4:87:31:E2:9F:27:D6:87:57:6D:68:63:AD:BD:A0:80:70:9B:FE
Certificate issuer: /CN=54b48731e29f27d687576d6863adbda080709bfe
Certificate serial: 01974FA1749B7CB505F9298BA5329887CD0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.mft
Manifest number: 09FE
Signing time: Sun 08 Jun 2025 13:01:10 +0000
Manifest this update: Sun 08 Jun 2025 13:01:10 +0000
Manifest next update: Mon 09 Jun 2025 13:01:10 +0000
Files and hashes: 1: 09p6kbowRqEqmGsIE-X77ssBdvE.roa (hash: aNbCunzaHj8fcPNQtO0tqEMAuZSFNh6caJLvvgjcZUM=)
2: BP3U6kFnmdq-Ooz7okVHVreJwX4.roa (hash: 8ZRH6f2/mVLLc0PYuU8YNWUcegB85lCqTXWXtLUxfLM=)
3: VLSHMeKfJ9aHV21oY629oIBwm_4.crl (hash: imCm97TWObhUlDz6ARgkQ+7gpxjwcflFhtWN3Nvyuwk=)
4: pH__rL1RVjxMSUxHKGG7zRUGK1o.roa (hash: jLPbh/4LV4yxXAw9vyooJrfcnHymRshQqR67+HD469o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:a1:74:9b:7c:b5:05:f9:29:8b:a5:32:98:87:cd:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54b48731e29f27d687576d6863adbda080709bfe
Validity
Not Before: Jun 8 13:01:10 2025 GMT
Not After : Jun 9 13:01:10 2025 GMT
Subject: CN=7003d916b1bceed46c4e0edab5c92874e9f5127f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8c:75:96:f2:21:c0:03:5e:f6:5b:ec:85:9f:
41:76:4c:cb:68:20:95:08:a0:57:f6:c0:fe:6d:af:
8f:aa:1f:93:50:72:da:83:95:bb:d9:e5:92:5d:3d:
4b:f2:6b:89:86:8b:b8:bb:56:2e:02:ab:5d:25:27:
fb:8c:94:9c:24:8c:9f:fa:b8:0f:19:95:6b:15:c7:
61:6f:bd:92:ac:d8:69:23:0b:5d:f2:bd:d9:d2:87:
b2:9c:ca:be:b9:b8:2b:c7:c6:c3:af:03:15:4e:9c:
cc:e2:29:8c:b2:20:a2:b8:69:25:23:11:ab:4c:75:
f9:a6:1b:ee:2d:30:3b:60:f3:0a:ae:8e:32:3d:49:
cc:e4:c1:e8:0c:5b:5e:24:ab:a7:a9:ca:db:09:8c:
77:3d:ea:b2:d5:51:5c:28:a1:b6:20:96:ae:42:0c:
3b:3b:ab:d1:99:f5:e4:a1:69:7c:84:b8:bc:ef:08:
11:9c:44:23:89:cd:31:11:eb:ff:e9:e1:70:8f:6a:
79:7c:1d:1a:2d:69:3e:d2:5e:78:93:15:d4:e1:93:
f0:79:a3:98:cb:b9:f2:3c:9b:11:40:78:50:43:e2:
bd:67:38:cd:e0:88:ae:f2:7a:66:8e:3c:a0:7a:a8:
e7:ac:6b:10:3a:40:9b:c4:4f:9e:05:fa:d2:ab:2f:
e6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:03:D9:16:B1:BC:EE:D4:6C:4E:0E:DA:B5:C9:28:74:E9:F5:12:7F
X509v3 Authority Key Identifier:
keyid:54:B4:87:31:E2:9F:27:D6:87:57:6D:68:63:AD:BD:A0:80:70:9B:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:23:d1:27:8e:a4:2a:7d:84:c6:e3:03:f4:5a:2d:ad:50:9b:
d7:b2:0c:8a:13:2b:cd:62:c3:5e:17:87:74:0e:8b:84:bc:05:
a8:f8:49:54:de:a7:07:9c:ef:24:21:eb:1a:e9:8a:1e:d2:06:
cb:e6:12:45:1b:97:8e:76:15:d9:46:f2:72:62:5e:c6:0a:0e:
54:55:45:27:71:6b:06:25:8e:ba:97:78:11:9e:8f:d1:5e:44:
1f:30:e0:e2:bd:c1:ca:68:30:f1:9a:ac:ed:15:bd:8b:f5:bb:
0f:bf:50:47:07:ea:14:96:1a:d2:52:f1:f6:4e:c6:07:2d:46:
cd:ee:96:7d:9f:69:4e:6f:de:42:83:42:9c:6f:39:b0:8a:38:
54:b7:e8:eb:fc:b8:95:07:02:52:d3:ff:c2:0c:98:aa:1a:74:
33:7f:0e:d7:72:0e:22:18:69:a3:77:63:90:4d:b7:c1:b7:2a:
87:1d:b8:d7:8b:52:3e:1e:27:65:c4:4e:d5:c0:83:0f:73:4c:
c2:cd:e9:70:39:df:08:0e:cb:14:ca:89:95:ad:d2:db:9e:c5:
a2:b9:8e:73:9b:af:1a:dd:6d:a8:7f:37:26:11:85:50:fb:0c:
ec:27:6e:2c:ee:56:cf:92:fc:19:12:f7:ad:3b:11:b5:c0:e9:
e3:92:6d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:58:52 2025 by rpki-client