Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/130bf4-f192-4ef9-b852-9d315d115cbb/1/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.mft
File: VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.mft (raw, json)
Hash identifier: 8HlCnOmLq98rf773vBuwGok7jsV52uWGQEJ7rptGr08=
Subject key identifier: 8E:1F:1B:0A:33:6C:D4:B5:27:91:7C:43:5B:51:45:E7:57:3B:1A:5B
Authority key identifier: 54:F9:D5:81:9D:44:0A:DC:EC:DA:1E:EE:B7:C9:8A:E9:9C:4D:07:07
Certificate issuer: /CN=54f9d5819d440adcecda1eeeb7c98ae99c4d0707
Certificate serial: 01974A0CB10DD1A7EACD8DCDDBD59B36495A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/130bf4-f192-4ef9-b852-9d315d115cbb/1/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.mft
Manifest number: 7A
Signing time: Sat 07 Jun 2025 11:00:35 +0000
Manifest this update: Sat 07 Jun 2025 11:00:35 +0000
Manifest next update: Sun 08 Jun 2025 11:00:35 +0000
Files and hashes: 1: Bvl-Ue7SkDahQi1EYqyGw7UPWAQ.roa (hash: 7s/5EydJ0RA7GfaLPuDbrwS3RicCjtZz+jUH77HvUOc=)
2: VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.crl (hash: TUIl27MX/KT/LTLo0wehWAoBq3NT58QZ2tGdHJDBNkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/130bf4-f192-4ef9-b852-9d315d115cbb/1/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/130bf4-f192-4ef9-b852-9d315d115cbb/1/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:b1:0d:d1:a7:ea:cd:8d:cd:db:d5:9b:36:49:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54f9d5819d440adcecda1eeeb7c98ae99c4d0707
Validity
Not Before: Jun 7 11:00:35 2025 GMT
Not After : Jun 8 11:00:35 2025 GMT
Subject: CN=8e1f1b0a336cd4b527917c435b5145e7573b1a5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c7:74:f1:8c:81:fd:fb:aa:e8:c3:ef:df:73:
c0:ca:5c:94:cb:ca:ae:84:55:8a:39:cb:54:e9:68:
05:ee:f8:2b:27:58:f7:d0:8c:e3:5c:c5:dc:2b:73:
15:24:31:34:e6:19:0e:09:2f:8d:9b:d2:ae:cf:25:
37:24:6d:65:24:de:c5:eb:17:f4:8e:5c:7f:6b:1b:
62:29:0f:2d:5a:5d:30:af:b7:9a:61:a6:2c:7e:5c:
2f:78:0f:5a:44:19:e9:6a:c1:17:cf:5e:e4:ca:cd:
78:82:fe:6c:54:07:17:69:c6:32:4f:c9:c0:4d:ef:
b2:09:7a:b1:7d:b3:a5:aa:63:63:10:43:39:0f:f1:
f0:9f:85:2a:8c:c8:da:85:83:5f:f5:99:f2:70:66:
3e:d1:21:c7:a8:59:64:d4:ab:a4:f2:c9:34:41:37:
41:4d:c1:5f:1a:75:46:2b:b8:2f:4c:67:bd:c6:94:
b9:70:f0:68:b2:19:90:f2:5e:4c:2d:df:b3:aa:54:
de:90:3c:11:88:96:93:4d:4b:aa:25:d0:71:eb:a7:
12:98:14:8a:bd:a1:bb:94:fb:80:fe:4d:db:7b:9b:
8f:d7:d6:99:0d:d3:09:53:9f:b1:37:54:48:ef:bb:
58:d5:8e:be:9f:c0:93:df:87:44:f0:13:de:4b:ef:
f3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:1F:1B:0A:33:6C:D4:B5:27:91:7C:43:5B:51:45:E7:57:3B:1A:5B
X509v3 Authority Key Identifier:
keyid:54:F9:D5:81:9D:44:0A:DC:EC:DA:1E:EE:B7:C9:8A:E9:9C:4D:07:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/130bf4-f192-4ef9-b852-9d315d115cbb/1/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/130bf4-f192-4ef9-b852-9d315d115cbb/1/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:f0:4c:74:67:dc:cd:56:fa:23:33:50:a5:7d:42:d4:01:52:
29:11:5f:0f:c0:5c:11:a6:b4:de:6a:65:28:c0:8c:f8:2a:e6:
f2:ef:ce:dc:52:84:43:26:55:38:48:1d:04:d0:98:9e:04:c6:
ad:44:2c:a3:10:c3:e5:74:91:35:da:51:98:e2:ff:de:ba:89:
0f:e3:02:b6:60:74:d6:0d:82:08:6a:2a:a3:0b:94:f4:fd:ad:
bc:bb:cb:2f:ee:41:89:13:6e:62:2c:57:32:73:51:c2:da:a5:
49:bc:97:87:35:f5:97:92:58:c7:02:ec:e1:e7:30:44:e5:7f:
9f:45:40:e3:48:f3:f9:8f:d4:96:bf:d1:22:c4:df:9a:98:35:
f0:1f:30:ad:22:61:07:74:6b:88:eb:7f:bd:85:36:b1:3c:21:
17:50:10:93:f3:3c:f5:4d:b8:0d:00:6f:cd:30:37:4c:fc:ea:
c7:0d:74:57:18:06:dd:93:f8:e9:4f:df:20:76:6b:07:55:14:
da:af:d8:4a:25:ba:c4:c9:92:4e:ad:c4:9b:9a:34:8b:92:59:
6e:3a:30:b2:89:5b:c3:86:57:33:74:ee:5d:2b:ff:a1:dc:fb:
d8:c9:2c:f2:87:f2:b8:7a:ff:6e:4f:b3:a7:01:7c:5e:ca:b3:
2f:c1:c8:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:32:24 2025 by rpki-client