Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.mft
File: VPQtulHsKDXT5NCj2MSL8yL2vbU.mft (raw, json)
Hash identifier: /tp44zkg/yylXX+8sl3s9CD7IR3wuGgDZBnKixw/z/w=
Subject key identifier: C7:6F:B4:C0:37:3C:8C:95:48:CB:EA:DE:3F:3E:08:43:94:B3:35:0E
Authority key identifier: 54:F4:2D:BA:51:EC:28:35:D3:E4:D0:A3:D8:C4:8B:F3:22:F6:BD:B5
Certificate issuer: /CN=54f42dba51ec2835d3e4d0a3d8c48bf322f6bdb5
Certificate serial: 0197488C65913141F2F04C0A1D7A53573127
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VPQtulHsKDXT5NCj2MSL8yL2vbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.mft
Manifest number: 09FD
Signing time: Sat 07 Jun 2025 04:00:49 +0000
Manifest this update: Sat 07 Jun 2025 04:00:49 +0000
Manifest next update: Sun 08 Jun 2025 04:00:49 +0000
Files and hashes: 1: VPQtulHsKDXT5NCj2MSL8yL2vbU.crl (hash: wfi15q35ZMHpfg7cXN4/FvrXlsNS7Pz5+VQyjEcOcPA=)
2: mUHt0oKQoXS4NriBI7EGKLoM09o.roa (hash: SD6es8T2Vz3P454Q+Wryhaz45Qcvfh6pBeSnz1RWRNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/VPQtulHsKDXT5NCj2MSL8yL2vbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:65:91:31:41:f2:f0:4c:0a:1d:7a:53:57:31:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54f42dba51ec2835d3e4d0a3d8c48bf322f6bdb5
Validity
Not Before: Jun 7 04:00:49 2025 GMT
Not After : Jun 8 04:00:49 2025 GMT
Subject: CN=c76fb4c0373c8c9548cbeade3f3e084394b3350e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:53:52:3e:63:bf:9a:b0:12:2f:8a:5f:86:12:
5f:cb:13:8a:53:b6:a8:83:cf:c6:8b:ae:26:f8:49:
b7:36:89:1d:ce:85:e7:fb:dc:f2:cc:ce:73:a5:c6:
fb:a7:88:a9:a5:d5:59:db:4c:a3:59:60:bc:2f:72:
29:ce:2c:5f:82:09:e8:ab:da:69:56:71:cc:bd:39:
3f:95:6d:9b:02:2d:70:68:e2:ff:26:dd:ce:f9:3a:
03:af:fa:48:4c:67:c4:1a:5e:c3:fa:80:a0:f6:5f:
58:19:ee:a7:1d:af:d4:10:32:69:b5:16:d3:32:70:
05:82:f8:ce:76:72:68:23:ba:47:bd:0a:dd:66:ab:
79:2d:8e:08:56:da:e6:49:71:8c:b6:a0:ad:7b:7b:
7e:d5:43:af:fc:28:5b:2f:d1:9a:e6:c6:97:12:38:
c2:7b:78:19:e0:14:df:46:dc:4b:c6:cb:92:ca:78:
dc:d1:f3:52:de:2e:cc:79:f6:f3:e6:08:28:23:84:
8f:e3:10:b5:03:44:be:70:58:0a:c1:5e:e8:bd:07:
fa:10:e9:e6:1d:3c:08:f3:14:25:ec:31:ed:d3:01:
10:a4:99:47:a7:db:af:8b:f1:5f:94:bf:26:e7:07:
03:92:d7:24:d0:26:d2:59:b8:e2:7d:78:86:2d:56:
b7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:6F:B4:C0:37:3C:8C:95:48:CB:EA:DE:3F:3E:08:43:94:B3:35:0E
X509v3 Authority Key Identifier:
keyid:54:F4:2D:BA:51:EC:28:35:D3:E4:D0:A3:D8:C4:8B:F3:22:F6:BD:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VPQtulHsKDXT5NCj2MSL8yL2vbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:39:4d:f4:31:f2:62:c6:b0:a6:ae:ce:7e:42:a6:01:6f:dc:
54:b7:aa:89:82:20:2b:ab:94:e7:b1:62:dd:99:19:ce:e6:87:
6f:7b:5b:0a:14:22:54:e0:d9:a1:90:ed:47:da:76:63:48:88:
4e:f9:56:22:74:42:10:54:c0:a5:8c:fd:c2:26:e4:7c:b6:a0:
3a:1b:fb:42:56:44:79:73:eb:f4:a3:f6:cd:0e:39:6b:12:81:
04:b3:ba:e3:ae:40:97:ff:6f:df:f3:cf:37:ef:a6:a7:6a:8b:
21:c4:83:e3:30:b9:f3:4d:35:5f:d9:4f:a6:08:00:7f:4f:e0:
33:71:b5:02:59:cb:c7:a0:fe:48:c0:d9:8c:bd:28:2e:18:af:
a1:57:d0:53:90:00:a5:9d:9e:47:8f:f8:95:ba:24:eb:8f:96:
88:ae:0e:6f:21:3c:98:ed:55:2a:6a:0f:fa:35:e5:33:27:9e:
e5:1e:5b:13:8d:89:d9:b4:75:75:3c:6a:18:46:f4:d3:5c:d6:
ad:07:03:80:a0:f3:d1:66:04:21:50:3b:2d:e1:a5:35:16:ac:
a0:ab:32:f6:75:21:38:00:87:97:90:3c:c6:25:84:a4:6a:13:
71:9f:84:78:3c:8d:45:88:55:1e:33:dc:de:d7:9b:82:ea:fb:
47:96:06:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:33:01 2025 by rpki-client