Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.mft
File: VW22ld3zHiiYRm757fukiA2OGfs.mft (raw, json)
Hash identifier: jMeYWY9vMlvZnjgsmpxy4JlEg9mfFlgFOQiz9ygamnU=
Subject key identifier: 40:5B:D1:F6:D6:EB:42:48:50:F2:20:18:7F:D5:EB:3A:90:1A:A6:B8
Authority key identifier: 55:6D:B6:95:DD:F3:1E:28:98:46:6E:F9:ED:FB:A4:88:0D:8E:19:FB
Certificate issuer: /CN=556db695ddf31e2898466ef9edfba4880d8e19fb
Certificate serial: 01974EC54B93F691FC0C7F392BBB5F387751
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VW22ld3zHiiYRm757fukiA2OGfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.mft
Manifest number: 79
Signing time: Sun 08 Jun 2025 09:00:41 +0000
Manifest this update: Sun 08 Jun 2025 09:00:41 +0000
Manifest next update: Mon 09 Jun 2025 09:00:41 +0000
Files and hashes: 1: EslCT3gxkxtf5DQ7QkwYmLYeFlo.roa (hash: Uhm0SZdyDhhQLcGTvxZ7EAQVgtjflrvk9JNzMwkUJ7I=)
2: VW22ld3zHiiYRm757fukiA2OGfs.crl (hash: sL38ftATc5KH5RqJ30SdnRa+A44in7sG4uCArN8c3GU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/VW22ld3zHiiYRm757fukiA2OGfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:4b:93:f6:91:fc:0c:7f:39:2b:bb:5f:38:77:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=556db695ddf31e2898466ef9edfba4880d8e19fb
Validity
Not Before: Jun 8 09:00:41 2025 GMT
Not After : Jun 9 09:00:41 2025 GMT
Subject: CN=405bd1f6d6eb424850f220187fd5eb3a901aa6b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:be:fa:9f:1a:1b:68:e2:05:c4:34:0c:59:78:
5f:0a:cd:25:2d:b7:ab:fd:ef:6c:3e:90:1f:df:67:
80:5f:6f:bc:c7:b0:07:5f:98:30:e9:18:5e:56:4c:
da:df:5d:bd:da:3f:04:40:70:cb:90:9a:77:22:13:
f8:c4:43:fd:11:60:34:26:09:07:29:2c:3a:e1:5a:
39:16:2e:91:19:8b:54:ad:70:21:f3:44:9e:5f:5b:
e9:6d:62:3c:84:17:d9:da:2f:48:43:4f:ed:c5:f2:
03:26:9e:57:3b:e6:8e:77:1c:1d:7c:c8:d3:f2:dc:
5f:c6:96:fe:40:4b:88:24:75:b3:1c:be:8f:a0:d6:
ba:75:06:a3:ea:2d:ba:81:f0:af:c0:65:e6:f4:d8:
fc:cb:16:aa:a3:89:6f:99:46:95:05:5c:d3:f5:e2:
a8:08:23:94:20:ae:69:0b:6c:2c:25:1a:bf:bb:86:
0c:b9:8e:82:54:86:d7:49:bf:53:aa:af:b8:f9:71:
ff:82:f6:d9:77:ff:7c:19:30:75:3a:c0:78:51:87:
7e:40:70:bc:24:6d:f2:bf:5b:5d:d6:ff:08:14:15:
0f:b7:cb:9c:83:91:88:f6:6c:53:d6:b9:ca:8c:94:
69:15:d0:72:05:43:26:c6:00:d8:05:ac:a1:64:b4:
ad:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:5B:D1:F6:D6:EB:42:48:50:F2:20:18:7F:D5:EB:3A:90:1A:A6:B8
X509v3 Authority Key Identifier:
keyid:55:6D:B6:95:DD:F3:1E:28:98:46:6E:F9:ED:FB:A4:88:0D:8E:19:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VW22ld3zHiiYRm757fukiA2OGfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:16:2c:a8:db:be:b8:31:71:e2:2a:f5:fb:73:49:7a:53:b9:
23:d0:3d:f5:8a:d3:5a:86:ba:91:b0:f7:69:2a:64:df:1d:44:
de:20:97:f9:56:98:19:1f:22:22:f5:7f:b7:05:f3:ac:20:67:
41:ad:3c:cd:59:1b:6d:a6:e8:01:2f:09:3d:5d:e7:a8:b8:ba:
60:72:1d:20:e5:8a:6c:62:db:e2:78:47:e9:60:92:6e:d8:5b:
93:86:4d:89:4c:ca:80:e5:5c:58:35:df:70:f0:71:f0:42:19:
02:dd:17:85:18:34:a2:4c:71:f3:37:41:c5:74:aa:30:44:e3:
29:70:0b:ca:d1:19:a2:c0:8d:1e:bc:cb:b7:57:46:c6:96:eb:
ea:13:c8:8a:08:fb:93:82:04:61:4c:7e:df:8e:a1:09:97:b3:
f3:10:27:d0:89:d7:98:f6:6a:30:43:1a:4c:2c:3f:e3:a2:a7:
70:09:e2:2a:d7:73:3f:d0:0a:59:c6:b5:f5:42:6d:41:c6:ee:
2c:a2:8a:48:96:16:43:31:8c:85:d1:be:b8:4f:71:5f:4c:20:
94:cd:f2:97:42:5e:39:08:66:95:15:69:20:2d:b4:b2:d2:62:
4f:b1:be:5a:8b:8c:63:eb:1d:c5:c8:96:e6:30:f2:44:41:fc:
f4:75:1c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:08:47 2025 by rpki-client