Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft
File: VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft (raw, json)
Hash identifier: chxBuisultdarRGrPv3FSMTscCPL/TUt07S+/o9WoKc=
Subject key identifier: 51:D4:53:49:35:B1:8F:3E:2B:9D:DB:89:82:F8:F7:66:34:61:E0:19
Authority key identifier: 56:D0:E3:B2:8F:2B:E3:3E:C5:A9:D2:CA:00:AC:64:15:55:36:CB:C6
Certificate issuer: /CN=56d0e3b28f2be33ec5a9d2ca00ac64155536cbc6
Certificate serial: 0197488D418943932BE79C9BAE865DA5940C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft
Manifest number: 0C85
Signing time: Sat 07 Jun 2025 04:01:46 +0000
Manifest this update: Sat 07 Jun 2025 04:01:46 +0000
Manifest next update: Sun 08 Jun 2025 04:01:46 +0000
Files and hashes: 1: 1evcMDo7pi-aA6SWjQJ5C1thyaU.roa (hash: xYDgN0KV8Q5QXfbFX/hw20fHK9cnWhX/isL2BXocmSw=)
2: BFOQ1xipYhPtnW3G70pfAnmzwzg.roa (hash: /+UHFdHIIgWbmriMU+n5ynXyWKvmniC4nJpXONs4/qY=)
3: ISS1nVoFj6vql40oL7xs039XkbE.roa (hash: Uj1JIR2yGWgQKTO1hh05hzaRctOY0c3hfi9SPLtZHjc=)
4: VtDjso8r4z7FqdLKAKxkFVU2y8Y.crl (hash: xkifGs3Dsxw7X0bVCQym31QYPZ9ultwet/9ebjjSFqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8d:41:89:43:93:2b:e7:9c:9b:ae:86:5d:a5:94:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56d0e3b28f2be33ec5a9d2ca00ac64155536cbc6
Validity
Not Before: Jun 7 04:01:46 2025 GMT
Not After : Jun 8 04:01:46 2025 GMT
Subject: CN=51d4534935b18f3e2b9ddb8982f8f7663461e019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4d:66:ba:95:c8:8b:00:61:61:5f:9e:23:c4:
8d:6f:86:ef:fa:bf:7b:00:39:2b:51:6f:6a:63:01:
16:2c:14:14:b5:54:36:5e:0b:62:7c:46:ec:bb:c9:
8c:4b:e6:3d:ba:ed:f8:a9:bf:9e:92:ff:77:74:78:
23:31:07:4c:c6:64:33:79:fa:4d:bf:28:2e:d3:4d:
5c:d9:6c:ef:34:32:96:15:04:55:21:3c:cd:e9:df:
e6:07:74:e1:0a:cb:e6:43:aa:cc:30:26:31:92:31:
80:1f:27:06:5c:89:ac:bd:34:58:36:31:d1:66:c6:
5a:41:4e:e2:1e:e7:44:22:65:2f:df:92:8a:dc:d8:
56:46:1a:5b:43:01:0b:e5:b1:82:ab:72:44:09:76:
a1:58:c7:4f:34:d2:32:b0:19:9a:c2:f5:15:ed:3c:
df:df:a7:20:bf:f6:68:0e:6d:e1:08:8e:94:10:e4:
ef:45:59:4e:05:2d:ce:dc:30:13:c7:67:ed:08:95:
d7:75:cb:30:e0:27:42:4b:26:08:50:d3:df:c4:f1:
b7:0a:fb:d5:dc:47:83:64:03:09:e2:3a:4c:e3:30:
28:2a:dd:2d:8d:ad:64:97:b2:d8:29:db:85:9d:e5:
c2:13:ff:4d:b6:a3:dc:e4:a5:65:f9:f3:0f:2f:69:
6e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D4:53:49:35:B1:8F:3E:2B:9D:DB:89:82:F8:F7:66:34:61:E0:19
X509v3 Authority Key Identifier:
keyid:56:D0:E3:B2:8F:2B:E3:3E:C5:A9:D2:CA:00:AC:64:15:55:36:CB:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:be:3a:e7:6f:b7:97:57:df:27:42:f6:40:e5:5e:3f:0d:60:
50:de:89:96:23:17:6f:36:7d:13:1f:51:1b:07:22:0b:0f:5f:
e2:eb:aa:cb:06:d9:15:62:67:76:ab:04:60:b7:d9:3b:90:cb:
bc:fe:32:bc:8e:79:d4:84:f3:4c:b7:12:07:12:45:e1:c0:e8:
25:76:3d:ad:be:3a:65:45:d4:75:cb:13:94:ae:6f:c0:8c:0a:
91:6b:0c:4b:d8:79:49:51:03:ab:fa:c2:e1:db:67:93:eb:db:
31:fc:e0:52:f3:be:d5:6c:24:7f:f6:d5:91:b5:1f:dd:82:bc:
22:61:41:ea:24:db:21:7c:2a:69:62:6a:12:3a:ea:c5:5e:16:
26:d8:0a:45:73:39:21:7f:bc:6d:7b:8f:41:6c:e1:68:46:0b:
f8:68:1b:e4:78:30:54:ed:91:36:0e:c0:dd:01:17:61:22:2f:
a3:38:64:c1:47:d9:cf:b4:2c:4f:4a:aa:d6:ea:6e:09:13:3e:
6a:0a:6a:a9:94:3c:ab:92:6b:99:44:15:f0:e2:69:42:df:c8:
eb:22:32:e3:b9:97:99:0c:bd:b4:f8:d2:da:cd:01:22:d9:f7:
cb:45:c7:3d:67:35:c6:a9:38:fb:00:17:ff:3a:4f:70:54:2f:
68:80:40:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:17:51 2025 by rpki-client