Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.mft
File: VvAaHpnqXU85lNMzCdCUMS3IVCc.mft (raw, json)
Hash identifier: IvBuQmXyZLyuQwMTAyA0YUmQMqUteWTcC+Li2tz3NG8=
Subject key identifier: 14:DB:2B:B3:4F:44:57:22:74:16:B2:63:33:FB:AB:2C:4F:17:EC:B3
Authority key identifier: 56:F0:1A:1E:99:EA:5D:4F:39:94:D3:33:09:D0:94:31:2D:C8:54:27
Certificate issuer: /CN=56f01a1e99ea5d4f3994d33309d094312dc85427
Certificate serial: 01974F6A74C831B57E51AEA581EFFD9AEE54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VvAaHpnqXU85lNMzCdCUMS3IVCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.mft
Manifest number: 0212
Signing time: Sun 08 Jun 2025 12:01:06 +0000
Manifest this update: Sun 08 Jun 2025 12:01:06 +0000
Manifest next update: Mon 09 Jun 2025 12:01:06 +0000
Files and hashes: 1: VvAaHpnqXU85lNMzCdCUMS3IVCc.crl (hash: blL4KqDxet7RtQBWuiwRrl3f493/EMFZAEG6EAGjNoM=)
2: v_KzQYlvsCBO_i8yYO8HLxZWeDc.roa (hash: +uoQdMzOaHRMGuVFuouzf8EBLpuGaYxtN4+0W2dukzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VvAaHpnqXU85lNMzCdCUMS3IVCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:6a:74:c8:31:b5:7e:51:ae:a5:81:ef:fd:9a:ee:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56f01a1e99ea5d4f3994d33309d094312dc85427
Validity
Not Before: Jun 8 12:01:06 2025 GMT
Not After : Jun 9 12:01:06 2025 GMT
Subject: CN=14db2bb34f4457227416b26333fbab2c4f17ecb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d8:a4:7f:6a:2b:f7:6b:f4:57:28:1f:74:ea:
9b:51:7c:f3:98:1c:30:7a:ff:3e:98:3d:85:0e:79:
d7:04:f4:a1:73:87:b0:1b:d4:67:56:3b:a6:9f:8f:
64:d0:3a:32:ea:db:c4:05:b3:3e:22:bd:2f:40:23:
7f:a0:41:00:6c:77:7b:37:f4:e6:7f:de:aa:21:5c:
c2:4d:5f:5f:a8:2b:f0:e3:3f:be:9e:8c:fe:b5:c9:
7a:7c:9b:7d:0c:89:ee:c3:e0:5e:95:08:3a:4b:08:
f9:c8:0f:26:2e:25:ac:dc:98:53:39:df:91:10:30:
88:78:45:2f:20:08:4d:b1:9a:4f:4d:b4:a5:81:72:
42:f1:ca:82:c9:eb:cf:e7:73:7b:f6:54:b4:8c:09:
28:1a:eb:25:5b:c8:b1:fe:5c:bd:3d:69:d7:e8:02:
e9:b5:fc:59:f2:c4:a8:dc:5f:9e:db:7a:bf:7b:62:
25:f2:17:01:56:b7:38:5c:19:df:f3:6c:01:50:42:
36:7f:82:9d:cb:c1:ef:06:ff:5e:3f:0b:db:5a:c7:
06:ef:fd:c2:d1:64:b6:15:94:ef:b8:8c:42:ec:a4:
59:bd:8c:48:58:1e:95:71:06:3d:ec:fc:3a:dc:9f:
1e:2c:28:ae:4a:23:1a:c4:93:b5:a3:e4:98:c5:31:
20:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:DB:2B:B3:4F:44:57:22:74:16:B2:63:33:FB:AB:2C:4F:17:EC:B3
X509v3 Authority Key Identifier:
keyid:56:F0:1A:1E:99:EA:5D:4F:39:94:D3:33:09:D0:94:31:2D:C8:54:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VvAaHpnqXU85lNMzCdCUMS3IVCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:a0:59:41:ba:fd:a1:f9:14:e8:38:d6:1b:8c:98:5e:b6:be:
97:6a:8e:bf:87:48:38:8c:76:42:ca:f1:80:41:31:3c:73:55:
cd:55:e6:37:dd:49:42:be:b7:b4:42:91:67:b1:11:dd:a3:43:
b4:5a:31:e6:6d:ed:6a:df:31:6e:29:3e:d7:2f:ba:09:77:90:
07:d9:4e:da:44:07:8d:72:cd:0a:18:cb:28:d5:5c:ac:a2:21:
64:9c:68:ca:b4:81:66:19:aa:17:d1:26:6f:7c:fe:e4:68:a4:
b4:07:9c:17:4b:76:23:6f:fe:ff:82:08:27:4c:c8:ab:35:cc:
7f:26:bf:9a:e7:1b:5c:14:d9:5e:61:33:51:ab:8c:bd:8e:5c:
2b:1a:4a:4c:bc:01:d9:5d:c2:76:b5:34:fa:2c:15:25:80:65:
d3:25:99:1d:a2:71:11:fd:57:21:5d:0b:e6:53:82:0c:aa:7c:
9c:d3:40:f2:89:e9:2d:cc:fd:26:f3:9e:dd:80:6e:1a:ce:58:
b6:e6:dc:e1:80:e2:ef:07:a0:da:00:9a:cf:e5:1a:ad:5c:04:
7d:10:95:9a:70:c7:07:3c:ec:9c:f3:07:44:27:2b:52:8c:e2:
42:5b:fb:55:ba:9d:19:48:e8:c8:1e:3a:f7:9f:e2:1b:12:1c:
68:3b:98:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:01:55 2025 by rpki-client