Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
File: VAxPdC_TKaNvzSnE65hOX0lRXZk.mft (raw, json)
Hash identifier: 0N4AFVlwyXb1zkqg3tDUJWlGGOApJau7uIr1yQl4J94=
Subject key identifier: 7D:EE:1C:3B:40:7E:57:74:A2:6B:A7:B9:F8:79:0A:69:A8:17:96:12
Authority key identifier: 54:0C:4F:74:2F:D3:29:A3:6F:CD:29:C4:EB:98:4E:5F:49:51:5D:99
Certificate issuer: /CN=540c4f742fd329a36fcd29c4eb984e5f49515d99
Certificate serial: 01974742DEB5AE473063E3854D05E41BF91C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
Manifest number: 0F6F
Signing time: Fri 06 Jun 2025 22:00:53 +0000
Manifest this update: Fri 06 Jun 2025 22:00:53 +0000
Manifest next update: Sat 07 Jun 2025 22:00:53 +0000
Files and hashes: 1: 6hSnRR0poSKLkgYbDLBwSreCHXw.roa (hash: 2LSwLZwlqMozkmvNpXnEPuZJylqRvk5GNtgnCAWWf9Y=)
2: VAxPdC_TKaNvzSnE65hOX0lRXZk.crl (hash: h9mvU4wL3RCWHnQzMK4eIvIPs8yDM5Ey9oujSt7TiMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:de:b5:ae:47:30:63:e3:85:4d:05:e4:1b:f9:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=540c4f742fd329a36fcd29c4eb984e5f49515d99
Validity
Not Before: Jun 6 22:00:53 2025 GMT
Not After : Jun 7 22:00:53 2025 GMT
Subject: CN=7dee1c3b407e5774a26ba7b9f8790a69a8179612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:51:e2:45:f8:ec:66:c2:ac:11:6a:64:91:5c:
dd:e8:2a:8a:67:3e:89:7b:93:e8:10:e0:cf:3f:37:
a1:34:e1:64:4d:af:64:da:c3:0c:9a:4e:1e:91:2e:
7e:0b:b9:b4:85:25:1b:b7:32:38:c6:7f:0c:f9:ff:
06:f7:e5:ae:9b:e5:9b:6a:5a:1c:d7:0c:95:e6:36:
fe:4f:11:6f:aa:13:c6:a7:18:9d:7e:ac:b0:81:89:
11:ce:f0:20:19:11:2e:5d:01:97:8a:28:40:47:e9:
62:be:7c:18:1a:ff:6e:97:58:b2:43:e0:2d:2a:78:
e0:76:6d:53:28:49:42:b8:aa:94:bb:f7:76:77:1e:
3d:c1:f3:4b:95:45:25:94:3f:d1:22:9f:13:b5:5d:
a8:8f:d4:f4:0f:ce:f8:23:8d:4f:d9:21:ef:c4:42:
ab:1e:0b:ac:37:fa:47:4d:96:23:fe:72:d3:eb:67:
97:01:3f:64:e1:04:4c:81:57:7e:9c:f4:80:55:8d:
80:a5:33:17:db:5f:b4:c9:53:2e:ef:c7:55:c5:be:
df:03:ea:95:9b:d6:2b:86:71:e8:3c:9f:a5:6b:f9:
b6:7b:db:27:a2:bc:ee:63:25:5a:c3:ce:78:43:f3:
29:2b:40:a1:9c:60:ad:82:5f:0d:15:b2:f0:4b:f7:
6b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:EE:1C:3B:40:7E:57:74:A2:6B:A7:B9:F8:79:0A:69:A8:17:96:12
X509v3 Authority Key Identifier:
keyid:54:0C:4F:74:2F:D3:29:A3:6F:CD:29:C4:EB:98:4E:5F:49:51:5D:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:f6:3f:d4:62:86:fc:41:ee:32:1b:ed:cd:54:26:a1:cd:c4:
0d:a9:e4:aa:1f:97:57:35:35:6c:33:86:9d:f0:e8:29:3e:cc:
93:7c:0b:5e:0e:bf:58:5f:37:cb:6c:4e:b0:d4:d0:72:4d:a8:
20:bd:22:eb:04:04:07:50:fd:bf:20:2e:66:bb:7a:f2:41:f7:
4d:f8:52:a5:9d:6f:77:76:64:2c:ae:71:45:8b:80:ea:81:a9:
58:b1:94:85:aa:20:64:3b:46:24:3d:09:c7:86:96:c7:be:f5:
98:23:16:6f:5f:6f:fd:86:ca:89:94:64:64:35:28:3e:a9:b6:
23:48:24:3e:0c:f8:a6:1c:fc:e4:05:11:65:6f:9b:84:3b:c6:
dd:61:3f:72:3e:89:70:7b:15:68:9c:a6:e7:5b:75:91:c7:e6:
05:ef:5e:c8:de:a5:1c:68:40:ca:fc:ef:21:25:02:6c:51:fa:
69:98:39:89:04:fd:73:59:44:19:53:88:03:50:7b:1e:2e:50:
f6:1d:2e:f6:c2:30:c5:e8:65:08:e0:56:e4:18:dd:4f:76:2f:
73:2f:9f:2a:8f:32:0a:41:bc:99:9f:6e:2b:f2:29:f2:e3:f0:
38:52:5e:04:cd:09:87:d4:ff:63:97:3a:f5:8c:61:ad:42:5d:
2a:fb:66:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:26:26 2025 by rpki-client