Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/bd7780-eb53-4c1d-acce-cfe7e3f9f92d/1/VM4kRaLoh0MYvySbc6ZUyZCRnuA.mft
File: VM4kRaLoh0MYvySbc6ZUyZCRnuA.mft (raw, json)
Hash identifier: QEYYv4hQOqfELDZlzooTNxbI6Rt/itx9VxIFsa6jtcQ=
Subject key identifier: 45:D3:B8:4A:33:D9:C8:F1:57:9F:EA:80:F4:47:DE:D1:DB:10:DB:92
Authority key identifier: 54:CE:24:45:A2:E8:87:43:18:BF:24:9B:73:A6:54:C9:90:91:9E:E0
Certificate issuer: /CN=54ce2445a2e8874318bf249b73a654c990919ee0
Certificate serial: 0197488C20E1C435D33E8C3A0EE478A7150C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VM4kRaLoh0MYvySbc6ZUyZCRnuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7780-eb53-4c1d-acce-cfe7e3f9f92d/1/VM4kRaLoh0MYvySbc6ZUyZCRnuA.mft
Manifest number: 0D0F
Signing time: Sat 07 Jun 2025 04:00:32 +0000
Manifest this update: Sat 07 Jun 2025 04:00:32 +0000
Manifest next update: Sun 08 Jun 2025 04:00:32 +0000
Files and hashes: 1: VM4kRaLoh0MYvySbc6ZUyZCRnuA.crl (hash: SztK/irnAPy1ckl5aoIi1eOYngafJeK8bbnUBVnv2+o=)
2: qCD8L1dMgJ9yzf77qP7Yswj5ta4.roa (hash: oyvr0Mb88tpow7HpmKv7H5W0zqdzX3mbbm1lwxbPABw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7780-eb53-4c1d-acce-cfe7e3f9f92d/1/VM4kRaLoh0MYvySbc6ZUyZCRnuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7780-eb53-4c1d-acce-cfe7e3f9f92d/1/VM4kRaLoh0MYvySbc6ZUyZCRnuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VM4kRaLoh0MYvySbc6ZUyZCRnuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:20:e1:c4:35:d3:3e:8c:3a:0e:e4:78:a7:15:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54ce2445a2e8874318bf249b73a654c990919ee0
Validity
Not Before: Jun 7 04:00:32 2025 GMT
Not After : Jun 8 04:00:32 2025 GMT
Subject: CN=45d3b84a33d9c8f1579fea80f447ded1db10db92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0d:a0:02:9a:04:1f:71:32:81:47:b9:20:90:
8b:2c:0d:73:e8:08:91:a5:5e:ac:09:65:22:4d:e1:
16:2d:b8:ad:c3:e0:e5:84:47:14:07:84:f3:8c:bb:
0b:03:ef:27:6d:44:02:f2:2a:5b:35:1e:8c:3f:0e:
fb:77:c4:1c:2f:d5:41:61:6d:e9:26:82:5f:bb:96:
78:ec:57:87:3a:2a:9b:c0:7d:24:95:2e:50:80:67:
8b:b5:d4:e8:ed:3d:e6:a5:7d:53:bc:68:da:3b:ed:
66:a8:81:bf:11:8c:ca:73:bd:c6:78:00:70:68:7d:
6a:b7:9b:21:cc:59:72:e1:a0:93:01:2e:84:a8:d1:
c2:d1:bb:b0:b5:6a:98:43:23:a4:db:8d:e4:30:c2:
74:cc:51:1e:7c:cb:d6:43:0e:66:26:dd:5c:47:a3:
84:1d:bf:1e:b4:ec:4b:16:29:2f:b5:16:57:e8:96:
4a:4e:9d:d0:13:b7:3f:13:73:af:98:09:f7:84:5d:
c5:65:7b:d3:60:0a:49:71:89:58:d7:f8:2a:9a:06:
dd:ea:e8:5a:26:09:50:da:b4:36:59:ce:1d:39:4e:
54:43:e0:ca:eb:fa:0d:a1:26:bc:4f:6c:03:1f:09:
1f:2c:6b:57:08:00:5c:fd:b4:d9:92:6b:6d:42:ae:
52:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:D3:B8:4A:33:D9:C8:F1:57:9F:EA:80:F4:47:DE:D1:DB:10:DB:92
X509v3 Authority Key Identifier:
keyid:54:CE:24:45:A2:E8:87:43:18:BF:24:9B:73:A6:54:C9:90:91:9E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VM4kRaLoh0MYvySbc6ZUyZCRnuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7780-eb53-4c1d-acce-cfe7e3f9f92d/1/VM4kRaLoh0MYvySbc6ZUyZCRnuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7780-eb53-4c1d-acce-cfe7e3f9f92d/1/VM4kRaLoh0MYvySbc6ZUyZCRnuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:f5:5b:e8:f5:88:fd:9c:34:65:69:1e:4a:4f:50:08:30:0d:
e8:af:28:bc:53:2c:92:ba:cd:11:d9:38:c8:15:5f:25:26:46:
58:c1:23:5e:e4:86:3a:12:3d:5a:96:fc:17:94:99:57:15:62:
51:35:e3:24:ea:fe:77:98:db:7d:2a:bc:70:9d:dc:99:40:e0:
63:0b:bc:a5:df:a1:e6:8a:ab:df:39:08:c1:c0:84:22:55:df:
6f:60:ba:11:73:1f:ee:46:d2:b9:ad:67:88:27:5f:16:64:b0:
61:4a:6e:78:d1:c3:ea:ed:83:02:65:a6:75:05:89:f2:03:38:
23:a1:cd:37:5f:c5:32:3a:a3:7a:c3:74:90:e7:0f:6e:41:ad:
c3:28:e4:44:10:f2:04:33:72:5e:db:37:00:30:4c:4b:bc:e5:
13:62:7e:26:1e:78:db:f6:77:8a:52:c0:e2:2c:6d:8f:02:1f:
85:7c:88:b5:7a:19:1b:3d:54:5d:3b:fa:1c:82:e8:67:64:63:
84:48:f7:f5:f4:90:b5:79:59:b4:21:87:07:a7:1c:b1:74:64:
8e:ed:b0:2c:ba:61:82:7e:f3:51:6f:21:22:dc:71:c0:f2:c6:
13:37:c8:ee:47:43:03:33:7a:69:76:5a:05:f4:cd:4a:fa:2d:
e3:fd:3d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:16:09 2025 by rpki-client