Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.mft
File: VY3MXX5oh8lBrjsozjy_L7TyBgM.mft (raw, json)
Hash identifier: w955oaSml4W42MBYPxgGi7anfmk8dxelIjxBVe2pas4=
Subject key identifier: E4:F2:2B:F8:D0:93:15:5A:D4:ED:7D:5A:77:F4:11:30:63:BE:E3:4D
Authority key identifier: 55:8D:CC:5D:7E:68:87:C9:41:AE:3B:28:CE:3C:BF:2F:B4:F2:06:03
Certificate issuer: /CN=558dcc5d7e6887c941ae3b28ce3cbf2fb4f20603
Certificate serial: 01974D44A3DCF28566FBD3A65361E2D1E9C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VY3MXX5oh8lBrjsozjy_L7TyBgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.mft
Manifest number: 14CE
Signing time: Sun 08 Jun 2025 02:00:33 +0000
Manifest this update: Sun 08 Jun 2025 02:00:33 +0000
Manifest next update: Mon 09 Jun 2025 02:00:33 +0000
Files and hashes: 1: O6XxnBxdjAHrB6cqnybF-q5zhEI.roa (hash: I3o5BuOlE43DLGmjrJZTKVLwzcox6qkRQGzuUzhTBPQ=)
2: VY3MXX5oh8lBrjsozjy_L7TyBgM.crl (hash: XWWGBl2abF8Rlj8hOX9Pe6w3m9d3Doe7VJbWYTom0lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VY3MXX5oh8lBrjsozjy_L7TyBgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 02:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:44:a3:dc:f2:85:66:fb:d3:a6:53:61:e2:d1:e9:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=558dcc5d7e6887c941ae3b28ce3cbf2fb4f20603
Validity
Not Before: Jun 8 02:00:33 2025 GMT
Not After : Jun 9 02:00:33 2025 GMT
Subject: CN=e4f22bf8d093155ad4ed7d5a77f4113063bee34d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:48:b4:f8:ff:2c:fc:85:ad:d0:c0:34:fc:33:
a4:bd:1a:4f:a3:d9:99:d4:c1:ab:16:a8:8f:53:89:
c8:e8:9c:52:a7:88:5a:06:88:d2:7b:d9:3b:f3:7f:
b2:b2:fd:43:09:64:47:55:d9:d4:14:a7:f6:4f:fb:
9b:2c:64:03:d9:b1:0b:d9:e0:5e:03:ed:5b:65:15:
f5:e2:42:b8:88:a4:63:c5:5d:65:38:02:41:91:1f:
bc:45:7b:ca:23:30:ce:5d:e0:10:53:2f:c5:ae:05:
8f:1f:f3:bd:2c:22:4b:60:ed:16:93:be:9b:4d:c5:
44:0c:d8:19:9e:7e:fd:b2:29:06:fb:c7:9d:a7:29:
77:4b:e9:3f:39:2a:94:e2:d8:1f:80:22:77:79:92:
e6:1d:ec:a0:8d:a5:16:02:8f:4f:ed:ee:e0:5f:23:
23:52:a4:5f:ef:b9:aa:a3:a3:43:64:f7:c7:f8:eb:
18:24:d3:22:9b:a1:11:47:de:2c:93:77:c8:32:05:
4e:0b:69:63:fa:9a:07:cc:c2:de:86:69:20:df:04:
bd:38:7f:ce:e4:bc:a8:6b:d2:68:aa:a7:e8:34:4a:
ab:e3:27:fa:63:2c:92:39:b6:21:a5:0e:f5:eb:44:
b1:0b:3c:46:46:7c:e8:1d:e8:81:6a:c0:b7:f3:47:
df:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:F2:2B:F8:D0:93:15:5A:D4:ED:7D:5A:77:F4:11:30:63:BE:E3:4D
X509v3 Authority Key Identifier:
keyid:55:8D:CC:5D:7E:68:87:C9:41:AE:3B:28:CE:3C:BF:2F:B4:F2:06:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VY3MXX5oh8lBrjsozjy_L7TyBgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:c5:56:a2:9b:66:b4:4a:61:8b:cf:f4:3a:85:f5:ba:cb:b5:
a1:56:83:18:58:04:90:94:c1:f9:10:35:2d:c4:85:5b:d9:5f:
ec:95:78:d0:9e:32:96:7c:6b:cb:68:c1:8e:17:90:d5:eb:4d:
53:0f:f0:26:8e:6c:bd:ee:a4:df:b3:ba:53:62:e2:10:38:80:
a7:e2:95:72:6a:a3:f7:f4:b8:a8:fa:19:c4:16:e2:c4:85:6d:
40:5f:24:ed:4b:fa:01:27:86:b4:4c:f8:20:d6:b3:26:6a:bb:
79:d2:15:e5:e9:f4:91:06:e9:ec:e0:26:4a:ce:87:ad:b7:82:
4f:80:4d:f2:b1:1f:2e:e5:df:02:15:e9:a3:cb:f1:c5:e8:bf:
e2:bb:3f:6e:56:ef:c3:7c:1c:d9:26:7c:3c:96:cf:0f:a8:6e:
9f:c9:d5:dd:c9:f7:18:77:6b:52:2d:2a:10:9e:cc:df:42:74:
8c:db:26:1b:c7:e8:76:4a:86:58:fe:4b:a1:c6:fa:d8:2b:d0:
a4:da:4e:2f:00:05:87:a0:a9:51:45:9d:d7:48:4a:8c:89:78:
3c:46:3e:46:06:e3:3e:03:5c:44:48:fa:83:e6:ae:c4:89:a3:
7e:04:1c:58:96:91:69:bc:09:af:3e:aa:81:08:2c:e9:82:ff:
e5:3e:71:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:29:23 2025 by rpki-client