Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.mft
File: VHGK9qNvZqkZOTZKr8hkRauKbg4.mft (raw, json)
Hash identifier: DLWHwKIdIZ1MYeiO8sg7fQlvJ1xkHatYjZGsgSwwup0=
Subject key identifier: 28:B3:BD:23:6E:A6:14:EC:EF:B3:A6:44:61:A9:12:FC:18:72:6B:58
Authority key identifier: 54:71:8A:F6:A3:6F:66:A9:19:39:36:4A:AF:C8:64:45:AB:8A:6E:0E
Certificate issuer: /CN=54718af6a36f66a91939364aafc86445ab8a6e0e
Certificate serial: 01985B35AEB8C852E0AB92338D1A26CC35E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHGK9qNvZqkZOTZKr8hkRauKbg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.mft
Manifest number: 160A
Signing time: Wed 30 Jul 2025 12:01:41 +0000
Manifest this update: Wed 30 Jul 2025 12:01:41 +0000
Manifest next update: Thu 31 Jul 2025 12:01:41 +0000
Files and hashes: 1: E6amiYi53XMdG38KpjAggGoL-xU.roa (hash: Z2VRJf48TJk3kvh/qYBt+PTaI/amPskBYdQSciVu6xk=)
2: VHGK9qNvZqkZOTZKr8hkRauKbg4.crl (hash: ahjXZ8CeaXxiAwM5uY1IMQYvQQFZGKFtQFAiVYqaTxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VHGK9qNvZqkZOTZKr8hkRauKbg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 31 Jul 2025 12:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5b:35:ae:b8:c8:52:e0:ab:92:33:8d:1a:26:cc:35:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54718af6a36f66a91939364aafc86445ab8a6e0e
Validity
Not Before: Jul 30 12:01:41 2025 GMT
Not After : Jul 31 12:01:41 2025 GMT
Subject: CN=28b3bd236ea614ecefb3a64461a912fc18726b58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ae:40:ca:05:96:73:fd:84:36:4c:67:e8:2b:
2a:ba:df:84:0a:74:36:8b:39:36:2a:64:50:e5:49:
5c:ec:bf:34:63:36:41:84:e8:eb:c2:0e:86:c5:7d:
79:a8:32:d3:a7:27:55:5d:7c:9e:9b:15:55:8d:03:
04:03:43:65:5e:80:bc:2f:5b:15:15:2f:2f:dd:42:
28:ed:46:e5:37:0b:ff:d8:3e:c8:a0:c3:69:22:34:
38:84:44:4c:38:8e:45:23:e9:7f:fe:6e:ea:0f:91:
06:63:56:b5:84:30:62:f1:50:e8:a5:ae:81:a6:7f:
1f:55:46:56:4c:4e:ab:69:93:a1:0a:db:9f:83:4f:
7b:e2:40:8b:6b:43:b1:5a:ea:4b:0e:60:87:87:f8:
6c:bd:9e:22:10:00:5f:39:75:ac:81:f5:34:5a:fb:
35:de:21:28:66:6e:cf:54:42:1f:93:b8:29:56:19:
cd:84:79:89:76:a3:dc:3b:1c:82:47:c1:fb:21:b6:
9d:50:88:09:c5:ca:09:cc:ee:a4:5b:ce:2d:af:6f:
17:88:7b:b6:84:2c:78:25:d5:da:52:4f:17:74:8e:
71:d4:0a:c3:b3:1f:bd:1e:80:e0:e3:8d:5a:ce:2e:
aa:ce:3a:55:99:4f:17:e2:95:e3:77:0b:2e:7a:85:
7e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B3:BD:23:6E:A6:14:EC:EF:B3:A6:44:61:A9:12:FC:18:72:6B:58
X509v3 Authority Key Identifier:
keyid:54:71:8A:F6:A3:6F:66:A9:19:39:36:4A:AF:C8:64:45:AB:8A:6E:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHGK9qNvZqkZOTZKr8hkRauKbg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:be:9e:22:5d:ae:11:c7:4f:3c:47:9e:75:9e:44:af:67:c0:
6b:27:29:bc:34:7b:3b:0a:0c:a9:7a:ae:6d:2c:2f:81:eb:d4:
bc:3d:ec:79:50:5e:96:e8:50:d0:05:33:55:1f:62:fa:e6:3f:
e3:08:fb:92:f7:68:d5:dc:91:e8:93:ae:38:22:00:2c:e1:1a:
be:60:e7:dd:f1:b9:ae:93:f8:78:b5:3b:c8:f5:52:c3:92:8c:
23:f1:30:c5:93:f2:30:0b:39:3f:8e:bc:29:28:eb:49:96:05:
40:04:06:e2:06:bf:7c:9a:30:96:4d:b7:2f:53:eb:70:30:d9:
34:57:dd:0e:a4:9d:4d:97:a9:a5:5d:f5:b6:3e:fd:66:89:e2:
0a:67:77:de:2b:c7:2c:e5:5c:6e:a1:51:c6:f8:71:35:cd:9b:
54:cc:38:be:95:29:ec:2c:c3:66:72:5b:2b:3e:21:7f:d7:54:
9f:46:7d:03:8f:1c:ce:9a:83:7d:e0:5d:96:fc:12:96:c1:27:
24:bf:03:3e:33:47:82:2f:ba:75:b2:fa:d0:2e:fc:a8:3a:3c:
73:cd:ba:a3:2d:e7:2d:fd:f3:7e:6e:78:57:1f:5a:ac:06:54:
78:50:02:0f:83:46:d0:46:6d:30:d0:f1:d7:d4:82:86:07:ae:
e4:34:26:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 20:31:56 2025 by rpki-client