Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/VPK5p1k1doKsQZtcAhHMDkICUro.mft
File: VPK5p1k1doKsQZtcAhHMDkICUro.mft (raw, json)
Hash identifier: LeNWHwLfdUfZah4RN1vYiHKHaQx2Xxj8ixEePwRLmSg=
Subject key identifier: 41:EA:3D:54:28:67:AD:4D:91:EF:D9:36:79:34:A5:DA:14:F9:9F:D7
Authority key identifier: 54:F2:B9:A7:59:35:76:82:AC:41:9B:5C:02:11:CC:0E:42:02:52:BA
Certificate issuer: /CN=54f2b9a759357682ac419b5c0211cc0e420252ba
Certificate serial: 0197530FA403830ACA7F9FAE929E09471AD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VPK5p1k1doKsQZtcAhHMDkICUro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/VPK5p1k1doKsQZtcAhHMDkICUro.mft
Manifest number: 13A2
Signing time: Mon 09 Jun 2025 05:00:23 +0000
Manifest this update: Mon 09 Jun 2025 05:00:23 +0000
Manifest next update: Tue 10 Jun 2025 05:00:23 +0000
Files and hashes: 1: 6aNeTA5AWlbR4K0Be9a6lB7llkg.roa (hash: pgW6et/1IzAuhXH8bkhY/6wmV9q7QWSHFhTD0FkFq1M=)
2: SPcGIGkkzQDmSeZ7dKXkZX_TMgQ.roa (hash: rHVmlh8TGkwEc4idYqR8fskh8r3CxSQPC0McskOxXCc=)
3: VPK5p1k1doKsQZtcAhHMDkICUro.crl (hash: 6Ye/VxVh8YNfqsa8080BEAnb/j20ObkEuAHlO/HjNZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/VPK5p1k1doKsQZtcAhHMDkICUro.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/VPK5p1k1doKsQZtcAhHMDkICUro.mft
rsync://rpki.ripe.net/repository/DEFAULT/VPK5p1k1doKsQZtcAhHMDkICUro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:0f:a4:03:83:0a:ca:7f:9f:ae:92:9e:09:47:1a:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54f2b9a759357682ac419b5c0211cc0e420252ba
Validity
Not Before: Jun 9 05:00:23 2025 GMT
Not After : Jun 10 05:00:23 2025 GMT
Subject: CN=41ea3d542867ad4d91efd9367934a5da14f99fd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8a:ea:17:85:7a:ba:db:ac:e9:e6:81:9b:f5:
0e:a0:d7:48:60:ee:e1:c2:d7:3a:c8:7b:0e:1d:a2:
e2:09:2a:45:f3:2a:69:22:45:63:48:b5:42:4f:be:
7c:38:9f:e8:88:67:01:52:35:0e:1a:fa:71:db:7d:
f4:3d:e3:0c:c1:ba:17:bb:5b:93:0b:91:1a:95:da:
84:a4:32:22:a5:ac:d4:62:be:fa:f2:b8:df:15:13:
87:c2:64:3f:f8:5e:27:a0:8e:21:a7:2c:77:b2:9a:
ac:7f:dc:3a:f9:fd:43:26:4b:56:34:1b:85:04:90:
15:e1:c2:1a:b3:e7:e1:d6:15:8b:f6:d4:5d:62:d4:
03:38:32:c3:e3:33:27:3f:c7:85:b4:5c:d5:b8:e4:
e8:5d:e6:7b:48:52:c4:18:58:12:3e:3c:0c:13:d2:
86:48:17:bf:52:e6:c7:ff:87:35:fa:bd:e7:01:00:
2a:c6:43:37:1d:36:1f:c9:3d:9b:50:23:9d:4f:77:
a5:fa:1a:a2:84:32:0a:78:48:84:10:22:86:2f:2f:
9a:f6:44:69:5b:0a:d8:b7:21:1b:b3:10:2b:64:d2:
8b:42:59:aa:da:09:cb:5d:d2:14:c8:21:f1:cc:cd:
3c:2d:f6:79:2f:9c:0e:0b:ad:01:eb:7b:8e:b0:3d:
d3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:EA:3D:54:28:67:AD:4D:91:EF:D9:36:79:34:A5:DA:14:F9:9F:D7
X509v3 Authority Key Identifier:
keyid:54:F2:B9:A7:59:35:76:82:AC:41:9B:5C:02:11:CC:0E:42:02:52:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VPK5p1k1doKsQZtcAhHMDkICUro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/VPK5p1k1doKsQZtcAhHMDkICUro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/VPK5p1k1doKsQZtcAhHMDkICUro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:8b:5a:e5:8c:e3:be:e1:ab:44:79:98:e1:df:ba:2b:f8:6c:
f3:45:be:95:bd:02:ca:9d:93:41:16:f1:b3:4c:ce:12:ac:54:
4c:27:a5:2c:ef:8e:aa:0b:a8:5a:0f:8f:fa:f6:c3:6f:64:50:
f7:1b:f0:b8:17:f1:7e:c9:9f:19:fa:d9:79:10:7a:6f:15:2b:
d2:29:74:0b:21:03:f2:0a:ea:dd:c0:15:7a:fe:87:52:60:28:
cf:8e:6e:1a:f7:6e:31:64:1b:4d:a4:ba:92:3c:6a:92:28:aa:
6d:11:b2:f5:bb:62:6a:8f:b1:33:f9:0d:3f:1e:60:d7:80:00:
b6:c5:61:8d:6a:99:6f:ab:62:c1:73:72:a1:9a:a8:29:06:26:
1a:01:c4:a1:3a:42:f4:9b:f8:3b:64:1c:96:9c:75:f7:71:46:
51:dc:90:fb:b7:e5:de:88:03:7c:68:ad:1d:22:a4:f8:9e:f1:
7a:90:7d:e3:be:1e:a7:a6:a3:07:20:a2:ab:a8:83:8e:0a:a8:
34:03:95:bc:db:2b:c8:ce:03:ad:d7:c5:c1:a9:80:bb:c3:c6:
d2:24:30:31:80:96:85:8e:a9:14:4f:c7:a3:52:82:17:d1:4d:
68:ab:8c:eb:cf:e8:97:78:b3:b3:fb:7d:3a:54:83:49:a5:e4:
02:8b:7b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 07:27:57 2025 by rpki-client