Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft
File: VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft (raw, json)
Hash identifier: zhLBajSpsSXH5nvE0IpjbMuiXoGT27rLuaLcHODdFCQ=
Subject key identifier: E2:7E:65:CD:BA:82:1A:A2:F0:39:25:F3:A7:BC:26:A3:D6:AF:15:5B
Authority key identifier: 54:3E:20:BF:5F:25:2B:1B:DB:D2:1D:C9:9D:94:CD:97:EA:7F:0F:E6
Certificate issuer: /CN=543e20bf5f252b1bdbd21dc99d94cd97ea7f0fe6
Certificate serial: 019745C28FA3E5D03ED67933B1165E3D3E06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft
Manifest number: 1058
Signing time: Fri 06 Jun 2025 15:01:08 +0000
Manifest this update: Fri 06 Jun 2025 15:01:08 +0000
Manifest next update: Sat 07 Jun 2025 15:01:08 +0000
Files and hashes: 1: 8ywt7YsrRBMREchgHLgyKhwPgx4.roa (hash: aCuMcxrQC+7OXrTGuhaVav/hwtQSKlgeWzdcYZWQMpw=)
2: VD4gv18lKxvb0h3JnZTNl-p_D-Y.crl (hash: 2LTzQPOGtAyXq7hYflKiT77yRsbHW4fyhzIKAZP2ZJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:c2:8f:a3:e5:d0:3e:d6:79:33:b1:16:5e:3d:3e:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543e20bf5f252b1bdbd21dc99d94cd97ea7f0fe6
Validity
Not Before: Jun 6 15:01:08 2025 GMT
Not After : Jun 7 15:01:08 2025 GMT
Subject: CN=e27e65cdba821aa2f03925f3a7bc26a3d6af155b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:98:bc:e9:af:a1:c0:82:3c:33:5c:62:87:24:
f0:28:93:2a:ce:a4:63:4b:68:80:9c:f6:ff:a2:5b:
83:c9:d4:9b:f5:e8:2a:9f:8d:1c:a7:f9:41:a5:d3:
c7:76:8d:30:f3:55:db:3e:95:49:44:a6:22:8a:83:
61:87:b3:a0:f1:a4:b8:c2:f7:f1:c9:05:b8:82:7d:
91:55:31:fb:c6:30:df:af:24:d9:8f:9a:34:83:3d:
7a:1f:1b:00:6e:c0:87:44:04:c4:05:4e:d0:23:3d:
4d:88:df:b5:cd:f3:d2:90:e8:77:e0:50:85:99:1a:
98:a1:6e:fc:22:1f:ba:85:bf:3c:c6:6f:35:7e:77:
a4:39:90:4e:c7:b1:9d:b1:6b:1b:69:c6:96:72:c2:
ce:22:a1:e6:b5:4a:b9:e2:d7:d2:df:29:1c:f5:11:
bd:c0:9f:8a:c4:08:bf:25:cd:9c:e6:da:93:03:7d:
4b:ff:43:8f:e7:73:a3:9e:bf:a2:35:b3:39:e6:5b:
46:2f:d5:af:98:cc:51:b7:60:07:04:c7:c9:92:35:
4c:88:c3:43:cc:c2:ed:f9:bb:37:76:76:18:31:f0:
7d:d2:d1:52:48:22:e5:58:cc:95:d2:41:18:af:d6:
fb:cc:ab:b3:7b:7d:cb:0c:07:86:20:58:e2:d8:48:
47:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:7E:65:CD:BA:82:1A:A2:F0:39:25:F3:A7:BC:26:A3:D6:AF:15:5B
X509v3 Authority Key Identifier:
keyid:54:3E:20:BF:5F:25:2B:1B:DB:D2:1D:C9:9D:94:CD:97:EA:7F:0F:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:55:10:52:1e:42:ac:ca:13:ee:9e:3a:49:02:3f:7c:9e:a1:
59:8f:20:09:c1:ec:63:7e:17:45:4b:aa:9d:91:67:18:8f:9e:
00:5c:81:07:ee:db:bc:aa:91:04:61:a9:c6:f9:66:70:25:c1:
aa:1c:27:19:17:58:83:ab:2d:6d:75:49:e3:0c:14:4d:b4:d5:
b4:ac:3f:bc:f0:cf:01:9a:29:7b:20:23:d7:97:b3:ff:d5:10:
5c:88:07:d4:70:6d:11:cf:d3:01:27:56:f5:99:60:7d:3a:7a:
ff:f9:78:91:7f:21:05:89:87:7b:b3:5b:96:37:d9:cf:ed:99:
e9:7e:47:43:c3:0a:f5:1a:1e:5c:02:75:7c:ab:20:3e:76:93:
c4:d5:5a:1a:45:6d:0f:91:ec:6b:96:82:c6:60:b6:ab:65:94:
0a:f0:7c:86:0d:b7:25:59:9b:39:1d:a1:58:4e:01:96:c0:48:
75:63:1f:26:e7:8b:a6:e9:3c:2c:b0:77:6a:89:33:e5:aa:40:
37:e4:00:17:f9:24:b3:85:70:14:3d:af:49:a6:c9:d4:41:f8:
63:f3:58:0a:71:61:69:1c:cb:82:81:14:49:98:98:7c:eb:fc:
cd:06:c6:b4:bf:d0:c3:26:f2:16:e9:c2:32:ea:29:8f:76:ca:
dd:f2:0f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:42:54 2025 by rpki-client