Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
File: VHbDyngMxXdErb6QoPOU8dHNcvM.mft (raw, json)
Hash identifier: C4ZJXU5pzuWTAZ0BYLyzSv9xyg3NnqvQoPi30SoX8Ho=
Subject key identifier: D8:06:4F:E3:B7:6A:03:BF:6E:8A:22:69:B5:02:5E:18:ED:55:44:DD
Authority key identifier: 54:76:C3:CA:78:0C:C5:77:44:AD:BE:90:A0:F3:94:F1:D1:CD:72:F3
Certificate issuer: /CN=5476c3ca780cc57744adbe90a0f394f1d1cd72f3
Certificate serial: 019758DAD50EC8E52F021112CC69E2303A41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHbDyngMxXdErb6QoPOU8dHNcvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
Manifest number: 01ED
Signing time: Tue 10 Jun 2025 08:00:25 +0000
Manifest this update: Tue 10 Jun 2025 08:00:25 +0000
Manifest next update: Wed 11 Jun 2025 08:00:25 +0000
Files and hashes: 1: J1F-UaHfYAClgmD-n-h_bemva1g.roa (hash: LkkLFeCVLkb+GZvSdm+hQS9Yt//NS73l5BEh3ajjGOM=)
2: Mzf3T5ZCYDRP9VJBsVQOjUFWDdY.roa (hash: fMfmlTHaxDxkKj4QIO7HlLPP5wMEtHiZKgYxRA6zmJA=)
3: VHbDyngMxXdErb6QoPOU8dHNcvM.crl (hash: tNh8aRgva/0RsSf3wxP/ilFkdjVjce4dIHauh5dZiV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VHbDyngMxXdErb6QoPOU8dHNcvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:da:d5:0e:c8:e5:2f:02:11:12:cc:69:e2:30:3a:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5476c3ca780cc57744adbe90a0f394f1d1cd72f3
Validity
Not Before: Jun 10 08:00:25 2025 GMT
Not After : Jun 11 08:00:25 2025 GMT
Subject: CN=d8064fe3b76a03bf6e8a2269b5025e18ed5544dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:68:9d:71:a3:d6:ca:e8:19:b8:31:24:9d:1e:
df:47:d6:42:6b:8b:45:34:01:ef:5d:43:3b:79:44:
b8:e8:0a:96:32:5c:7c:3b:2b:85:04:80:ac:5e:41:
62:75:54:e3:78:8b:43:ef:43:89:6d:20:14:0d:8b:
8b:36:9a:8a:87:a4:fb:73:34:ea:8d:7b:46:cd:cf:
4f:24:8b:1b:78:6a:6b:a5:a2:cb:3d:28:14:d9:03:
90:e7:bf:95:32:27:9c:b1:8a:aa:b2:a0:7d:e3:cd:
1d:38:45:9f:b6:ef:d7:0b:d7:10:33:46:4a:ba:5c:
26:c3:de:80:d2:ca:68:a0:e3:4e:02:72:ae:c2:0b:
03:47:47:8f:4c:f6:a2:a6:0e:84:5c:e2:85:e9:46:
74:f6:c4:4b:b0:39:40:36:85:dd:09:cd:42:c3:6d:
b0:0a:4a:99:2f:9c:e3:bd:33:5c:ab:d9:b7:64:37:
6b:ec:3a:e8:de:59:f3:c1:a1:35:93:9b:ac:63:29:
4e:d0:a7:25:cc:56:b6:42:ce:82:7f:76:c3:d9:ed:
c1:01:c0:a1:af:b3:da:c7:ee:59:fc:75:f8:5f:af:
72:77:40:2f:82:0a:f9:28:3b:15:e5:66:6c:42:53:
61:39:91:99:ae:2c:34:09:87:a8:6d:d0:a1:e2:a8:
bd:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:06:4F:E3:B7:6A:03:BF:6E:8A:22:69:B5:02:5E:18:ED:55:44:DD
X509v3 Authority Key Identifier:
keyid:54:76:C3:CA:78:0C:C5:77:44:AD:BE:90:A0:F3:94:F1:D1:CD:72:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHbDyngMxXdErb6QoPOU8dHNcvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:a7:af:fc:d2:30:ee:07:3b:10:c8:bc:eb:55:31:38:d6:f3:
a3:54:27:f5:1b:6e:0a:38:13:bc:ad:d3:16:17:6d:a0:43:84:
82:b8:66:cd:23:cb:38:0c:44:40:08:79:8d:5d:d5:06:b0:64:
6b:4c:04:8b:ec:ee:6b:f5:8a:c5:38:6d:3e:a9:a3:a2:b7:a6:
99:f2:9b:e9:97:67:a2:a2:77:f0:b9:64:65:a4:1f:f0:32:14:
f6:59:e4:43:96:c5:fa:cb:28:4f:f5:f9:f2:af:4b:af:01:5a:
b4:5b:b6:a9:f3:49:dd:92:e1:97:46:0f:7f:36:04:7a:25:bf:
61:fd:c4:9d:0e:d9:f6:c2:c5:1b:b2:8c:73:2c:62:fd:c7:59:
9a:ac:cd:01:4d:c6:8c:d4:8c:4b:1a:8f:fe:1c:c2:cf:52:a0:
a0:34:e1:46:95:85:c2:51:96:71:56:25:05:bd:97:24:da:c0:
29:32:cc:0e:30:21:ec:e9:f5:9a:d4:f9:08:2b:fd:c6:c6:90:
75:a6:e7:5d:3e:6e:16:39:8f:07:14:04:93:3d:2b:31:1f:0e:
48:fd:d3:a4:cd:e2:f9:0c:e6:f0:c5:36:71:b4:18:06:be:5f:
6c:16:ae:a2:0d:31:d1:ad:9c:83:35:e5:5d:a7:f8:1c:e9:06:
7e:bb:d9:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 13:05:19 2025 by rpki-client