Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.mft
File: Vk6tOAljA7xLah8rAuG5G-SEkUY.mft (raw, json)
Hash identifier: rD5hmMAclL94xVbhfEEpKuN8Sf7Fz/MjbKIKDoerhdM=
Subject key identifier: 8C:71:1F:53:CB:30:39:5F:8A:48:99:63:3F:46:8F:A8:FB:EB:B5:1F
Authority key identifier: 56:4E:AD:38:09:63:03:BC:4B:6A:1F:2B:02:E1:B9:1B:E4:84:91:46
Certificate issuer: /CN=564ead38096303bc4b6a1f2b02e1b91be4849146
Certificate serial: 0197586D60B79C29DE17F20CBCB5A51E50DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vk6tOAljA7xLah8rAuG5G-SEkUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.mft
Manifest number: 0ACB
Signing time: Tue 10 Jun 2025 06:00:52 +0000
Manifest this update: Tue 10 Jun 2025 06:00:52 +0000
Manifest next update: Wed 11 Jun 2025 06:00:52 +0000
Files and hashes: 1: Q1FzunJJgm72n4cjnOFriVc18KU.roa (hash: 9QqXBfYauaWBi+EvcV0793mlb9DkJUiHomWOWZ5zJGk=)
2: Vk6tOAljA7xLah8rAuG5G-SEkUY.crl (hash: 4ErmXoLhDhpK4pF1PwcbrOAv2sEpr3HIMMZxJYwnrbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vk6tOAljA7xLah8rAuG5G-SEkUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:6d:60:b7:9c:29:de:17:f2:0c:bc:b5:a5:1e:50:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=564ead38096303bc4b6a1f2b02e1b91be4849146
Validity
Not Before: Jun 10 06:00:52 2025 GMT
Not After : Jun 11 06:00:52 2025 GMT
Subject: CN=8c711f53cb30395f8a4899633f468fa8fbebb51f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6b:6b:95:22:19:ee:40:17:3c:22:54:00:76:
2d:8b:d0:3a:68:78:47:c3:1e:ad:b3:9e:4f:cd:f4:
a2:1e:6c:dd:58:4d:78:c2:f8:99:08:a5:d0:f7:bf:
c4:a7:7b:63:14:24:c6:ce:92:c7:4e:c8:84:bc:e0:
ed:58:b0:4f:dc:1c:1d:6c:f1:a2:9c:7c:71:1e:c1:
32:96:1c:67:56:6a:58:40:a0:79:27:82:a1:c6:f9:
a5:e4:c0:c9:3e:21:44:d3:cb:34:8a:02:10:e9:40:
ab:c9:9c:78:3d:27:b9:8c:c6:b8:cb:5e:70:31:b4:
1e:d8:c7:55:ab:56:69:44:52:9c:7c:bc:7e:7a:fb:
37:ce:9b:06:2a:f4:fb:73:c9:97:30:5f:2e:fc:75:
b9:eb:91:01:fd:36:64:62:3a:78:9f:11:61:b8:ba:
8e:30:ef:d4:9b:a8:7f:92:b4:13:d2:fc:4b:77:19:
a1:e8:ba:04:6b:bd:a4:00:1d:b7:29:d3:73:ff:1b:
8c:4c:71:f2:dc:21:d6:bd:de:ec:cc:aa:e1:c0:22:
ca:d0:b0:39:5e:d8:fd:4c:ec:70:d3:2b:e3:43:9a:
4a:ab:56:a4:26:bc:25:a6:73:51:27:97:8b:2d:59:
a6:ab:f4:fe:d4:5e:64:ae:58:b4:08:ba:f6:87:33:
6d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:71:1F:53:CB:30:39:5F:8A:48:99:63:3F:46:8F:A8:FB:EB:B5:1F
X509v3 Authority Key Identifier:
keyid:56:4E:AD:38:09:63:03:BC:4B:6A:1F:2B:02:E1:B9:1B:E4:84:91:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vk6tOAljA7xLah8rAuG5G-SEkUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:b1:8d:a7:ff:b0:62:c8:0b:c8:4f:f2:d2:12:08:28:4a:a2:
19:0c:b8:c3:7a:c7:3b:80:88:60:15:d3:a2:58:fc:01:02:57:
43:36:e5:4e:78:50:c1:f2:be:ed:c6:cf:2e:48:91:0e:e8:e8:
f8:6a:a6:af:51:f2:7b:2b:3d:90:e1:d0:20:22:4e:6b:5b:e9:
cd:1f:9b:b4:34:da:d9:0a:3a:41:a3:52:eb:e5:ba:54:08:a7:
82:db:a7:9f:17:27:eb:d4:9d:0d:48:3c:fd:14:8c:64:13:0a:
fb:a1:20:6d:a7:da:05:a9:dd:c1:7d:bc:df:34:89:76:4b:24:
ac:2b:cc:95:a5:3f:e1:ca:25:11:5b:db:21:e9:41:f6:cb:5b:
88:96:41:32:34:d4:a8:9a:b0:ea:8b:ee:cc:a7:23:bc:33:5c:
82:c4:12:5e:d2:49:d4:c1:f0:f6:0b:ef:74:8d:fa:e9:7c:e1:
34:56:13:f8:49:02:54:40:da:56:eb:46:d7:cf:5d:17:80:68:
ac:a6:12:e8:f8:00:1a:0a:31:77:f6:a3:81:60:ef:98:13:0c:
85:65:48:24:82:e5:36:3a:9d:a8:e1:4e:de:53:35:bf:cd:5d:
22:75:70:b9:92:11:fb:45:67:c9:4a:47:16:a6:c4:86:73:95:
46:87:a6:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 15:00:38 2025 by rpki-client