Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.mft
File: Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.mft (raw, json)
Hash identifier: fEqQGMJYYBW1B74dWbUT5U0xxzxlDyu/2YmXqmiMhZg=
Subject key identifier: E8:1E:64:33:CE:55:9A:6B:15:02:C8:30:79:71:36:4E:39:5D:BF:D3
Authority key identifier: 56:AD:9B:2C:22:7B:41:3C:50:58:13:29:4F:AA:DB:6D:BB:C2:DD:66
Certificate issuer: /CN=56ad9b2c227b413c505813294faadb6dbbc2dd66
Certificate serial: 0197395071BE5971BFA9ACDA5A02BE529114
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.mft
Manifest number: 0A2F
Signing time: Wed 04 Jun 2025 05:01:02 +0000
Manifest this update: Wed 04 Jun 2025 05:01:02 +0000
Manifest next update: Thu 05 Jun 2025 05:01:02 +0000
Files and hashes: 1: Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.crl (hash: vu6nacHaa3dJTeeCRxPFqlxrKs6vzbtssZX8/ZSQIE8=)
2: Vz7t1xxZS7Y8mi76AGQLhqb1ZQs.roa (hash: f5Op16EAB77dhVLhwIcxz3vKwaJVulfI7NYLkrJ/rQU=)
3: reLkqggetUctFOKXfyoXX7VB7AA.roa (hash: mWj2m9BfD30uCVlB2O3NlLuI0ufXtR+chyS8T5aSe4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 05:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:39:50:71:be:59:71:bf:a9:ac:da:5a:02:be:52:91:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56ad9b2c227b413c505813294faadb6dbbc2dd66
Validity
Not Before: Jun 4 05:01:02 2025 GMT
Not After : Jun 5 05:01:02 2025 GMT
Subject: CN=e81e6433ce559a6b1502c8307971364e395dbfd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f9:67:23:15:9c:8f:c9:a1:0b:10:0c:6c:d4:
c2:ff:98:f5:8c:13:2b:08:d6:2d:7c:1d:f6:cf:02:
8f:5f:04:c1:4c:47:db:ee:37:ea:e9:13:c0:9f:7c:
02:91:e5:39:03:39:36:ad:84:5a:da:e0:a0:93:73:
48:7e:67:0f:8a:1e:ec:32:a7:d5:bb:91:9f:29:ce:
57:b0:e6:a6:b3:2c:63:19:33:90:c4:a5:49:93:b2:
0b:54:0d:27:c5:c9:c3:5c:96:f1:d7:37:a2:e4:2b:
84:7c:39:23:09:72:18:7d:c9:2e:ce:a2:09:e5:90:
21:78:1f:aa:33:32:d2:48:46:b5:09:e0:81:6d:b4:
dd:b8:94:0b:0e:29:88:70:06:47:2b:a4:a1:8f:3c:
f4:66:a9:e0:3e:a7:8d:81:c7:67:b6:d9:79:56:38:
a7:ff:05:52:3a:69:61:9d:49:c7:c6:5b:3f:8e:cb:
bc:c4:af:95:10:ff:f0:c1:30:c1:41:d0:62:56:a1:
f5:8b:a7:71:ca:fe:67:c1:8a:2e:cc:de:b0:17:2d:
75:63:61:9f:4a:9b:13:f6:57:2a:ea:d7:b2:60:9a:
79:85:06:47:08:e7:9c:71:a8:40:0a:89:c7:90:56:
dc:ec:7a:09:66:16:ec:b1:cc:81:dc:1d:e9:8c:f5:
ed:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:1E:64:33:CE:55:9A:6B:15:02:C8:30:79:71:36:4E:39:5D:BF:D3
X509v3 Authority Key Identifier:
keyid:56:AD:9B:2C:22:7B:41:3C:50:58:13:29:4F:AA:DB:6D:BB:C2:DD:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:c4:bb:2a:97:e1:58:06:87:e1:40:1a:6c:f2:4e:ea:61:4f:
6f:43:a3:21:a4:64:a2:fa:ae:67:87:12:36:28:be:fb:33:02:
c2:d7:9e:9f:c2:17:d5:b1:77:04:27:38:d7:7f:fb:0f:eb:3c:
02:bb:ea:3b:77:58:fe:3d:01:b1:43:e6:7b:7a:48:e6:8d:8d:
92:cf:c2:80:c6:df:7c:0b:ea:10:76:f2:11:3e:f4:d0:92:74:
ba:80:35:73:15:b4:b5:04:47:78:dc:1a:8f:af:9b:19:b7:8c:
c6:0a:f3:01:17:a1:33:3c:a9:7b:fe:d2:a2:8b:39:f6:2e:99:
9c:91:ad:58:43:19:1e:17:08:65:21:33:c8:96:ad:d1:c3:19:
98:0e:f3:7d:1c:70:68:ec:3d:73:6b:7e:9d:c7:d6:aa:8a:ec:
2b:c9:ab:12:28:b2:1e:ea:12:b6:c5:f6:0a:59:32:cf:af:d0:
43:f9:44:89:2d:e5:10:39:d4:c4:ab:96:18:38:05:00:75:ad:
c8:80:6b:23:31:87:1a:9e:5a:60:de:09:a8:a1:09:a4:12:70:
3e:97:18:cc:8e:88:71:65:21:cc:e1:48:ba:83:6a:06:3d:f7:
eb:7a:48:fb:e3:46:6a:50:7b:7a:dd:2d:3f:4a:19:1b:cc:76:
70:f2:a6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:30:14 2025 by rpki-client