Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft
File: VTynsubB4X9fPtvjdeGezjlTORA.mft (raw, json)
Hash identifier: 5EIJUMSHapBiiJj81mtu6Pmfcu8i+6NVhgL02m0A+40=
Subject key identifier: 29:D7:1F:82:36:42:C5:B7:4A:2A:D1:A7:F9:BE:42:7E:C7:9E:E4:71
Authority key identifier: 55:3C:A7:B2:E6:C1:E1:7F:5F:3E:DB:E3:75:E1:9E:CE:39:53:39:10
Certificate issuer: /CN=553ca7b2e6c1e17f5f3edbe375e19ece39533910
Certificate serial: 0197500EFDF5943146E9D8AAA12E534452B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft
Manifest number: 1053
Signing time: Sun 08 Jun 2025 15:00:49 +0000
Manifest this update: Sun 08 Jun 2025 15:00:49 +0000
Manifest next update: Mon 09 Jun 2025 15:00:49 +0000
Files and hashes: 1: 6k2hBM4XUhd6DA-vs8SUHNOo6k4.roa (hash: j24u1fw+wKi+GN73WExbNJpjYxAE0mjUB2p9siHDzsY=)
2: VTynsubB4X9fPtvjdeGezjlTORA.crl (hash: UeG3bceI/NMC7rIR7wgEWGBxQXmw8lhNpZM5zk4Zgc0=)
3: sxJKQqy--ePZJKy-z6ZXKspnoCU.roa (hash: viGZT8F9x3/CHDhQJKfJwFzfO7LR9KesSjHrb2YKNNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:0e:fd:f5:94:31:46:e9:d8:aa:a1:2e:53:44:52:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=553ca7b2e6c1e17f5f3edbe375e19ece39533910
Validity
Not Before: Jun 8 15:00:49 2025 GMT
Not After : Jun 9 15:00:49 2025 GMT
Subject: CN=29d71f823642c5b74a2ad1a7f9be427ec79ee471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d3:3c:46:be:b4:e1:20:04:3d:65:30:2d:b6:
fa:2f:d4:fc:95:48:66:98:84:ca:83:5a:70:a2:ce:
15:cb:a6:4e:51:0a:b1:7e:3b:23:77:60:e6:dc:3e:
d7:1b:03:fa:d7:d9:47:66:04:8c:3d:50:38:a6:58:
0e:c9:de:2b:6a:85:ab:48:38:1d:82:20:ec:66:14:
aa:4d:a5:03:67:73:87:21:dd:61:44:8c:25:35:a3:
9e:16:ec:5d:7a:4a:09:d1:86:b2:6a:4d:95:14:ac:
0d:1c:20:86:2b:93:43:94:58:e0:61:91:c6:68:15:
66:92:8b:88:ee:3f:74:25:c9:bf:a4:ba:b9:08:81:
e3:12:f0:59:99:5d:6b:7a:76:8a:ea:d0:74:8f:28:
9c:e7:0e:78:b0:c3:cb:a5:1e:23:d6:70:6d:83:dc:
4d:aa:cb:d1:9b:a2:84:69:74:b3:b4:6a:7e:b2:9b:
32:a8:9c:12:67:36:50:54:58:20:fa:62:1a:8b:6c:
df:c6:b8:a2:a1:17:9c:d3:f5:5e:fc:60:7e:b2:d2:
da:79:14:30:74:31:69:8b:45:be:9d:c2:f0:fc:0a:
21:47:d7:b7:25:87:a7:63:0d:0f:ed:2b:e7:44:08:
43:cd:e7:2d:02:e9:5f:7f:b5:b1:34:43:93:e6:10:
bd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D7:1F:82:36:42:C5:B7:4A:2A:D1:A7:F9:BE:42:7E:C7:9E:E4:71
X509v3 Authority Key Identifier:
keyid:55:3C:A7:B2:E6:C1:E1:7F:5F:3E:DB:E3:75:E1:9E:CE:39:53:39:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:7a:2e:8e:a7:18:7b:8c:58:46:ea:cd:3d:0a:09:cf:0e:17:
6f:34:37:46:79:ea:5e:39:e1:42:1c:b8:ed:8c:a5:74:cc:f1:
74:9b:1e:71:b3:27:ac:38:73:95:aa:02:b1:0e:0e:cb:72:a1:
7a:c3:b1:c2:4e:1a:5c:4f:f5:39:72:27:21:59:e9:34:98:b4:
8c:6b:0d:2b:31:2c:57:dd:39:50:78:7c:d9:f1:49:59:ce:f3:
99:98:83:18:27:de:aa:c9:08:6f:40:a3:b0:df:c4:bc:64:6a:
1a:cb:09:f0:01:5b:50:45:d5:b1:ac:ab:56:0e:52:70:c7:b4:
6a:b2:6f:cb:27:ae:6b:1c:82:c8:61:e4:ea:43:4c:cf:5b:23:
25:88:5e:6d:b9:49:11:26:7c:66:1d:af:a3:44:2e:b2:44:f5:
82:88:41:7f:0e:ae:e0:de:70:33:a2:95:16:5e:ac:65:f0:a3:
b8:f9:24:31:44:2f:84:46:35:b6:aa:a2:c2:d9:c8:ad:1e:50:
84:e5:f6:d6:0d:49:3e:34:a0:ac:04:6a:da:4b:e9:81:0c:2a:
54:cc:2e:13:bb:2b:42:a8:01:a6:3d:0a:60:7d:e2:52:48:c1:
6c:b2:a8:a6:8f:6e:be:80:1e:43:6f:96:73:5b:7c:4c:59:46:
97:9a:dc:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 17:19:33 2025 by rpki-client