Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft
File: VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft (raw, json)
Hash identifier: tza58dWiRbp59Xk3wIjTFF1mAXTuS8wy9v+YzCAKwUQ=
Subject key identifier: 42:7B:8F:48:BA:36:0F:AB:BD:BE:91:07:2B:83:C6:8E:2B:3B:EA:AF
Authority key identifier: 54:0B:63:D1:9D:86:EA:34:5C:9B:5F:16:93:00:C3:A2:9D:4C:31:C4
Certificate issuer: /CN=540b63d19d86ea345c9b5f169300c3a29d4c31c4
Certificate serial: 0197499F44D76168907178BD8FDD54CD00CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAtj0Z2G6jRcm18WkwDDop1MMcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 09:01:04 +0000
Manifest this update: Sat 07 Jun 2025 09:01:04 +0000
Manifest next update: Sun 08 Jun 2025 09:01:04 +0000
Files and hashes: 1: QgsJlqJcTUYG8ULdRGgE3NFD82g.roa (hash: js71yBiScUO+PfDSCeaEzOg8Fh9K6ktXB24Y7dBG/Eo=)
2: VAtj0Z2G6jRcm18WkwDDop1MMcQ.crl (hash: 3T4dHhVNzWI54pN4sL36Ysp/4IgNZP+V25Tq5tK6lYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAtj0Z2G6jRcm18WkwDDop1MMcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:44:d7:61:68:90:71:78:bd:8f:dd:54:cd:00:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=540b63d19d86ea345c9b5f169300c3a29d4c31c4
Validity
Not Before: Jun 7 09:01:04 2025 GMT
Not After : Jun 8 09:01:04 2025 GMT
Subject: CN=427b8f48ba360fabbdbe91072b83c68e2b3beaaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:dd:6b:ae:69:18:34:5b:b4:98:c3:d8:ce:61:
cf:e0:34:43:18:b8:80:4a:a2:a8:d8:24:2f:03:d9:
ae:27:46:33:b7:80:6d:0f:63:65:7c:1d:2c:bd:0a:
67:fa:6b:10:56:57:2e:72:5f:a6:bc:84:1c:20:52:
56:cc:0e:45:9d:a6:1a:6d:04:d8:98:73:16:f3:bb:
f6:5a:7d:9d:71:c1:8b:f2:2f:45:e7:82:a7:6b:f9:
da:65:2e:a6:54:80:c0:36:16:82:37:57:2a:9c:6c:
62:18:3b:23:c7:f2:93:d8:fb:6c:d1:00:5e:f0:7b:
44:d4:df:e4:c6:df:c5:19:e3:6f:eb:bb:d6:76:b2:
78:91:bf:a5:92:fd:9b:49:e3:06:46:41:fe:b4:0f:
38:cd:de:9f:60:a0:ca:37:fe:a8:6c:9c:46:09:6a:
37:c3:bb:58:e3:e6:28:aa:f1:d9:f1:2d:64:d3:90:
4c:5b:48:23:2c:d1:3d:74:55:9b:03:69:4f:53:e7:
5f:40:c8:f1:62:af:14:ac:dd:14:ae:25:ff:d5:f4:
1c:3a:3c:5a:be:c5:ed:8f:7d:f2:b3:6e:b3:60:44:
a1:bd:58:a7:79:a1:a9:e1:c4:63:2d:92:51:92:5c:
8a:83:52:fa:e3:80:7c:f0:b0:c8:48:a6:51:60:ae:
38:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:7B:8F:48:BA:36:0F:AB:BD:BE:91:07:2B:83:C6:8E:2B:3B:EA:AF
X509v3 Authority Key Identifier:
keyid:54:0B:63:D1:9D:86:EA:34:5C:9B:5F:16:93:00:C3:A2:9D:4C:31:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAtj0Z2G6jRcm18WkwDDop1MMcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:8d:2a:bb:77:39:16:8a:63:47:f0:d7:6b:4c:bf:be:2c:5f:
57:2a:63:44:19:fc:fa:79:74:38:ed:da:8a:0e:99:fa:d6:37:
33:99:86:05:ed:ad:b0:cc:71:98:0b:d6:c1:09:6c:49:e2:2f:
92:6f:35:ec:32:01:88:f9:d9:23:63:49:61:39:33:0a:0b:2a:
57:cb:d0:03:2f:fe:39:ee:fb:b1:17:a3:99:1b:5d:8e:2e:f6:
32:e8:c0:78:9d:8a:8f:4f:96:71:af:61:79:5f:cb:51:a3:45:
f9:b6:48:29:d3:d7:43:37:ee:19:cf:61:e1:d4:d6:64:ac:8f:
d1:7d:c6:28:5a:0d:15:b8:5c:64:67:d9:b8:0e:83:5e:b2:2c:
dd:24:60:e9:02:dc:fa:79:b1:4b:1e:e3:75:f2:a6:e8:b5:70:
ae:a7:97:11:ef:91:5d:e8:30:14:ca:87:e8:d9:2a:86:b2:70:
ca:43:47:7d:8a:7f:24:5e:15:41:b0:ef:63:b8:aa:26:74:72:
40:b3:19:cb:01:06:6f:e2:4b:09:3a:a1:00:e7:5a:ec:56:38:
f1:e9:c2:8b:65:01:77:97:ea:4d:91:93:9b:2c:4d:69:8d:9d:
7c:d2:58:3c:e5:e4:c2:87:d9:67:02:5e:46:01:61:06:40:75:
e5:ff:67:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:29:31 2025 by rpki-client