Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
File: vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft (raw, json)
Hash identifier: mynf2MN98wcxHM1BwhjBSyy9vytfQgT3WqJhgf8nuqY=
Subject key identifier: 0D:29:CE:10:01:74:EF:DC:EE:C5:A8:E8:1F:B1:B2:F0:EF:0F:DD:DB
Authority key identifier: BE:12:5C:AD:7D:D4:C5:F0:20:1E:E2:A2:1D:EA:C3:87:36:69:81:C4
Certificate issuer: /CN=be125cad7dd4c5f0201ee2a21deac387366981c4
Certificate serial: 0197537DF73191AEC780C930867C92A3D845
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
Manifest number: 1580
Signing time: Mon 09 Jun 2025 07:00:53 +0000
Manifest this update: Mon 09 Jun 2025 07:00:53 +0000
Manifest next update: Tue 10 Jun 2025 07:00:53 +0000
Files and hashes: 1: BF5uYM34somF3uKBjwVBv6TvSUc.roa (hash: LMQTKQzXnQ/SBYJGX5sPOQPjZo/gmRmiCPcpMivc64U=)
2: vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl (hash: oPlKIgMmcIxmj565HGa0fC3tJJecl7FAxyzpfCIlIZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:7d:f7:31:91:ae:c7:80:c9:30:86:7c:92:a3:d8:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be125cad7dd4c5f0201ee2a21deac387366981c4
Validity
Not Before: Jun 9 07:00:53 2025 GMT
Not After : Jun 10 07:00:53 2025 GMT
Subject: CN=0d29ce100174efdceec5a8e81fb1b2f0ef0fdddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2a:46:7d:6b:31:d3:60:33:d8:41:30:e8:b5:
ab:65:f8:46:5d:72:97:d6:42:3d:e6:33:0b:1a:34:
96:f9:dc:45:7f:c9:bc:cf:7f:be:b4:ba:1f:8d:48:
91:47:55:f8:26:32:b5:c1:ed:58:fd:f2:fc:05:09:
dc:87:79:e1:36:8a:7f:0d:e4:fb:36:d0:b5:23:c8:
d8:c0:72:90:2f:79:e6:46:93:61:7a:58:be:1f:af:
ef:db:f8:5b:01:95:0a:fc:5d:e9:18:f9:3d:0e:8b:
e7:25:e0:46:9c:06:80:0d:d1:2a:07:8d:f8:1d:be:
45:89:a4:2e:df:82:f7:57:e1:db:d2:2f:63:b9:43:
1b:ea:f3:38:9f:c8:2d:42:a1:65:c9:96:38:7e:36:
40:ce:90:ae:a2:39:d1:22:16:0a:29:ef:d6:7d:e5:
03:2f:9a:93:f1:d7:f7:ce:d3:ea:52:32:74:f1:72:
40:2d:87:c1:53:bb:03:c6:12:55:05:53:63:3d:11:
d5:8c:28:cf:d4:c5:50:ad:72:bf:c3:15:7b:86:f4:
53:82:27:8c:3e:9a:a8:22:ef:5e:26:f8:e0:86:e2:
c3:c3:86:58:5c:c2:ce:e5:6c:f9:34:24:ea:32:16:
65:f8:0c:31:35:ad:5d:46:88:e2:5f:32:43:61:50:
1e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:29:CE:10:01:74:EF:DC:EE:C5:A8:E8:1F:B1:B2:F0:EF:0F:DD:DB
X509v3 Authority Key Identifier:
keyid:BE:12:5C:AD:7D:D4:C5:F0:20:1E:E2:A2:1D:EA:C3:87:36:69:81:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:ed:bb:54:ea:55:de:b1:6a:9d:3d:8c:cd:a9:26:95:b1:cf:
39:22:66:26:79:95:f1:f9:28:21:b6:61:53:f4:88:0b:58:23:
f2:bd:bf:7e:eb:bb:3d:aa:db:b7:fc:6f:4d:5c:a3:cb:7a:ea:
bb:40:ca:77:96:17:a7:96:57:03:22:13:c2:56:65:f0:5c:5c:
c8:2c:f9:e0:0c:af:19:86:2c:0b:dc:62:32:f9:62:d3:d6:66:
72:09:0c:00:e7:ea:96:c5:b9:3d:69:67:69:65:a7:a2:c7:4d:
3a:5a:96:a2:ce:dd:7e:79:7c:a0:7c:14:dc:90:5d:e9:57:cd:
c0:22:55:c7:61:64:c9:d2:f9:9c:ac:02:b8:34:da:6a:9e:bb:
43:cf:3c:34:a8:d0:c9:65:df:10:68:2a:da:00:08:1a:40:0a:
95:b5:fe:16:9d:b9:34:4e:5d:04:69:a7:47:de:7e:24:9b:25:
db:e0:84:76:11:20:fd:03:0d:c7:72:2e:6a:b5:7e:2a:37:f9:
6f:e3:7a:45:d5:be:32:24:3e:6b:6f:51:8a:ea:b8:f8:ab:90:
55:63:1f:fe:62:fa:59:88:7d:36:da:21:fa:34:9c:c8:cb:09:
b6:b8:8d:5d:a3:31:3b:44:61:f4:1a:7f:49:5e:ff:a2:ed:7c:
c2:22:70:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 10:11:03 2025 by rpki-client