Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
File: VmHZZN9KhtuP-5mqiVgtpoowkIw.mft (raw, json)
Hash identifier: B5c66nvZBZ2dkzN5KeoMnSOq2VsZA274FSvDC9ox8nI=
Subject key identifier: 5B:34:87:BE:D3:DD:D8:94:BC:11:B1:91:88:A8:C2:7A:A6:E3:D9:F5
Authority key identifier: 56:61:D9:64:DF:4A:86:DB:8F:FB:99:AA:89:58:2D:A6:8A:30:90:8C
Certificate issuer: /CN=5661d964df4a86db8ffb99aa89582da68a30908c
Certificate serial: 01975CEF0ADBD7A612D7AEBED7215ED3D8A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
Manifest number: 011C
Signing time: Wed 11 Jun 2025 03:00:59 +0000
Manifest this update: Wed 11 Jun 2025 03:00:59 +0000
Manifest next update: Thu 12 Jun 2025 03:00:59 +0000
Files and hashes: 1: VmHZZN9KhtuP-5mqiVgtpoowkIw.crl (hash: 2n7IZbiEqv+wRC7d6xYCjT5wkrxPSjmV1RdJtIsLtX0=)
2: xMdRmutHFokxkkQckhp-estBVrY.roa (hash: B+GeVyXFQ8LdKQlX7fXVWpcWBfpc+XAscpHvCnfEhnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:ef:0a:db:d7:a6:12:d7:ae:be:d7:21:5e:d3:d8:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5661d964df4a86db8ffb99aa89582da68a30908c
Validity
Not Before: Jun 11 03:00:59 2025 GMT
Not After : Jun 12 03:00:59 2025 GMT
Subject: CN=5b3487bed3ddd894bc11b19188a8c27aa6e3d9f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:53:22:87:75:f0:d2:fb:48:b8:bb:45:72:4e:
99:14:49:41:d0:f2:01:cf:46:38:82:49:a9:a3:97:
0d:f7:c0:47:99:4a:0c:74:c3:95:3e:91:66:ad:ea:
6d:06:7a:93:f2:85:60:bc:a7:b6:0a:a4:5d:f0:2c:
6a:4b:92:34:c8:71:92:0b:2f:45:c6:3d:41:34:2f:
dc:7a:50:03:bf:08:4d:2a:3d:04:c5:4c:24:3b:de:
93:e2:58:2f:36:c1:c8:23:e3:47:6d:e3:ab:69:2a:
c6:ee:0b:ce:16:b8:de:29:fa:d3:be:6b:64:16:16:
0e:1e:52:61:49:fb:c4:c4:d8:4c:bc:b5:95:09:e9:
a5:a6:27:56:47:e8:24:8c:4d:b8:a6:2a:df:df:2b:
5e:45:73:11:76:31:53:36:4f:b2:38:1f:c0:35:ef:
1c:f9:dc:41:0c:cb:c4:22:5c:0a:6e:c0:30:ad:1c:
15:eb:2c:f5:c6:3d:0c:ec:d8:01:89:74:c7:67:78:
c4:e0:1a:a6:a3:bf:d2:f6:71:be:c8:e5:b0:63:52:
0e:78:83:47:c7:24:59:b6:2f:2a:f7:aa:cc:45:5c:
49:39:95:4a:6b:c4:48:be:03:05:19:19:21:7f:97:
d0:4b:09:a7:8c:96:f7:0f:70:fb:e5:a3:f5:73:ad:
bf:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:34:87:BE:D3:DD:D8:94:BC:11:B1:91:88:A8:C2:7A:A6:E3:D9:F5
X509v3 Authority Key Identifier:
keyid:56:61:D9:64:DF:4A:86:DB:8F:FB:99:AA:89:58:2D:A6:8A:30:90:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:49:24:47:de:4c:ab:82:73:ed:11:5c:56:40:3b:7c:a3:63:
14:dc:b0:4b:cf:e9:67:be:54:e1:5f:fb:10:e9:46:8d:81:ff:
d5:0c:dd:fe:00:32:b6:33:ff:37:33:cf:50:a5:3b:c8:58:fd:
3a:80:96:8c:8c:d5:70:57:83:2e:ad:1d:29:74:80:29:e9:83:
cc:11:69:af:00:c9:d5:db:be:a1:18:4d:c5:0f:20:96:3c:ab:
25:67:0e:c9:83:f8:f9:64:bf:8f:5d:ae:a7:90:c2:86:94:2d:
2d:55:ee:6b:0e:d7:db:92:c6:02:18:cb:92:81:fc:b4:38:b7:
f7:aa:23:de:74:65:03:0e:26:ce:5e:35:ad:36:90:5f:8b:40:
84:da:1b:8a:42:b4:39:d9:49:13:cc:f5:93:d5:a0:20:d9:bc:
b7:8d:cf:12:82:d7:8d:50:04:be:69:07:82:90:0b:ed:05:c4:
2e:8d:1a:51:24:94:07:8c:15:7a:1b:4e:c1:a8:90:cb:24:ee:
7e:df:44:15:3f:c6:96:56:bc:7e:5d:10:dd:f0:92:99:a7:f2:
43:5a:61:90:0f:77:43:70:69:be:ad:f1:dc:b3:82:1d:d6:9b:
18:43:8d:4e:48:3c:07:a2:cf:d9:c8:6e:82:82:f2:4b:c8:ee:
22:88:9c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 09:25:22 2025 by rpki-client