Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft
File: VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft (raw, json)
Hash identifier: G9pmW20YcQhONa7R+kAnCXGDxyMxbTLVD8BiWXm392E=
Subject key identifier: 52:5B:43:DD:F4:E5:49:E1:FE:07:D0:74:23:94:5C:93:9F:78:B2:80
Authority key identifier: 56:43:41:5C:22:E1:41:97:2C:0D:7E:76:C2:4E:88:B2:24:27:B0:24
Certificate issuer: /CN=5643415c22e141972c0d7e76c24e88b22427b024
Certificate serial: 01974AE942FFEAD8F5409E5C9526B49AFE09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VkNBXCLhQZcsDX52wk6IsiQnsCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 15:01:30 +0000
Manifest this update: Sat 07 Jun 2025 15:01:30 +0000
Manifest next update: Sun 08 Jun 2025 15:01:30 +0000
Files and hashes: 1: 6qanCjcucoDvogEjoEibMas1xCw.roa (hash: iHrFUYTwZPBriNgyEwpJfBAHJGESvwJ6/vI6y1aBDEY=)
2: OJH-3bY7Jey_mmpYXzYEewikSRw.roa (hash: QWW0B/GAEpshetNaEGEwKmz4qiBbm/sCm0lolDcM+Gk=)
3: VkNBXCLhQZcsDX52wk6IsiQnsCQ.crl (hash: 3hSchkC20areusFEi3UiQFMKahpVvjEMdMvFw6tQOXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VkNBXCLhQZcsDX52wk6IsiQnsCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e9:42:ff:ea:d8:f5:40:9e:5c:95:26:b4:9a:fe:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5643415c22e141972c0d7e76c24e88b22427b024
Validity
Not Before: Jun 7 15:01:30 2025 GMT
Not After : Jun 8 15:01:30 2025 GMT
Subject: CN=525b43ddf4e549e1fe07d07423945c939f78b280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1c:21:93:42:25:af:fa:ed:1f:8f:cc:3f:5b:
17:7e:dd:5b:53:7e:0f:21:27:bc:28:fc:c6:b8:75:
e6:5d:82:ee:44:b2:51:f9:59:b7:a7:39:c8:2a:60:
c4:7f:9d:8c:cf:04:43:de:d4:04:03:c6:a7:58:d2:
1b:75:c9:c5:da:b6:4a:a8:f2:28:d8:59:0b:fa:d8:
3a:8f:88:f1:b1:53:5f:b1:3b:6e:6c:3f:17:dc:8c:
b0:51:6b:cc:39:19:a7:25:bd:cd:7f:b5:4e:24:ff:
c4:ee:1a:14:8a:ad:e7:0d:f4:c5:ec:9a:8c:f8:47:
80:31:a9:26:07:c3:00:7d:58:96:5c:4f:f5:df:56:
d2:bb:ab:d7:7d:df:a5:13:34:58:2e:e7:58:09:55:
23:25:6f:3d:81:1a:ca:60:1a:cf:50:85:54:99:2e:
75:70:ec:47:79:4e:3c:02:76:bc:5b:f8:af:3e:a8:
c9:0b:0b:67:4d:cf:65:61:cd:31:fb:31:21:a6:ed:
f8:c1:83:00:7b:0e:e2:5b:95:17:9f:e1:02:17:cf:
ca:2b:ef:8b:04:aa:9e:30:54:b0:3a:ec:86:50:52:
a0:3d:69:5a:7e:ac:2c:0e:72:5a:99:db:39:1a:0a:
51:fe:ef:7f:7d:92:aa:c0:21:11:11:cc:fd:92:d3:
08:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:5B:43:DD:F4:E5:49:E1:FE:07:D0:74:23:94:5C:93:9F:78:B2:80
X509v3 Authority Key Identifier:
keyid:56:43:41:5C:22:E1:41:97:2C:0D:7E:76:C2:4E:88:B2:24:27:B0:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkNBXCLhQZcsDX52wk6IsiQnsCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:fd:17:08:dc:3d:0e:ac:e6:11:6f:05:7b:70:32:f1:e3:cc:
ea:a7:18:94:0e:89:b2:b6:49:60:65:1e:7a:55:9b:09:6a:82:
77:10:9d:59:ce:78:37:7f:51:e5:67:73:c8:1d:f1:4e:f9:80:
78:9e:b0:2d:d9:d5:ee:af:46:f7:67:6a:52:62:41:b7:cd:00:
fa:aa:0a:61:b6:92:af:ec:5c:32:ef:39:25:1c:b3:46:82:b4:
5a:08:18:68:14:6c:78:51:c0:be:cb:a1:88:39:73:7f:67:4d:
d8:a3:8f:12:d3:51:50:04:b8:85:be:b0:fa:b0:f1:08:62:4e:
4d:c6:6e:5b:55:51:31:a2:7b:cc:4d:aa:5a:80:f9:f2:59:13:
60:5b:69:b5:90:35:ac:ce:54:d9:d6:1a:82:75:e6:50:16:c2:
33:63:89:94:63:3c:cd:c3:f2:26:41:80:47:e3:c0:a2:01:9e:
51:bd:23:68:b0:33:7f:4d:8e:bf:12:42:83:ad:79:02:24:86:
31:66:40:cc:fb:d3:fb:78:fd:14:87:ed:fe:aa:43:b7:cc:9e:
cb:2b:e3:42:f8:b0:2a:14:e8:50:85:e0:2f:be:25:92:3c:fb:
67:45:cd:8a:05:14:eb:5f:e5:5d:65:42:c1:1b:92:ce:71:87:
9b:42:b9:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:26:24 2025 by rpki-client