Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
File: VSrToLS3ToWvVPWK11owJrffcYE.mft (raw, json)
Hash identifier: 83vvqgYR4ROqRE6pb9+RuHePi7HPhmGy7HIXbT2HYRg=
Subject key identifier: A8:08:14:B1:79:56:1A:DC:0B:C9:59:64:76:D5:F4:60:4F:E2:99:FC
Authority key identifier: 55:2A:D3:A0:B4:B7:4E:85:AF:54:F5:8A:D7:5A:30:26:B7:DF:71:81
Certificate issuer: /CN=552ad3a0b4b74e85af54f58ad75a3026b7df7181
Certificate serial: 01974A0D05285D34CBE29CDEFFF9391CCAC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSrToLS3ToWvVPWK11owJrffcYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
Manifest number: 15B7
Signing time: Sat 07 Jun 2025 11:00:56 +0000
Manifest this update: Sat 07 Jun 2025 11:00:56 +0000
Manifest next update: Sun 08 Jun 2025 11:00:56 +0000
Files and hashes: 1: 6jmBqQ69ucquob5LYoU8XO0aoaM.roa (hash: iVwx0LgAhkHT9krjXAM19RbPrDxsVzpzta/Wm4cdzGM=)
2: Tc3s-2xco0JsiKKHs4HafxTscjs.roa (hash: ldDhuMj8RJQOwqkPXb97Us2/HhGxeidwxkit00ybDDk=)
3: VSrToLS3ToWvVPWK11owJrffcYE.crl (hash: b3vPbSDxL3yIohFTPH4dU2nmCTYDZ7IoRi4H32oN9iI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VSrToLS3ToWvVPWK11owJrffcYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0d:05:28:5d:34:cb:e2:9c:de:ff:f9:39:1c:ca:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552ad3a0b4b74e85af54f58ad75a3026b7df7181
Validity
Not Before: Jun 7 11:00:56 2025 GMT
Not After : Jun 8 11:00:56 2025 GMT
Subject: CN=a80814b179561adc0bc9596476d5f4604fe299fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:00:7a:ef:7d:76:77:61:b3:25:97:f7:06:d7:
c0:27:ed:71:09:f1:69:5c:a4:ed:1b:1c:95:31:6b:
30:ca:56:5e:4b:4b:76:e4:75:65:60:60:07:48:72:
ca:80:d3:86:af:42:f2:11:7c:79:e7:75:18:f7:cf:
28:85:2a:28:f7:a5:5b:55:bf:bf:84:20:27:79:50:
30:ff:91:54:48:a9:64:f9:a5:ae:64:e3:43:e4:eb:
59:48:e0:ac:8f:ed:18:17:8c:fe:c1:78:dc:9f:15:
ef:9f:49:c2:6e:a3:23:00:24:df:7a:aa:90:c1:9a:
7a:97:e2:df:a1:aa:52:fe:2c:e3:d4:c5:d6:12:96:
c2:0f:14:34:1f:42:75:a3:72:b6:33:3f:db:0b:91:
8c:22:a0:31:32:dc:d6:a9:43:63:46:da:87:4d:95:
99:4a:eb:2f:d2:9f:95:14:4a:f6:91:e1:b1:db:32:
38:5f:6d:fd:11:1e:bf:81:2d:db:bc:f8:15:79:da:
a2:2c:90:2a:84:1f:96:d4:32:29:27:96:de:07:7d:
4b:35:ea:13:0d:0a:86:54:1e:4f:bf:1d:be:5e:ba:
dd:a3:e0:84:5d:5c:39:ba:94:57:5c:c7:c1:24:18:
85:2d:bc:e8:c2:85:4c:65:56:5a:20:c3:ce:20:5e:
44:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:08:14:B1:79:56:1A:DC:0B:C9:59:64:76:D5:F4:60:4F:E2:99:FC
X509v3 Authority Key Identifier:
keyid:55:2A:D3:A0:B4:B7:4E:85:AF:54:F5:8A:D7:5A:30:26:B7:DF:71:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSrToLS3ToWvVPWK11owJrffcYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:ec:32:7b:76:ad:4b:f2:83:f5:68:92:63:76:33:dc:39:f4:
a1:f1:f4:88:1b:dc:9a:65:75:2d:a8:e9:93:79:83:99:d4:52:
a2:db:ff:d8:36:3a:18:d4:ac:d1:38:ae:0f:5b:9d:e6:20:22:
c3:aa:90:a2:bb:a3:6d:55:49:75:fe:ce:05:59:a3:70:7c:db:
21:e6:56:5b:80:d4:65:08:d5:61:f6:da:75:7f:a1:55:cc:19:
42:c8:dd:86:e5:43:0b:f7:99:4b:8c:30:4a:2f:0c:2c:08:c8:
13:b1:22:29:16:90:64:d3:84:37:05:f2:a2:a8:f2:c9:04:34:
e7:99:d8:33:a8:cc:5b:d2:46:72:36:a1:7e:fe:47:ab:fc:bf:
b1:ff:02:db:f3:78:03:57:cd:ab:79:4b:37:e0:0c:fb:a6:bb:
d4:31:76:e5:1f:8c:31:3a:81:59:cd:56:e6:ff:ff:14:8a:41:
0f:de:3e:dd:c3:7e:e7:97:36:1b:19:5d:d2:32:b2:50:88:a0:
5e:a4:c5:4a:06:af:8a:e4:8c:17:02:ab:7b:07:8f:cf:48:62:
71:c7:de:06:f2:35:6a:57:32:7c:88:1d:08:d4:6a:4c:01:25:
c4:68:f4:d7:f6:79:2a:7c:6f:26:9b:9b:6f:71:12:22:80:48:
43:60:0e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:30:00 2025 by rpki-client