Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/6222f1-f4dc-4704-b946-1906a4a1f993/1/vp_DiEcFxK7c_npNF923UuH-YZg.mft
File: vp_DiEcFxK7c_npNF923UuH-YZg.mft (raw, json)
Hash identifier: Vpo99NH51qXuoEDfRbTeXk0o0p9KwLMsKHq2MO+IL+w=
Subject key identifier: A9:C1:FD:A4:8D:92:6E:BA:17:E1:56:63:94:BF:24:D6:24:BB:6E:25
Authority key identifier: BE:9F:C3:88:47:05:C4:AE:DC:FE:7A:4D:17:DD:B7:52:E1:FE:61:98
Certificate issuer: /CN=be9fc3884705c4aedcfe7a4d17ddb752e1fe6198
Certificate serial: 019853E944CA4AD11EC89720FB585B9C214A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vp_DiEcFxK7c_npNF923UuH-YZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/6222f1-f4dc-4704-b946-1906a4a1f993/1/vp_DiEcFxK7c_npNF923UuH-YZg.mft
Manifest number: 0F86
Signing time: Tue 29 Jul 2025 02:00:53 +0000
Manifest this update: Tue 29 Jul 2025 02:00:53 +0000
Manifest next update: Wed 30 Jul 2025 02:00:53 +0000
Files and hashes: 1: OxQ5KD2enOW3Q6SG5w9YoHDtQi4.roa (hash: 7v/MM1L+QU9CF1kjU9dOBbxcjiq8aqzftr7NOP1GZsU=)
2: vp_DiEcFxK7c_npNF923UuH-YZg.crl (hash: EDF8OyeUK8gaDCrmH7oA0y7eVCkOkGU0/44GQa/zNvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/6222f1-f4dc-4704-b946-1906a4a1f993/1/vp_DiEcFxK7c_npNF923UuH-YZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/6222f1-f4dc-4704-b946-1906a4a1f993/1/vp_DiEcFxK7c_npNF923UuH-YZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vp_DiEcFxK7c_npNF923UuH-YZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:e9:44:ca:4a:d1:1e:c8:97:20:fb:58:5b:9c:21:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be9fc3884705c4aedcfe7a4d17ddb752e1fe6198
Validity
Not Before: Jul 29 02:00:53 2025 GMT
Not After : Jul 30 02:00:53 2025 GMT
Subject: CN=a9c1fda48d926eba17e1566394bf24d624bb6e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c7:54:55:89:55:2c:1f:a7:54:bc:32:6c:cd:
40:12:7c:ba:4e:b1:14:75:5a:b2:ab:64:92:c5:e0:
66:50:a9:ea:3a:33:69:44:e2:c5:7c:15:43:21:bb:
66:7a:8f:4e:be:15:51:39:57:33:ac:a8:57:3c:e9:
d1:3c:5f:59:2a:34:bb:71:ed:6b:0e:d8:87:5f:a7:
af:16:42:b2:c6:2b:34:37:7f:3b:ee:33:cc:22:46:
f7:8d:c5:00:e8:6d:b5:15:a2:06:09:d0:05:7a:20:
17:75:1d:36:80:d6:2f:5d:c3:64:75:b4:ca:ba:f1:
fe:2c:9a:a2:cd:7b:3d:09:e2:8f:f9:df:b9:ec:58:
b2:01:64:43:0f:2b:4e:de:e1:c9:0a:dc:2f:9f:83:
bc:06:eb:66:ac:5b:30:10:76:6f:75:1b:4e:1a:cb:
84:31:08:fd:9c:c7:d6:bb:5d:ee:ea:58:4a:07:6c:
2c:b2:ef:f2:af:ec:5a:57:f7:94:51:db:6e:54:72:
53:f5:ac:24:f7:06:30:e4:99:24:47:5b:bc:55:0a:
e7:bc:a8:1c:b5:93:e5:67:f2:9d:0c:82:b8:d2:11:
de:14:29:fb:7c:29:07:03:06:d8:ad:2e:62:bb:c4:
25:b9:cb:e0:bb:b4:35:93:21:d1:d4:60:50:94:d0:
1c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C1:FD:A4:8D:92:6E:BA:17:E1:56:63:94:BF:24:D6:24:BB:6E:25
X509v3 Authority Key Identifier:
keyid:BE:9F:C3:88:47:05:C4:AE:DC:FE:7A:4D:17:DD:B7:52:E1:FE:61:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vp_DiEcFxK7c_npNF923UuH-YZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/6222f1-f4dc-4704-b946-1906a4a1f993/1/vp_DiEcFxK7c_npNF923UuH-YZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/6222f1-f4dc-4704-b946-1906a4a1f993/1/vp_DiEcFxK7c_npNF923UuH-YZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:22:a9:1e:ca:96:c8:f6:e2:80:cf:da:25:34:66:45:ae:49:
d6:72:14:d2:b3:13:53:25:87:e9:58:b9:72:1a:bb:53:f0:67:
bb:27:b0:30:63:f1:5f:b0:5c:5e:0c:02:8c:d5:49:1e:28:42:
b0:77:2d:64:94:fa:6e:b3:15:83:7f:8c:f2:c1:71:0b:ce:ea:
15:f9:14:9d:9f:e7:66:ac:8c:c0:7a:89:32:e7:c5:79:f6:a9:
bd:18:b5:40:3e:55:98:be:91:3f:6b:6b:7a:1a:48:ee:86:98:
76:e9:60:98:67:02:85:e7:7e:07:78:88:b6:f2:94:f8:d6:66:
6a:48:83:ac:96:21:a1:32:92:ad:f9:53:63:47:c0:02:54:f2:
b5:59:b1:f9:f7:b5:ec:47:74:88:b3:93:44:63:d6:79:34:b8:
af:c4:b0:87:b5:88:93:41:d0:db:0c:ce:8a:54:06:0d:19:bf:
40:8c:6e:0c:ae:6f:d7:33:f9:87:fc:a8:71:ce:0c:49:ed:b6:
2c:e6:23:03:f5:56:6e:fd:fa:97:1c:11:7e:0c:a5:66:16:7f:
5e:0f:a9:cd:be:2e:4c:da:62:02:f8:75:11:b6:51:80:98:6c:
8c:39:ea:2d:23:41:03:1c:68:9a:98:df:ba:8a:b2:47:e4:3e:
d0:40:f8:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:44:07 2025 by rpki-client