Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
File: VmHZZN9KhtuP-5mqiVgtpoowkIw.mft (raw, json)
Hash identifier: dF44gtMi7bGnMkUHf0/AWlwFhdfpPGM1hNNSwhMN5hY=
Subject key identifier: 4E:B4:A6:B5:4B:3C:6D:D7:12:F6:44:08:88:19:A6:AB:04:20:0F:2B
Authority key identifier: 56:61:D9:64:DF:4A:86:DB:8F:FB:99:AA:89:58:2D:A6:8A:30:90:8C
Certificate issuer: /CN=5661d964df4a86db8ffb99aa89582da68a30908c
Certificate serial: 019764A852229BFEB2172D18149C3CD2284C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
Manifest number: 0120
Signing time: Thu 12 Jun 2025 15:00:42 +0000
Manifest this update: Thu 12 Jun 2025 15:00:42 +0000
Manifest next update: Fri 13 Jun 2025 15:00:42 +0000
Files and hashes: 1: VmHZZN9KhtuP-5mqiVgtpoowkIw.crl (hash: IcTX8pBog2xcBf5Fr/YR2lnFh7UuAPCOm7jOMRkYTUc=)
2: xMdRmutHFokxkkQckhp-estBVrY.roa (hash: B+GeVyXFQ8LdKQlX7fXVWpcWBfpc+XAscpHvCnfEhnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:a8:52:22:9b:fe:b2:17:2d:18:14:9c:3c:d2:28:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5661d964df4a86db8ffb99aa89582da68a30908c
Validity
Not Before: Jun 12 15:00:42 2025 GMT
Not After : Jun 13 15:00:42 2025 GMT
Subject: CN=4eb4a6b54b3c6dd712f644088819a6ab04200f2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2e:56:12:5d:78:52:82:f5:73:55:cf:96:b0:
b4:e0:45:10:7f:86:28:f2:ff:59:be:0b:4e:e9:af:
e0:0e:cc:93:a4:18:f4:9a:f0:f7:08:3f:9e:80:dd:
23:f1:90:da:6f:07:5b:8d:2f:1d:3c:20:f8:80:a9:
5a:8a:98:3e:34:e2:50:26:45:60:60:80:4d:aa:0a:
87:69:16:ac:12:71:52:a0:a6:97:35:09:b7:52:8a:
5c:ea:89:51:98:14:2f:64:20:28:e6:8d:d0:b7:c8:
2c:db:ef:4b:88:43:cb:a4:dd:45:cc:a7:94:da:03:
1a:7e:31:a9:8c:30:47:84:ed:1a:56:a4:2c:de:17:
7a:43:fb:b7:07:6b:b9:f9:20:b2:c8:48:51:05:cd:
ba:2c:f1:92:b0:2b:76:c7:cf:55:d6:eb:27:8f:de:
ec:d1:6e:62:34:b9:74:5c:88:d1:83:dc:db:a1:c1:
57:36:0d:c4:ed:48:73:07:da:95:28:81:d3:f0:26:
c7:60:e4:b6:58:e9:21:76:38:cd:06:22:15:6d:49:
15:6d:a7:27:f5:4d:d9:bc:c8:7f:63:0e:c4:bd:6a:
d8:d1:96:ec:a8:09:12:6f:b6:40:80:c1:c1:07:c2:
76:11:8e:4c:36:26:3f:76:c6:4e:bf:0a:51:34:7f:
d4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B4:A6:B5:4B:3C:6D:D7:12:F6:44:08:88:19:A6:AB:04:20:0F:2B
X509v3 Authority Key Identifier:
keyid:56:61:D9:64:DF:4A:86:DB:8F:FB:99:AA:89:58:2D:A6:8A:30:90:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:09:dd:11:65:dd:d4:81:52:2a:ae:8e:41:08:59:6c:fd:e8:
a9:12:2c:9f:3f:07:66:bc:ab:88:ec:81:76:52:2f:72:63:37:
b1:1d:96:ce:91:65:91:3e:1c:c5:d5:48:0e:bf:23:47:af:4e:
f2:56:19:79:64:2f:0f:7f:d6:18:4e:e3:de:56:d5:bb:42:05:
a3:a4:f2:fb:8d:7b:8d:00:7d:3c:2f:35:db:b1:6b:03:8f:67:
c3:ba:d5:be:90:a4:a4:26:31:e8:68:fb:43:4a:f1:59:ca:36:
d4:82:ab:93:5b:fc:81:8d:41:0c:b4:9c:71:85:61:30:22:9c:
fe:c5:3b:8c:b3:d5:24:e1:04:07:81:ad:18:e5:37:04:9d:e0:
ce:1f:95:84:d7:84:62:df:18:d6:94:23:1a:c8:8b:b7:1d:71:
c3:fb:1b:6c:9f:9a:5d:74:0b:b3:7f:c9:ca:20:b3:61:93:0a:
05:01:1f:e5:83:de:d8:dd:26:18:23:6a:36:cf:ee:3a:18:8f:
1d:c1:fa:9b:4b:af:d3:1f:d8:3f:30:e1:eb:a8:0f:5b:5c:da:
f8:ad:13:bf:c9:4d:d8:33:77:de:5a:19:83:35:39:f0:c6:68:
9f:19:99:9f:e7:68:2d:3f:ed:4d:d2:6f:8e:6c:48:ba:a5:5c:
31:f8:2c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 17:46:04 2025 by rpki-client