Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
File: VHbDyngMxXdErb6QoPOU8dHNcvM.mft (raw, json)
Hash identifier: sdKfgV5nLqo+mcLVQ9+kLMXmcBN2glS6+18EuL7TPCc=
Subject key identifier: 0F:A0:C0:6B:F3:EF:85:48:5D:90:46:58:D9:E4:90:03:F8:20:74:A9
Authority key identifier: 54:76:C3:CA:78:0C:C5:77:44:AD:BE:90:A0:F3:94:F1:D1:CD:72:F3
Certificate issuer: /CN=5476c3ca780cc57744adbe90a0f394f1d1cd72f3
Certificate serial: 019756ED2922422D4D2A9C61ACE79475C7CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHbDyngMxXdErb6QoPOU8dHNcvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
Manifest number: 01EC
Signing time: Mon 09 Jun 2025 23:01:12 +0000
Manifest this update: Mon 09 Jun 2025 23:01:12 +0000
Manifest next update: Tue 10 Jun 2025 23:01:12 +0000
Files and hashes: 1: J1F-UaHfYAClgmD-n-h_bemva1g.roa (hash: LkkLFeCVLkb+GZvSdm+hQS9Yt//NS73l5BEh3ajjGOM=)
2: Mzf3T5ZCYDRP9VJBsVQOjUFWDdY.roa (hash: fMfmlTHaxDxkKj4QIO7HlLPP5wMEtHiZKgYxRA6zmJA=)
3: VHbDyngMxXdErb6QoPOU8dHNcvM.crl (hash: qx9u0U8YPRo/UvbTNSuSbnYbn0kqzU0+qWORq8OWKoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VHbDyngMxXdErb6QoPOU8dHNcvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 19:25:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:56:ed:29:22:42:2d:4d:2a:9c:61:ac:e7:94:75:c7:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5476c3ca780cc57744adbe90a0f394f1d1cd72f3
Validity
Not Before: Jun 9 23:01:12 2025 GMT
Not After : Jun 10 23:01:12 2025 GMT
Subject: CN=0fa0c06bf3ef85485d904658d9e49003f82074a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9e:a9:c2:92:0a:74:68:5c:38:99:6a:9e:a0:
c0:bb:19:a8:7f:91:44:63:e4:67:5d:47:45:23:74:
87:f7:71:34:bb:bd:e8:4d:21:58:3f:e7:e9:eb:e1:
e8:8e:54:82:32:89:d5:7d:71:4e:50:65:ed:29:71:
c1:ed:0f:63:05:ed:17:c4:cb:7a:a8:17:3e:37:77:
4b:28:48:dc:6d:1d:f5:c0:7c:d7:42:7f:88:d0:1d:
1b:d1:80:e5:40:e0:79:13:51:42:64:ae:8e:39:2a:
35:06:0c:45:d8:d2:aa:a3:e6:3f:e2:d9:82:12:f7:
89:4f:e3:e1:c1:44:22:7e:de:94:96:b6:68:80:8f:
96:41:d0:0a:58:56:c7:08:92:6b:dd:bf:77:50:a1:
1c:e7:f0:11:40:f5:23:77:1f:54:a6:8b:70:8a:b3:
79:e7:90:cf:08:01:2d:a1:37:9c:dc:31:ee:d9:db:
e2:d1:2c:61:3b:10:3b:8a:a0:64:f1:dc:2c:ae:8d:
7e:64:bb:e2:c2:89:f6:fa:c8:33:bb:d9:0d:3a:46:
90:e9:0c:e4:f3:c2:ef:d9:52:ef:ed:78:24:7b:9c:
93:69:ac:29:1f:e1:2f:1f:94:b9:de:2d:6c:0b:09:
e5:9a:d8:40:1c:57:00:71:1f:4c:06:19:28:bb:45:
16:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:A0:C0:6B:F3:EF:85:48:5D:90:46:58:D9:E4:90:03:F8:20:74:A9
X509v3 Authority Key Identifier:
keyid:54:76:C3:CA:78:0C:C5:77:44:AD:BE:90:A0:F3:94:F1:D1:CD:72:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHbDyngMxXdErb6QoPOU8dHNcvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:38:ef:62:75:27:de:8d:01:32:a3:c3:21:09:aa:6a:3a:6f:
8c:d9:a9:a9:75:fb:2c:39:c2:0f:0f:bc:97:1c:87:d5:c8:4d:
06:4d:6d:14:25:51:cb:64:b2:a0:b3:23:fb:61:27:ed:bb:d1:
a9:9a:b8:1f:fa:fb:8d:a5:09:5a:fd:79:50:2b:48:4a:d0:0a:
50:85:fc:c1:90:22:7c:33:44:a9:b1:6c:8b:e4:ac:c4:e9:ad:
57:57:e9:05:6e:b1:f4:b8:9c:c5:30:d6:91:d8:e2:fd:5f:00:
13:05:a3:6b:82:42:93:52:1c:4f:9b:90:73:08:d6:08:3c:9f:
05:c8:2d:2c:b9:f4:69:61:7f:f3:89:0b:42:00:13:2e:88:4b:
64:d6:78:e3:58:b8:f2:7e:1f:74:cc:bb:af:a9:0e:0e:71:06:
65:d1:97:22:1d:b0:6d:33:0a:0a:6c:d7:97:cd:9d:54:f3:87:
08:a3:73:7d:e6:d5:11:5b:f4:a4:c3:c6:57:f0:c9:80:83:8d:
86:3e:d7:81:36:45:ec:3f:d4:9b:cc:16:5e:44:4e:c8:29:64:
98:13:e0:b2:03:71:10:36:8e:dc:b7:77:96:23:3f:df:58:86:
e5:77:e0:8c:da:59:bc:71:59:77:4e:ae:80:1e:9a:8c:a6:fc:
03:c3:75:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 03:28:35 2025 by rpki-client