Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.mft
File: VZxkpqxMSXatNiFBKhN0WeZJq54.mft (raw, json)
Hash identifier: bjQeeUWPoyFKSdFqH65jBlXcE8StQs4CjqWezbQzEz8=
Subject key identifier: BD:4F:4C:3D:75:81:02:8B:F0:AF:0B:65:84:D4:14:EB:6E:05:33:23
Authority key identifier: 55:9C:64:A6:AC:4C:49:76:AD:36:21:41:2A:13:74:59:E6:49:AB:9E
Certificate issuer: /CN=559c64a6ac4c4976ad3621412a137459e649ab9e
Certificate serial: 01984A4172B89B52F2441AF5759B71C81D99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZxkpqxMSXatNiFBKhN0WeZJq54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.mft
Manifest number: 1199
Signing time: Sun 27 Jul 2025 05:00:59 +0000
Manifest this update: Sun 27 Jul 2025 05:00:59 +0000
Manifest next update: Mon 28 Jul 2025 05:00:59 +0000
Files and hashes: 1: VS9hlIblCqjoV7wOGER9HcFzw5g.roa (hash: ldQ9iAybiLA+phWuzQvG2tTPk8+fTFZlm2NUmijp+Ac=)
2: VZxkpqxMSXatNiFBKhN0WeZJq54.crl (hash: 6L/+d16DeoQxzUBf3uIiahWMWXHlHI9s60jgTK6V6pc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.mft
rsync://rpki.ripe.net/repository/DEFAULT/VZxkpqxMSXatNiFBKhN0WeZJq54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:72:b8:9b:52:f2:44:1a:f5:75:9b:71:c8:1d:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=559c64a6ac4c4976ad3621412a137459e649ab9e
Validity
Not Before: Jul 27 05:00:59 2025 GMT
Not After : Jul 28 05:00:59 2025 GMT
Subject: CN=bd4f4c3d7581028bf0af0b6584d414eb6e053323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5c:a1:c3:0f:38:c0:dc:3a:27:b8:6a:2a:b0:
d6:15:60:33:24:34:7f:1e:2e:13:46:4f:cf:7f:25:
66:db:a8:d6:42:ef:63:fd:06:ec:0f:b6:b2:2b:75:
1c:01:e4:2f:b4:08:21:83:b4:77:ff:ae:d7:01:52:
ec:25:39:a8:df:60:28:f5:24:42:01:c1:98:26:46:
a0:f0:d9:27:fa:7a:fb:bd:06:22:88:97:27:85:aa:
75:9c:9b:77:34:83:6b:62:05:4d:a3:6c:96:4e:f1:
16:a1:1a:ca:ce:8e:76:6b:ef:f7:7b:5b:aa:a2:52:
ac:81:86:96:3c:4b:29:9c:df:a6:a4:f4:df:02:9d:
13:b7:29:f2:28:c0:ed:4d:84:f5:5d:e5:c2:33:d7:
8c:0d:d4:17:15:23:4b:82:25:9b:9e:8e:ef:82:3e:
e3:fe:b4:d2:ed:61:3d:97:f8:4d:df:5b:09:28:16:
76:bb:f3:5e:2e:db:cd:a6:df:bc:5a:27:6f:87:25:
e4:1b:70:5f:0e:f1:f0:60:ed:5c:0c:17:3c:52:75:
7f:23:bd:99:ae:8d:7c:ec:33:12:62:ea:98:77:00:
cb:cf:06:3a:47:62:f4:81:74:22:3a:47:89:3d:f6:
42:02:19:63:10:6a:62:63:79:24:23:38:f1:8b:54:
7c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:4F:4C:3D:75:81:02:8B:F0:AF:0B:65:84:D4:14:EB:6E:05:33:23
X509v3 Authority Key Identifier:
keyid:55:9C:64:A6:AC:4C:49:76:AD:36:21:41:2A:13:74:59:E6:49:AB:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZxkpqxMSXatNiFBKhN0WeZJq54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:db:83:8c:96:80:a7:86:53:5d:06:9d:5f:f5:14:65:51:76:
20:42:73:6b:74:a8:be:a6:37:f3:46:84:c6:f6:2f:b0:8d:0c:
db:55:3a:d7:42:27:6b:0c:43:12:dc:16:00:39:9e:44:cd:94:
f2:99:c3:02:96:69:d0:a6:6e:ad:01:a1:4a:8a:63:b8:11:cd:
2c:81:91:93:61:17:62:3d:0c:d7:e7:15:84:59:c3:87:35:02:
55:c9:5f:29:40:c6:66:a8:a2:4a:d3:3c:6b:26:1e:8c:b6:a6:
17:49:3f:45:a9:66:94:f3:a5:1e:f6:89:c3:0f:33:44:d3:b5:
28:9d:0a:e7:09:43:bd:2b:f0:4b:50:38:10:4f:9e:d2:79:4e:
35:86:a4:b8:aa:2a:7c:e3:a3:75:11:c5:c4:04:58:e3:5f:f7:
3d:e6:b2:05:63:64:d2:ae:a1:68:96:46:97:57:ff:c6:b4:cd:
41:e0:14:8e:f1:74:2b:66:7c:44:b8:51:6e:4c:46:9b:4d:df:
66:5e:91:a5:58:fc:f0:c3:52:e2:0e:56:95:20:95:73:36:ad:
bc:41:6e:54:50:03:e2:8c:16:65:85:7b:e3:5b:25:77:ce:67:
53:5c:83:69:8c:c0:8d:06:4a:14:8d:fd:38:0f:3c:b6:07:b7:
ce:e3:72:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:14:40 2025 by rpki-client