Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
File: VHbDyngMxXdErb6QoPOU8dHNcvM.mft (raw, json)
Hash identifier: X3EEXQbYWfNYoirj1vPU6hPRLt/GQf53NfJfdkaDVjM=
Subject key identifier: A5:F5:29:B4:E1:6D:A4:1B:00:2A:33:BB:C3:8C:CF:31:88:0D:8E:84
Authority key identifier: 54:76:C3:CA:78:0C:C5:77:44:AD:BE:90:A0:F3:94:F1:D1:CD:72:F3
Certificate issuer: /CN=5476c3ca780cc57744adbe90a0f394f1d1cd72f3
Certificate serial: 01976471B19CE5E0479B2619F4F90D2A6E10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHbDyngMxXdErb6QoPOU8dHNcvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
Manifest number: 01F3
Signing time: Thu 12 Jun 2025 14:01:01 +0000
Manifest this update: Thu 12 Jun 2025 14:01:01 +0000
Manifest next update: Fri 13 Jun 2025 14:01:01 +0000
Files and hashes: 1: J1F-UaHfYAClgmD-n-h_bemva1g.roa (hash: LkkLFeCVLkb+GZvSdm+hQS9Yt//NS73l5BEh3ajjGOM=)
2: Mzf3T5ZCYDRP9VJBsVQOjUFWDdY.roa (hash: fMfmlTHaxDxkKj4QIO7HlLPP5wMEtHiZKgYxRA6zmJA=)
3: VHbDyngMxXdErb6QoPOU8dHNcvM.crl (hash: f/a1EC1ikHeaMAXx3DCQo6yyv7mXd3U0SPJCMemucdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VHbDyngMxXdErb6QoPOU8dHNcvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:71:b1:9c:e5:e0:47:9b:26:19:f4:f9:0d:2a:6e:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5476c3ca780cc57744adbe90a0f394f1d1cd72f3
Validity
Not Before: Jun 12 14:01:01 2025 GMT
Not After : Jun 13 14:01:01 2025 GMT
Subject: CN=a5f529b4e16da41b002a33bbc38ccf31880d8e84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3b:92:cc:68:08:80:2e:83:a4:ff:d8:c7:1b:
87:80:d3:47:51:33:51:37:00:63:ac:82:9b:fd:cc:
80:8d:0f:21:0c:82:d3:d8:14:e8:48:d2:27:0c:b2:
8f:b7:01:5f:d4:11:92:8e:0a:36:8e:17:e1:cb:fe:
cb:91:21:4d:a0:48:1d:bc:e4:e6:49:52:04:6a:82:
8c:e9:fe:1f:0c:fe:7a:21:7e:ec:59:4b:38:3f:59:
07:db:ea:5a:1b:1e:88:79:b3:13:c3:d2:74:a4:81:
f3:ed:8f:50:33:3e:01:72:52:2c:32:38:93:a2:5d:
da:51:08:03:5d:91:af:05:e7:d4:24:9d:04:5a:bc:
98:97:97:a7:08:72:91:f7:ce:d8:12:03:54:05:32:
d2:8d:05:57:44:b0:3d:71:f3:8e:31:6d:d1:4d:6b:
56:c7:84:ec:a4:1c:fa:54:30:87:f1:a6:9d:b8:14:
cd:80:69:50:a9:10:ac:c4:61:1d:2c:01:e4:dc:40:
e6:d0:01:09:38:10:0e:18:2c:8e:a8:34:aa:fc:ac:
09:2d:bb:06:f5:59:2d:cf:46:de:d6:18:b9:d0:80:
27:4c:4b:33:5c:dc:18:f3:43:eb:13:1f:ec:bf:5f:
f0:bd:da:ab:64:3b:e9:3c:b2:d1:d8:cf:cc:d1:31:
f3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F5:29:B4:E1:6D:A4:1B:00:2A:33:BB:C3:8C:CF:31:88:0D:8E:84
X509v3 Authority Key Identifier:
keyid:54:76:C3:CA:78:0C:C5:77:44:AD:BE:90:A0:F3:94:F1:D1:CD:72:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHbDyngMxXdErb6QoPOU8dHNcvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:78:60:9d:7e:71:ed:6b:4e:c6:88:63:1d:b1:4e:fe:72:8e:
10:67:0d:64:66:66:c8:70:e4:b0:22:2a:22:4c:1a:bb:d6:33:
09:c9:bf:f6:95:99:9b:d6:cf:a6:62:74:cf:fa:92:f9:66:69:
7c:c0:5d:15:3e:a0:95:15:97:14:92:aa:29:b5:c4:c9:74:1a:
e7:16:99:dc:04:ba:78:ae:e8:3c:df:c3:38:01:1a:5c:a7:13:
52:79:a3:7c:e4:05:59:18:12:98:b3:58:a5:c6:79:60:b6:17:
0b:ab:a4:42:ad:8e:85:e0:4c:24:20:12:1e:9d:2a:89:0e:03:
48:19:ce:16:c1:4e:18:32:5e:97:19:4f:91:7a:9b:43:3f:ae:
79:e2:cd:8a:42:03:db:f6:1c:85:77:70:d8:5f:63:7a:32:95:
de:c9:e0:28:be:e8:f7:5d:3f:88:32:60:e2:01:93:30:17:e1:
33:b8:8a:d1:c2:41:db:69:68:e0:32:e8:83:35:a5:58:d9:19:
9e:aa:d1:fd:fd:5c:63:26:fd:cd:a4:d0:4a:84:70:fd:3a:7c:
40:88:0d:f1:1f:c5:77:63:2b:7a:f8:e8:90:fd:25:4c:e4:17:
89:80:bc:93:63:bb:4e:84:14:27:a5:af:34:cd:c1:99:41:ed:
0b:8f:e9:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 20:51:49 2025 by rpki-client