Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft
File: vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft (raw, json)
Hash identifier: j0SJrkcUiT+/V+Kn3JJ0Ua2sIfgmYST0cXJLenglJnw=
Subject key identifier: 71:09:AC:D8:DD:37:C5:5A:12:D0:CD:73:B5:F6:A4:5B:07:94:1A:2B
Authority key identifier: BE:96:6D:BE:B6:41:38:2A:15:F4:67:F5:A0:3E:9A:96:FA:1D:C1:94
Certificate issuer: /CN=be966dbeb641382a15f467f5a03e9a96fa1dc194
Certificate serial: 019760CBB9C54CCD4066FD1373FC56F6E393
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vpZtvrZBOCoV9Gf1oD6alvodwZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft
Manifest number: 158A
Signing time: Wed 11 Jun 2025 21:00:53 +0000
Manifest this update: Wed 11 Jun 2025 21:00:53 +0000
Manifest next update: Thu 12 Jun 2025 21:00:53 +0000
Files and hashes: 1: SReOpAhCLmuOcAyk55_tk_b6gzU.roa (hash: HeVQ3nZoCRM6Iyc21jnOVqYiR72eDfZp5jwY3EJ/nAk=)
2: vpZtvrZBOCoV9Gf1oD6alvodwZQ.crl (hash: HRn+dQWIHz4pEz5k5XT/hQgBgxqc+2JX8IdbqX7K+t0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vpZtvrZBOCoV9Gf1oD6alvodwZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 15:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:60:cb:b9:c5:4c:cd:40:66:fd:13:73:fc:56:f6:e3:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be966dbeb641382a15f467f5a03e9a96fa1dc194
Validity
Not Before: Jun 11 21:00:53 2025 GMT
Not After : Jun 12 21:00:53 2025 GMT
Subject: CN=7109acd8dd37c55a12d0cd73b5f6a45b07941a2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:41:ae:7e:6d:00:ef:c8:c1:92:24:7e:33:2d:
b4:6d:4b:bc:0f:8a:fe:dd:58:1f:bd:8d:54:61:24:
b1:f0:0b:7d:25:2d:37:c3:cd:e7:e2:b3:c8:aa:34:
00:8f:40:b0:dd:15:cd:9e:d9:1d:94:13:89:88:c0:
e5:6e:e9:83:9c:6f:82:46:99:a7:ed:d8:ae:64:ae:
5b:ed:60:68:89:9d:32:81:4d:c3:55:b1:76:5b:01:
45:6e:e5:ef:7f:2f:f1:98:25:5e:07:38:0b:b0:73:
82:6d:88:0d:ee:e1:c5:e8:31:5d:1b:ea:c8:7a:6a:
d7:a7:b1:1b:85:34:5a:44:ec:b5:33:6b:6d:f6:87:
0c:7d:aa:8c:28:1d:f7:27:6a:85:90:0a:51:20:e7:
83:7f:af:a5:d8:f2:f2:95:13:c8:f7:f6:94:14:47:
70:12:55:1c:ff:6f:bb:c3:f3:ef:a6:88:79:43:9c:
2f:62:ad:7d:4a:13:13:e6:56:7d:0c:a8:16:dd:e3:
f8:4b:33:6f:66:52:94:d4:63:b7:1a:7d:df:34:c6:
f2:82:2b:53:80:fa:ea:ac:06:21:49:36:65:fc:74:
72:e8:05:5c:cb:e0:44:aa:40:69:27:c1:a5:2b:d7:
f6:4e:40:5e:ec:a9:9f:2e:11:24:38:1e:c8:b1:3c:
8d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:09:AC:D8:DD:37:C5:5A:12:D0:CD:73:B5:F6:A4:5B:07:94:1A:2B
X509v3 Authority Key Identifier:
keyid:BE:96:6D:BE:B6:41:38:2A:15:F4:67:F5:A0:3E:9A:96:FA:1D:C1:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vpZtvrZBOCoV9Gf1oD6alvodwZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:db:2c:b9:75:20:1a:0e:ca:66:e9:66:4a:d1:ba:7b:fe:fa:
d3:93:fa:14:27:9f:87:b4:31:22:4d:da:5a:41:48:a1:f8:8c:
be:e5:96:42:d3:ed:85:95:db:7b:63:3c:4c:49:5b:00:84:07:
79:7c:c1:10:5b:e3:94:7c:1c:be:8a:25:dd:e0:1c:6c:cc:92:
80:0a:72:3e:c0:fa:7b:1d:97:43:3d:82:bf:67:eb:76:a4:09:
7d:3a:a4:18:a3:04:48:a8:a9:e3:23:51:06:bb:73:be:5c:0c:
02:d7:af:03:5a:9c:43:78:54:4a:4b:29:96:12:18:78:c2:f4:
48:75:2e:49:0a:db:4d:89:d8:e7:ef:db:0c:70:a0:a0:50:89:
c3:4e:fd:ce:21:3f:4f:a7:14:07:1b:bb:5d:b4:ca:18:12:fb:
dd:f6:2f:d5:58:6b:3c:ee:5c:82:98:6c:21:98:25:4d:8d:f5:
6d:99:c1:3f:e2:ee:76:cc:08:66:d2:9f:d6:69:cc:ae:8d:18:
51:58:64:bd:cf:a7:be:9a:6e:62:f0:48:e4:3d:bf:78:4d:25:
70:8c:d8:85:be:a0:72:46:32:39:e4:b9:6c:d4:33:90:44:d2:
1a:eb:1e:f5:64:8e:1c:19:a5:ef:fa:40:90:de:77:8d:55:21:
26:0e:49:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 01:41:32 2025 by rpki-client