Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/VcQvLHehgijJ-pqzeYQmYNB5KQg.mft
File: VcQvLHehgijJ-pqzeYQmYNB5KQg.mft (raw, json)
Hash identifier: WxCQ+kHmbOGNwCjl+tuJk9tHK6BFGDDsyS1NAI0B60Y=
Subject key identifier: 32:AB:58:37:61:39:7C:1F:8C:CB:51:51:27:BE:54:4F:22:C2:94:30
Authority key identifier: 55:C4:2F:2C:77:A1:82:28:C9:FA:9A:B3:79:84:26:60:D0:79:29:08
Certificate issuer: /CN=55c42f2c77a18228c9fa9ab379842660d0792908
Certificate serial: 01974AE8B0602A9D5322BB90ACD8FFC32422
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VcQvLHehgijJ-pqzeYQmYNB5KQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/VcQvLHehgijJ-pqzeYQmYNB5KQg.mft
Manifest number: 0543
Signing time: Sat 07 Jun 2025 15:00:52 +0000
Manifest this update: Sat 07 Jun 2025 15:00:52 +0000
Manifest next update: Sun 08 Jun 2025 15:00:52 +0000
Files and hashes: 1: En2fZob7-Xp8zkiLryaS1TtBdYw.roa (hash: zk5DD5xhiB++oRKxPmJdvhY2qq8VEHhmVtAgMqGgPO4=)
2: VcQvLHehgijJ-pqzeYQmYNB5KQg.crl (hash: s09eGQsNvCULPUY/O0Tsc2Iy2mHITXZMVZwfuO72BUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/VcQvLHehgijJ-pqzeYQmYNB5KQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/VcQvLHehgijJ-pqzeYQmYNB5KQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/VcQvLHehgijJ-pqzeYQmYNB5KQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:b0:60:2a:9d:53:22:bb:90:ac:d8:ff:c3:24:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55c42f2c77a18228c9fa9ab379842660d0792908
Validity
Not Before: Jun 7 15:00:52 2025 GMT
Not After : Jun 8 15:00:52 2025 GMT
Subject: CN=32ab583761397c1f8ccb515127be544f22c29430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:01:2d:f3:fc:a7:2c:f8:f9:93:e2:c3:5b:0a:
24:9c:fe:61:e9:6f:5c:45:70:40:2c:1c:63:a0:2a:
5f:28:02:af:47:f8:d4:55:3d:11:09:c3:31:85:04:
da:3f:93:11:35:03:dc:ef:c3:08:20:8c:9f:61:cf:
1e:1a:48:b5:8c:22:bd:9d:b8:f3:bf:29:33:16:7d:
e4:cb:20:96:95:12:28:c9:56:bf:02:4d:08:5c:46:
11:fb:3c:38:0b:f1:bb:be:02:ee:86:e8:cc:3d:0d:
7e:4a:dd:0d:36:0e:8c:7a:ef:99:3f:2e:12:46:e2:
78:31:6d:19:5c:01:5a:81:e1:74:34:80:c1:da:98:
02:36:fc:cc:db:09:12:4b:a1:c1:75:54:33:77:2a:
dc:8d:34:6a:b0:d8:ca:b0:56:11:e8:2b:ee:3c:5a:
46:a6:19:39:46:a6:62:b1:49:72:8c:6e:a6:b4:35:
9e:ef:67:e2:ab:72:54:56:81:bc:82:db:ac:db:ce:
a9:29:68:d7:a4:75:ad:4a:81:06:56:b4:f2:8f:8e:
9b:4e:da:a0:67:78:86:db:87:d0:b4:ee:7d:b2:27:
80:7c:2e:73:78:73:43:1d:fb:57:c6:c0:e7:ef:7c:
97:da:98:6e:2d:75:77:9d:4b:2c:dc:19:48:74:a8:
21:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:AB:58:37:61:39:7C:1F:8C:CB:51:51:27:BE:54:4F:22:C2:94:30
X509v3 Authority Key Identifier:
keyid:55:C4:2F:2C:77:A1:82:28:C9:FA:9A:B3:79:84:26:60:D0:79:29:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VcQvLHehgijJ-pqzeYQmYNB5KQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/VcQvLHehgijJ-pqzeYQmYNB5KQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/VcQvLHehgijJ-pqzeYQmYNB5KQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:3f:79:72:cb:51:74:51:7e:d8:2d:8a:27:c1:48:43:ca:b3:
0e:a5:6e:f0:40:1b:d6:52:32:3d:a9:e6:b5:ca:5d:57:06:64:
11:a9:bd:52:be:e4:dc:03:58:30:45:01:ac:1a:b6:c0:0c:c4:
e2:df:a9:7e:ae:8b:df:dc:3d:8e:0c:a4:f8:20:b5:73:db:3e:
c7:f1:f9:69:60:2d:48:a3:9b:4a:1f:8a:1e:a6:d4:b3:d3:49:
b7:8c:b5:f2:78:fd:34:f0:23:c0:92:e3:bd:a7:10:e0:ce:b6:
c1:a2:da:62:04:c2:c2:2a:1c:2f:58:51:9b:37:4c:ca:ce:7f:
07:4c:c5:6f:81:a9:14:44:d5:2d:4d:2c:34:d5:13:b6:a0:de:
52:ff:00:c4:cf:67:65:ae:34:ff:c8:e8:85:ec:3c:06:9d:d0:
31:7d:12:fa:5e:40:0c:72:b9:38:3b:fc:74:5a:5a:38:38:ee:
64:03:5f:88:7e:e3:44:84:54:67:e6:db:4f:fd:60:3f:5b:e5:
9f:3a:aa:91:4b:f3:fd:29:c6:1d:01:23:8f:ff:0b:ef:19:e0:
72:64:ef:84:d1:1c:00:4a:fe:44:5f:bc:3b:f1:1d:ee:04:50:
8c:b6:02:c8:2b:63:29:01:7d:f6:bd:c8:ed:0a:4a:23:c8:59:
37:28:81:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:34:31 2025 by rpki-client