Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.mft
File: VKwN3sMOJORX4W5lB9IZcoMQiT0.mft (raw, json)
Hash identifier: HM534XKkY14S2mhr4FJvp8Z6HqtWLPbTFJGreFhAfpg=
Subject key identifier: A1:47:F7:21:DB:AD:7B:8D:05:34:6D:80:58:52:B1:E9:D7:D2:42:6E
Authority key identifier: 54:AC:0D:DE:C3:0E:24:E4:57:E1:6E:65:07:D2:19:72:83:10:89:3D
Certificate issuer: /CN=54ac0ddec30e24e457e16e6507d219728310893d
Certificate serial: 0198477732276F45AF5A432C649CDDAE6A9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKwN3sMOJORX4W5lB9IZcoMQiT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.mft
Manifest number: 0168
Signing time: Sat 26 Jul 2025 16:00:50 +0000
Manifest this update: Sat 26 Jul 2025 16:00:50 +0000
Manifest next update: Sun 27 Jul 2025 16:00:50 +0000
Files and hashes: 1: 3gl-l3qU8MpI3MVFIGvCINJyADE.roa (hash: utYF7PoXBqNr3o1w6VDP9HkMKeBzXvpa+DHx3iRNsmk=)
2: VKwN3sMOJORX4W5lB9IZcoMQiT0.crl (hash: UmSR1JlNVP/0t5946nGcd2V2ey0nBRJzsLDMMfgf6ts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKwN3sMOJORX4W5lB9IZcoMQiT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 16:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:32:27:6f:45:af:5a:43:2c:64:9c:dd:ae:6a:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54ac0ddec30e24e457e16e6507d219728310893d
Validity
Not Before: Jul 26 16:00:50 2025 GMT
Not After : Jul 27 16:00:50 2025 GMT
Subject: CN=a147f721dbad7b8d05346d805852b1e9d7d2426e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:09:e4:f2:38:6b:e2:98:46:bf:55:f6:23:1b:
85:e8:3a:96:f2:7b:80:b8:c8:11:f9:9c:bb:32:0b:
17:57:2d:a3:63:b9:be:56:55:43:95:9e:78:a8:73:
db:24:d0:0e:07:c3:7e:3d:16:50:97:01:8e:40:be:
2d:6a:5c:29:e6:59:7e:99:64:85:b3:9b:d6:01:10:
27:17:28:1d:78:ae:60:1b:6d:f0:3f:cb:3a:3b:3f:
05:d8:d7:5a:2d:9b:34:77:fb:7b:59:19:a4:eb:8a:
b9:02:13:08:90:86:25:b1:9a:34:f8:81:56:87:80:
82:2f:5e:e0:bf:2e:35:d3:92:35:ab:6b:8c:10:1e:
ef:e5:c8:6e:3a:77:5e:a0:21:7c:6c:c9:be:87:42:
0f:27:ce:12:b5:95:4c:13:ac:e4:29:4d:e5:f0:8b:
79:00:e7:11:b9:01:56:06:af:38:02:51:8e:be:d0:
9b:fd:28:c9:96:a6:c7:5f:39:1f:2e:4e:6a:aa:e8:
3f:11:64:55:56:4a:49:25:0d:08:64:65:dc:0d:58:
38:52:cc:7a:8f:b3:40:d5:7b:13:de:e4:ae:37:82:
32:9d:7d:05:c7:5d:f8:7b:e5:0b:77:70:3c:de:0f:
6f:16:fe:10:09:de:23:e8:57:fc:28:28:15:32:63:
be:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:47:F7:21:DB:AD:7B:8D:05:34:6D:80:58:52:B1:E9:D7:D2:42:6E
X509v3 Authority Key Identifier:
keyid:54:AC:0D:DE:C3:0E:24:E4:57:E1:6E:65:07:D2:19:72:83:10:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKwN3sMOJORX4W5lB9IZcoMQiT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:38:a1:15:42:d6:f9:d8:fb:21:63:4d:9b:75:42:4b:7e:9c:
c6:5a:e6:e3:71:41:a1:ff:50:bc:37:88:7c:5e:ee:4a:a3:85:
ac:94:19:34:b9:e8:39:7f:ba:96:0a:fc:aa:a4:d7:38:05:fa:
0c:f2:f2:d9:1c:47:3a:24:4a:63:a1:61:1b:75:fa:d7:63:25:
68:58:64:c1:89:80:cb:03:84:fd:99:67:a4:83:69:26:69:b4:
45:0d:6c:0b:9d:cd:85:93:d9:01:78:09:77:fa:e4:a8:38:01:
11:ef:8e:5b:43:1a:b1:a2:7f:35:cd:73:6a:2d:56:c7:b6:f7:
32:3d:99:c7:94:f7:00:d3:72:41:32:f3:ab:e1:9d:e8:c4:e4:
bd:f1:f8:f0:90:63:1a:71:6f:09:4d:b7:79:1d:ec:a6:a4:5f:
3e:c1:af:b3:6e:2b:8f:e3:77:a5:ef:c6:70:8e:56:20:39:0c:
20:76:91:8a:a2:4a:3e:22:40:4c:a9:a1:7d:88:36:e5:ea:bc:
39:8a:2b:a1:5f:c7:5b:2c:94:60:df:00:db:b5:59:03:30:a1:
72:23:dd:18:2b:01:07:12:0e:24:6e:98:a8:8d:ab:7f:1c:8b:
b7:8a:2b:87:72:df:87:c7:31:80:63:2f:bb:3d:26:e4:25:5d:
e4:66:42:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:59:37 2025 by rpki-client