Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/b37216-3ea6-4f90-983b-09c8148bd23f/1/VZcyBKNpaAWG3if5RvyBZlYyqoM.mft
File: VZcyBKNpaAWG3if5RvyBZlYyqoM.mft (raw, json)
Hash identifier: r0yCYQ2FRMRfjuehYd42n76dmN5mLjqEvkM7VTtzZqU=
Subject key identifier: 2A:48:65:70:6E:6A:E9:FB:23:E8:19:8D:7F:C4:D6:F1:2D:3F:F3:D5
Authority key identifier: 55:97:32:04:A3:69:68:05:86:DE:27:F9:46:FC:81:66:56:32:AA:83
Certificate issuer: /CN=55973204a369680586de27f946fc81665632aa83
Certificate serial: 01974AB1C3BE8AD38A3AAED13775E056AA0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZcyBKNpaAWG3if5RvyBZlYyqoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/b37216-3ea6-4f90-983b-09c8148bd23f/1/VZcyBKNpaAWG3if5RvyBZlYyqoM.mft
Manifest number: 9D
Signing time: Sat 07 Jun 2025 14:00:53 +0000
Manifest this update: Sat 07 Jun 2025 14:00:53 +0000
Manifest next update: Sun 08 Jun 2025 14:00:53 +0000
Files and hashes: 1: VZcyBKNpaAWG3if5RvyBZlYyqoM.crl (hash: gCyZB3gvsS2Lc69DTDFDx+nROmthi1JtOBLCj+BY4lw=)
2: mSTn9O6BnESLT6h3yoW1YArpQb4.roa (hash: 7y3jZgmc8JKyp1pmRABgyXmd8BIDMBzt7/dcJJXvkSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/b37216-3ea6-4f90-983b-09c8148bd23f/1/VZcyBKNpaAWG3if5RvyBZlYyqoM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/b37216-3ea6-4f90-983b-09c8148bd23f/1/VZcyBKNpaAWG3if5RvyBZlYyqoM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VZcyBKNpaAWG3if5RvyBZlYyqoM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:c3:be:8a:d3:8a:3a:ae:d1:37:75:e0:56:aa:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55973204a369680586de27f946fc81665632aa83
Validity
Not Before: Jun 7 14:00:53 2025 GMT
Not After : Jun 8 14:00:53 2025 GMT
Subject: CN=2a4865706e6ae9fb23e8198d7fc4d6f12d3ff3d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2d:7c:46:2d:f0:64:c4:40:91:12:89:bc:29:
d9:6e:e9:50:cd:e9:cf:64:0d:5c:b5:3e:56:f2:87:
64:70:72:f5:3d:e6:60:1a:69:94:ee:57:b8:eb:aa:
f1:5b:28:7c:7a:36:bc:e4:30:58:16:4e:0c:d3:64:
8e:78:42:02:86:07:12:80:11:78:b4:26:57:18:a1:
b2:13:f7:0a:0a:5b:76:62:3f:41:41:47:59:c9:6a:
b9:5b:47:6f:ba:d8:b6:b3:66:bd:51:65:48:40:0c:
12:93:c4:30:b6:3b:eb:17:85:f1:2b:1f:d2:5f:ed:
93:18:b2:1e:3b:a7:8a:e6:b8:d8:ff:96:85:70:80:
e0:0f:a7:90:f3:83:29:50:fc:67:54:8f:19:00:10:
5d:89:cd:25:6d:69:3b:ba:46:01:13:7a:db:7f:3a:
f5:2f:76:1a:4f:e6:ce:66:bb:7d:c9:bb:c6:68:44:
21:d1:04:d9:ef:4f:09:2d:31:a9:04:75:7c:05:e3:
ab:c1:e0:df:2f:e4:b3:22:4d:36:6b:21:a4:bd:f1:
4d:be:6e:f4:92:e9:49:af:91:d6:bd:21:4e:02:ea:
09:4c:57:e1:9f:7b:f8:32:08:3a:b0:25:4c:5e:be:
14:b1:7b:d0:5d:9b:42:d1:ef:bb:5e:2b:a9:23:ad:
a6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:48:65:70:6E:6A:E9:FB:23:E8:19:8D:7F:C4:D6:F1:2D:3F:F3:D5
X509v3 Authority Key Identifier:
keyid:55:97:32:04:A3:69:68:05:86:DE:27:F9:46:FC:81:66:56:32:AA:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZcyBKNpaAWG3if5RvyBZlYyqoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b37216-3ea6-4f90-983b-09c8148bd23f/1/VZcyBKNpaAWG3if5RvyBZlYyqoM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b37216-3ea6-4f90-983b-09c8148bd23f/1/VZcyBKNpaAWG3if5RvyBZlYyqoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:b1:8a:c4:b1:5c:14:0c:12:cb:6d:d2:fd:48:9d:c3:57:29:
d0:76:12:7a:33:76:d6:ea:72:c2:76:83:b7:02:01:50:37:2f:
bc:b9:94:72:60:1d:8a:41:cf:63:8e:a8:ea:4c:78:8b:a7:c5:
ed:b5:9b:9d:40:76:7f:13:1b:2e:a3:e6:3c:a9:30:e4:8b:5e:
ed:02:99:2a:5c:5f:1b:34:ef:7c:8d:42:03:37:cf:c2:23:ee:
63:78:4c:cf:df:3d:95:1c:36:d3:d1:29:9f:5b:c2:f4:1a:b8:
bc:5e:a4:82:56:01:17:a7:70:df:36:bc:7d:72:95:81:50:4d:
04:bc:d4:03:17:a4:23:13:39:0f:af:98:73:ed:e3:f8:9f:30:
64:98:6f:1b:3d:17:3e:17:94:39:e2:ad:cf:b2:b7:1a:24:79:
9b:db:f8:df:a4:36:0b:ae:a9:c6:9b:7a:01:dd:d7:23:3f:5c:
02:17:ac:1b:a6:06:e9:33:c3:7c:9e:c6:c1:90:87:79:18:8c:
ab:45:19:a4:2a:30:fb:73:d9:eb:1d:23:c6:04:a1:c5:97:8e:
65:bc:fe:ad:77:0f:af:7b:3e:7e:1f:4a:88:e1:4d:8f:31:cb:
71:61:cf:eb:7d:80:17:e4:89:d8:30:18:92:83:d9:4c:ee:14:
86:4b:30:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:37:29 2025 by rpki-client