Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
File: VAavgE71pjb0ZOcajUHo1AGn9pc.mft (raw, json)
Hash identifier: lQtL0Cvo7bPnzRAyIMQFI8suxS2qxd1IKupLb0KL4xc=
Subject key identifier: F9:D7:1F:5E:9A:02:DD:07:8B:0E:2B:9E:9F:99:2C:D0:4E:0C:27:5C
Authority key identifier: 54:06:AF:80:4E:F5:A6:36:F4:64:E7:1A:8D:41:E8:D4:01:A7:F6:97
Certificate issuer: /CN=5406af804ef5a636f464e71a8d41e8d401a7f697
Certificate serial: 01974B1F2333C48F6B14124DE66CE6F01E24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAavgE71pjb0ZOcajUHo1AGn9pc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
Manifest number: 1510
Signing time: Sat 07 Jun 2025 16:00:20 +0000
Manifest this update: Sat 07 Jun 2025 16:00:20 +0000
Manifest next update: Sun 08 Jun 2025 16:00:20 +0000
Files and hashes: 1: IxyW73OMckCNett38gRruShmhsE.roa (hash: kwXxrh4BlKqwqWrrFQAbZ+7ZY9nBQf7G/9/mLoszBNE=)
2: VAavgE71pjb0ZOcajUHo1AGn9pc.crl (hash: 7L9GqIAvoiASwxXq0Auy31NoVPYAEnIO/hlVdxztzdU=)
3: _FNz_oG2zcFLeFpovQJ_R2vg-vc.roa (hash: SUqY4ZQvD6jvXvZ8JF1d/vGljIMHXNiGDX2pW4O5ywc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAavgE71pjb0ZOcajUHo1AGn9pc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:23:33:c4:8f:6b:14:12:4d:e6:6c:e6:f0:1e:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5406af804ef5a636f464e71a8d41e8d401a7f697
Validity
Not Before: Jun 7 16:00:20 2025 GMT
Not After : Jun 8 16:00:20 2025 GMT
Subject: CN=f9d71f5e9a02dd078b0e2b9e9f992cd04e0c275c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4e:7f:3b:1b:76:3b:a1:6c:5c:20:88:d9:da:
5f:4e:bf:44:6c:80:4c:72:71:34:d1:64:63:5d:92:
89:5e:e9:65:cc:0c:c7:75:0d:66:c9:3c:57:46:83:
84:b1:04:06:50:a0:0d:8a:d3:ec:63:a7:84:04:ec:
6c:e6:a0:48:50:d2:9c:3e:e1:04:30:08:04:3a:66:
7f:6d:4c:c9:fa:3c:10:ed:77:03:3b:b6:17:0c:0e:
e6:a6:99:21:51:9e:c5:a8:10:25:ff:f5:80:0a:aa:
39:d0:55:7d:7f:7d:ce:17:4a:af:10:61:9a:7b:e1:
e9:db:7e:4e:5b:8b:b4:17:e0:52:a2:27:e2:ff:b4:
f4:39:e2:11:15:20:92:35:bd:41:b9:5c:0c:f2:d9:
3d:8b:b8:81:ef:4e:09:79:2f:91:81:be:16:10:39:
17:58:dd:d8:35:cd:f2:90:41:15:d0:64:88:a8:bf:
a6:0a:d0:3d:12:62:d8:10:97:56:0c:d7:a9:ee:1c:
13:8b:18:da:73:58:7f:fc:92:2c:a4:50:d7:ce:40:
a0:7f:f6:db:22:7d:71:a7:bc:8f:42:c0:2f:47:c1:
3b:e9:4c:24:16:d1:82:55:1d:c9:a5:25:09:48:f8:
26:24:10:70:41:7e:a5:a9:7f:d0:17:23:11:4c:cc:
58:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D7:1F:5E:9A:02:DD:07:8B:0E:2B:9E:9F:99:2C:D0:4E:0C:27:5C
X509v3 Authority Key Identifier:
keyid:54:06:AF:80:4E:F5:A6:36:F4:64:E7:1A:8D:41:E8:D4:01:A7:F6:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAavgE71pjb0ZOcajUHo1AGn9pc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:a7:06:33:5a:15:a4:6c:d2:3a:88:6d:05:1a:a8:fc:87:ba:
c3:40:cb:4e:3d:1c:d7:af:f4:ce:00:62:c5:e8:7a:ca:63:94:
c7:da:37:2d:1a:16:fa:56:40:ee:60:b2:d3:56:55:43:71:2d:
a5:01:e4:9b:e5:3e:92:29:62:d4:fb:ae:1f:6f:11:26:a5:75:
f6:93:4e:b6:7c:80:fe:9a:ca:ad:45:1e:a5:e4:d8:4e:b4:1b:
0b:3f:90:12:28:ad:f7:fb:56:87:ba:07:e8:80:8a:44:a6:11:
1e:05:fb:8f:c9:26:b5:79:22:0e:d8:07:05:9b:f6:92:8f:17:
1c:da:c9:7f:e0:b3:7a:5a:00:7b:5d:3f:be:5e:40:19:db:c2:
47:d1:f5:8e:d3:53:0d:51:18:c5:68:85:40:a5:35:81:b9:1c:
52:62:3d:ef:59:50:01:c4:9b:b0:e6:e8:77:f3:a7:44:4b:0d:
fe:b9:50:b0:37:ba:ef:72:c5:bb:14:4c:2e:58:e2:64:60:27:
a1:4d:0e:2f:6f:68:f2:18:97:7f:b3:38:10:fa:09:07:94:a6:
e3:74:43:03:5f:af:af:e3:2e:68:e9:68:a2:3c:c4:01:7f:df:
92:c2:b0:98:c9:62:43:89:9f:da:ce:53:40:43:aa:49:59:e8:
80:b4:60:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:26:21 2025 by rpki-client