Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/a72a92-568b-4327-9c1d-6681f916e554/1/VtV_bPKMmCwdP_bFJX85npuVW90.mft
File: VtV_bPKMmCwdP_bFJX85npuVW90.mft (raw, json)
Hash identifier: wAcN22OH0weQqq/B/w6JbjwUsmnwVrcSDKz0Nxeq8J0=
Subject key identifier: 29:1F:65:16:72:73:7E:B9:E5:78:73:B4:59:C4:75:71:3C:32:37:93
Authority key identifier: 56:D5:7F:6C:F2:8C:98:2C:1D:3F:F6:C5:25:7F:39:9E:9B:95:5B:DD
Certificate issuer: /CN=56d57f6cf28c982c1d3ff6c5257f399e9b955bdd
Certificate serial: 01975E6F0497BFB55F4C76294E44BFA896BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtV_bPKMmCwdP_bFJX85npuVW90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/a72a92-568b-4327-9c1d-6681f916e554/1/VtV_bPKMmCwdP_bFJX85npuVW90.mft
Manifest number: 14AF
Signing time: Wed 11 Jun 2025 10:00:23 +0000
Manifest this update: Wed 11 Jun 2025 10:00:23 +0000
Manifest next update: Thu 12 Jun 2025 10:00:23 +0000
Files and hashes: 1: 3oykizYoQAY0I58Of8Cq7NhfUKc.roa (hash: cQQcIqMFqqgJgSMsMD6mIgtzNJvUpT4D17fJSPeJdeU=)
2: GHjwnLUndLphHCJPh-qrOX8_zps.roa (hash: b//UMqi7Agd+yuEn41KzmO7VIfrmzPVe7tc4UxNlKdk=)
3: VtV_bPKMmCwdP_bFJX85npuVW90.crl (hash: gme8Btw+29JRWVeat64Y4XmMSQ0e3zk3zYIMXiLbfI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/a72a92-568b-4327-9c1d-6681f916e554/1/VtV_bPKMmCwdP_bFJX85npuVW90.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/a72a92-568b-4327-9c1d-6681f916e554/1/VtV_bPKMmCwdP_bFJX85npuVW90.mft
rsync://rpki.ripe.net/repository/DEFAULT/VtV_bPKMmCwdP_bFJX85npuVW90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:6f:04:97:bf:b5:5f:4c:76:29:4e:44:bf:a8:96:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56d57f6cf28c982c1d3ff6c5257f399e9b955bdd
Validity
Not Before: Jun 11 10:00:23 2025 GMT
Not After : Jun 12 10:00:23 2025 GMT
Subject: CN=291f651672737eb9e57873b459c475713c323793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a5:d6:d7:59:dd:71:cf:09:7b:33:c5:62:cb:
52:7f:69:e3:0e:ee:14:1a:86:93:73:7e:28:99:57:
a0:5a:e1:8d:40:5e:41:70:ff:33:ee:2f:0d:32:cb:
ea:d1:6b:26:0c:d0:f5:f4:e3:81:83:c9:ed:41:68:
2e:35:87:80:cf:2f:54:9b:91:da:84:dd:d5:50:08:
fa:9a:dd:cd:9b:1d:cd:2f:11:b9:28:d3:c7:b2:1c:
e3:ce:2b:bf:50:a5:02:39:d6:40:e4:36:c5:48:31:
4a:27:53:38:17:1e:4a:cf:2d:e8:81:55:4e:fc:65:
35:da:49:10:18:c0:7d:98:c3:6d:a2:25:7a:f2:72:
71:6a:23:88:31:f9:26:ec:02:5b:56:a9:1d:a2:73:
b5:c3:48:17:76:f8:6c:2d:e4:82:7f:cc:85:2c:23:
da:81:4b:65:6d:27:82:94:d2:04:d5:8d:7e:e3:97:
33:86:ce:a0:50:80:89:90:68:d7:93:c7:56:29:5e:
bd:e5:a0:0a:22:55:e6:ad:61:52:e5:72:09:9e:94:
25:dc:55:66:c5:15:cf:e4:d7:e4:cc:53:29:1f:97:
f2:51:ff:c6:f2:13:26:d0:ad:5e:9f:f6:bc:fb:28:
0c:7a:9b:bf:01:ef:df:bb:c7:71:ac:ca:ce:e7:0c:
8c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:1F:65:16:72:73:7E:B9:E5:78:73:B4:59:C4:75:71:3C:32:37:93
X509v3 Authority Key Identifier:
keyid:56:D5:7F:6C:F2:8C:98:2C:1D:3F:F6:C5:25:7F:39:9E:9B:95:5B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtV_bPKMmCwdP_bFJX85npuVW90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a72a92-568b-4327-9c1d-6681f916e554/1/VtV_bPKMmCwdP_bFJX85npuVW90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a72a92-568b-4327-9c1d-6681f916e554/1/VtV_bPKMmCwdP_bFJX85npuVW90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:05:98:18:5d:a3:7d:b4:ec:73:b6:39:95:f3:56:8f:83:ad:
61:68:bb:c7:22:34:78:75:55:0a:d7:34:cf:b0:d9:1e:59:78:
4c:82:68:f6:00:f3:c8:d6:c3:6a:15:31:5b:71:b8:2e:3f:b9:
75:68:68:f3:ef:19:5c:56:43:b2:cb:e5:5b:e2:6c:9a:74:cc:
4d:55:ff:f1:73:0e:36:b0:e8:f1:ef:17:40:c7:44:33:6e:58:
78:10:75:89:c5:c1:16:4d:2a:be:0f:49:e5:63:19:1f:63:75:
50:21:d1:0b:20:2d:e0:d1:81:6b:12:ed:d5:4b:a1:06:c3:cb:
60:45:db:d1:ca:75:1d:0c:35:f2:bf:47:8d:f4:2f:4f:df:28:
74:72:83:6c:d8:c5:56:8c:2b:a6:30:16:be:8b:d2:ac:ec:b5:
1b:d6:89:da:8e:b2:cd:1f:db:4b:37:59:44:a9:7f:5e:c0:25:
20:9c:ce:04:62:dd:bc:2f:c2:d2:7d:59:3d:55:42:e0:17:a6:
04:61:94:e2:ec:11:5a:7f:13:04:07:52:48:33:6c:65:c5:81:
81:ee:ee:01:b8:1a:b4:4a:71:3a:b5:dd:22:43:4b:36:db:66:
43:fd:78:25:30:96:ca:c5:5a:c3:64:62:c6:43:5c:e6:2a:81:
f2:ec:fc:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 14:40:24 2025 by rpki-client