Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.mft
File: VX0hRN0bcU6ePKCQH-Z1BL9Ffus.mft (raw, json)
Hash identifier: 1evebQMOCVXEfur6oKLfUk0qxwerzNGwjiegZafl9yM=
Subject key identifier: 51:06:CB:40:23:5F:97:8E:1B:81:04:14:80:22:FE:A8:3C:A5:91:AA
Authority key identifier: 55:7D:21:44:DD:1B:71:4E:9E:3C:A0:90:1F:E6:75:04:BF:45:7E:EB
Certificate issuer: /CN=557d2144dd1b714e9e3ca0901fe67504bf457eeb
Certificate serial: 019749316A2559DFE8FB4AFCB559061B4E04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.mft
Manifest number: 033B
Signing time: Sat 07 Jun 2025 07:01:04 +0000
Manifest this update: Sat 07 Jun 2025 07:01:04 +0000
Manifest next update: Sun 08 Jun 2025 07:01:04 +0000
Files and hashes: 1: LAyDLVrlWC7GYrIpkUltJFolhC0.roa (hash: 5fqulNX0pe/944CBeE9O8m/kZ++wdZNRG9xqatGIqks=)
2: VX0hRN0bcU6ePKCQH-Z1BL9Ffus.crl (hash: 05PU8aj8wR4wGsj9nCblVxl1bKtgAXbEUKCPXWzR5e0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.mft
rsync://rpki.ripe.net/repository/DEFAULT/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:6a:25:59:df:e8:fb:4a:fc:b5:59:06:1b:4e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=557d2144dd1b714e9e3ca0901fe67504bf457eeb
Validity
Not Before: Jun 7 07:01:04 2025 GMT
Not After : Jun 8 07:01:04 2025 GMT
Subject: CN=5106cb40235f978e1b8104148022fea83ca591aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:30:fd:fd:c1:cc:dc:63:98:71:21:7a:c5:00:
19:7f:07:96:8e:ca:b4:73:ef:97:7a:bb:87:9a:c7:
3c:c3:d8:ec:d4:83:87:c9:b4:1f:e9:93:95:cc:7a:
b9:b4:da:da:e8:cc:4a:28:e4:43:9d:14:cd:7d:ab:
0c:6a:a0:ad:ac:ab:79:63:47:12:b9:7b:d6:9f:0b:
71:f9:53:d7:08:1e:8e:b1:1b:83:66:50:b4:e7:d8:
07:ba:dc:88:d6:79:4a:96:1f:dc:86:d4:43:d0:d0:
cf:d7:03:fa:be:f2:fe:0d:90:79:00:79:07:4c:57:
d2:c0:6b:65:2f:57:84:68:39:89:95:cc:71:7e:86:
6d:c4:d3:cb:0f:46:4f:66:c8:ac:e8:15:92:c5:47:
77:08:8f:86:42:7b:81:be:8b:ad:04:3d:89:b0:7d:
27:31:df:28:9e:a1:c8:7f:d3:16:bd:f8:76:b8:ed:
75:4e:5d:27:17:59:0d:87:29:9b:7b:ac:76:f9:e2:
cc:c2:5c:b5:d9:ad:e2:47:37:ac:72:39:f2:be:68:
0c:2d:1f:52:9c:78:c1:eb:a9:39:7b:9d:4b:ca:e6:
58:8b:f2:41:a6:ff:30:11:f6:8c:6d:ed:09:bb:27:
61:e5:2f:77:1c:8b:31:7c:19:36:eb:51:31:8c:3a:
50:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:06:CB:40:23:5F:97:8E:1B:81:04:14:80:22:FE:A8:3C:A5:91:AA
X509v3 Authority Key Identifier:
keyid:55:7D:21:44:DD:1B:71:4E:9E:3C:A0:90:1F:E6:75:04:BF:45:7E:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:2b:d5:57:25:7a:b4:76:b7:f4:55:fc:51:d1:68:44:2d:ec:
bf:19:fc:3e:ad:f3:61:e7:33:c6:de:63:1f:5b:e8:fe:b3:eb:
c1:5b:34:1b:1c:75:0a:c6:72:48:02:d8:42:16:95:76:b4:c7:
a0:eb:1e:55:de:dd:be:58:26:df:4f:26:59:dd:c5:40:a8:75:
cc:71:54:d5:d5:ff:49:eb:0a:4b:98:e5:a6:cf:7d:0d:8d:f0:
b0:9a:c3:8b:08:ef:c3:18:06:2f:65:df:2c:94:8e:a3:f8:49:
08:93:fd:f2:11:b2:7d:2b:b9:93:35:6f:3c:f5:98:fa:28:a3:
e7:a4:28:e2:40:34:08:e7:b6:99:97:93:91:a8:d8:02:6d:0e:
55:43:14:72:4b:1f:f4:a9:d9:3d:0f:ef:a2:a9:0c:7a:d0:7c:
ff:9f:0f:34:dd:e0:83:fc:a0:06:49:e7:ca:09:ee:fa:6e:5e:
e0:12:5b:1d:ab:a6:03:e3:72:94:fd:54:68:de:d9:48:74:a8:
4a:e7:f8:b9:4a:71:64:b4:9d:d4:3f:5e:5c:3c:a1:b9:14:30:
72:33:88:ab:57:16:78:f8:c5:de:fc:2b:b8:fe:47:10:23:7f:
8b:7e:9e:5f:5b:42:87:a1:e1:6e:32:8e:6c:a8:75:55:2c:55:
e7:7b:ff:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:02:49 2025 by rpki-client