Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/VVDgbuAsWjLlTciYU7SqN4-GBPc.mft
File: VVDgbuAsWjLlTciYU7SqN4-GBPc.mft (raw, json)
Hash identifier: x2fNqPVE4Q+09zvoaj+kEDCbCUkHAeMsWbv9tfiC9zA=
Subject key identifier: 40:39:47:7F:AC:79:F5:11:BD:81:E9:3F:8B:7B:0A:FB:2B:6C:01:19
Authority key identifier: 55:50:E0:6E:E0:2C:5A:32:E5:4D:C8:98:53:B4:AA:37:8F:86:04:F7
Certificate issuer: /CN=5550e06ee02c5a32e54dc89853b4aa378f8604f7
Certificate serial: 01974E8E293223F1945BC11AD7D189C462AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VVDgbuAsWjLlTciYU7SqN4-GBPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/VVDgbuAsWjLlTciYU7SqN4-GBPc.mft
Manifest number: 0AC5
Signing time: Sun 08 Jun 2025 08:00:28 +0000
Manifest this update: Sun 08 Jun 2025 08:00:28 +0000
Manifest next update: Mon 09 Jun 2025 08:00:28 +0000
Files and hashes: 1: 5SQUdjWeY9PdQ3b1GR4L3yx_VJ4.roa (hash: VQXaoCtg+0JbslSnqFe7W7gX+zMPO93yVdM1v7U3tJ8=)
2: MPnVMUDELwRT1_LHbrcJgd4NmwE.roa (hash: +uiYqzvO4MwwXvvIKhlCHsQt5+OwmIQB9Ijy/fYg7A8=)
3: VVDgbuAsWjLlTciYU7SqN4-GBPc.crl (hash: qZEONSZSmHo367CkXCP7BFHV6GC7Hponz5KoHaAwygs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/VVDgbuAsWjLlTciYU7SqN4-GBPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/VVDgbuAsWjLlTciYU7SqN4-GBPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VVDgbuAsWjLlTciYU7SqN4-GBPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:8e:29:32:23:f1:94:5b:c1:1a:d7:d1:89:c4:62:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5550e06ee02c5a32e54dc89853b4aa378f8604f7
Validity
Not Before: Jun 8 08:00:28 2025 GMT
Not After : Jun 9 08:00:28 2025 GMT
Subject: CN=4039477fac79f511bd81e93f8b7b0afb2b6c0119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:86:bd:11:45:74:ca:d4:8d:41:0b:aa:57:51:
7f:93:4a:d9:59:35:e3:8e:13:9f:38:78:f1:c4:13:
d1:64:0f:ab:ce:72:11:78:b6:0d:58:d6:7e:49:1b:
56:77:09:ed:77:99:de:a4:a1:ae:a2:c2:9a:df:d5:
d7:22:d0:a7:42:56:b4:b1:fe:d3:19:b3:2a:43:83:
9d:d4:43:2d:d4:e2:c3:aa:86:ac:06:6d:cc:d6:5d:
b9:82:d2:5e:fe:e6:22:65:4c:ae:48:fd:0a:ec:5e:
b3:9b:9b:55:c2:55:9c:bf:54:a7:c5:b4:65:3f:4d:
ea:65:58:18:f0:ef:78:db:bd:40:95:93:39:55:96:
31:70:df:fc:18:5f:a1:da:63:8e:46:64:4f:db:3d:
b8:8b:56:4c:47:ca:d2:e4:6b:f6:88:cc:82:90:57:
6c:08:92:3e:41:4c:94:3a:f6:14:f1:ff:4e:25:cb:
95:e0:15:a1:57:b8:6a:ac:51:17:a3:06:1d:b6:1c:
66:58:0b:43:e2:c4:5d:cc:8a:7e:55:7f:4f:c3:91:
c5:0b:b0:4a:cf:b2:b5:e0:55:eb:3f:08:20:14:dc:
de:3f:85:2a:1e:0f:c4:5a:64:7e:ba:ba:d7:a4:3b:
e4:3f:e7:53:dd:c0:5e:cf:38:1a:0c:48:07:0f:29:
42:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:39:47:7F:AC:79:F5:11:BD:81:E9:3F:8B:7B:0A:FB:2B:6C:01:19
X509v3 Authority Key Identifier:
keyid:55:50:E0:6E:E0:2C:5A:32:E5:4D:C8:98:53:B4:AA:37:8F:86:04:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VVDgbuAsWjLlTciYU7SqN4-GBPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/VVDgbuAsWjLlTciYU7SqN4-GBPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/VVDgbuAsWjLlTciYU7SqN4-GBPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:8a:c3:4a:48:53:45:de:65:6f:c0:de:53:92:d7:97:25:0d:
b1:8d:29:ba:60:e7:9d:d4:37:85:9e:18:1f:89:84:df:49:5d:
5b:8d:c6:bc:42:35:9f:ad:74:7f:75:26:a4:9b:5a:c0:c7:9f:
45:85:1a:57:83:2e:1f:30:67:89:98:ad:c9:2e:ad:9c:54:4c:
72:9a:92:02:02:07:be:23:84:80:0a:61:b7:29:ad:2b:bc:08:
ba:3b:c3:04:10:8a:b2:f1:9e:77:56:21:a8:9b:fe:0e:ab:99:
db:26:05:cb:1e:78:da:e7:c5:63:a5:b8:db:ff:53:2f:de:56:
09:62:7e:70:fe:f7:80:c6:36:a2:47:fe:f6:73:68:90:9c:cc:
a6:60:02:59:47:13:d2:4a:2a:22:12:21:f4:88:9d:37:dc:2d:
85:8c:9b:a6:68:81:ea:1e:24:d1:8c:20:78:04:65:c1:ad:99:
1a:fc:b1:0b:6c:c0:51:05:e0:ea:73:4b:a3:a8:51:90:3d:4b:
08:a4:f3:ff:c9:40:07:7a:0b:36:0c:cb:4c:55:f6:c9:f2:59:
d1:4b:94:f6:c0:a1:6b:48:e2:29:a2:07:de:57:a2:f6:07:7b:
86:8d:b2:34:a4:b6:ad:af:8a:31:56:68:ac:9d:1e:52:38:5b:
c5:d7:70:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:16:39 2025 by rpki-client