Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.mft
File: vjxU0e3KaS9Eydo4NALCT95yNQc.mft (raw, json)
Hash identifier: uk6YeBP9XZH4ulZkRJLCCKPIsZLRHoYkjmnhttTsMjk=
Subject key identifier: 78:DF:42:66:28:35:58:45:48:52:A7:19:90:42:7C:6A:1E:8C:89:BA
Authority key identifier: BE:3C:54:D1:ED:CA:69:2F:44:C9:DA:38:34:02:C2:4F:DE:72:35:07
Certificate issuer: /CN=be3c54d1edca692f44c9da383402c24fde723507
Certificate serial: 01984AAED8673E2C298476650CD1479487D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vjxU0e3KaS9Eydo4NALCT95yNQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.mft
Manifest number: 1594
Signing time: Sun 27 Jul 2025 07:00:29 +0000
Manifest this update: Sun 27 Jul 2025 07:00:29 +0000
Manifest next update: Mon 28 Jul 2025 07:00:29 +0000
Files and hashes: 1: NciqB0nxRsKsgl_dqrGriZqOS10.roa (hash: A4v1pKF3O59HRDDkByw4kog7MAnROAkCPMI/UYgkXRo=)
2: vjxU0e3KaS9Eydo4NALCT95yNQc.crl (hash: Of6VoeL8GXNyPxg1fzkmCuJVHVlPTYfOTPukmkmmclg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vjxU0e3KaS9Eydo4NALCT95yNQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:d8:67:3e:2c:29:84:76:65:0c:d1:47:94:87:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be3c54d1edca692f44c9da383402c24fde723507
Validity
Not Before: Jul 27 07:00:29 2025 GMT
Not After : Jul 28 07:00:29 2025 GMT
Subject: CN=78df4266283558454852a71990427c6a1e8c89ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ed:6d:78:a0:26:10:3f:00:9e:f9:6a:f5:f6:
03:de:e7:5f:ab:e3:45:48:83:22:be:14:9c:2c:12:
c2:5f:b6:74:da:1a:27:d3:f6:e6:16:88:da:94:53:
0c:e5:df:9e:cb:81:23:fc:4d:5a:ad:7f:93:09:82:
d7:f4:13:b3:91:05:20:d8:d4:01:7c:17:68:86:b1:
c0:ef:36:99:9b:df:a0:3c:9d:ab:20:96:02:00:dd:
25:cc:99:4b:ba:32:95:4a:15:dd:6c:23:35:ba:9f:
b3:38:95:99:4e:3d:d0:f4:9c:94:3b:93:7a:6a:a7:
7b:93:b7:79:bc:e0:fc:e5:5e:2f:d2:45:61:b0:60:
e8:7d:ca:d3:2e:ee:cb:72:87:b9:35:e6:e9:ea:aa:
13:f2:a4:a4:50:5c:e0:06:ad:e1:b8:60:0c:49:b1:
43:5d:e3:dd:c3:20:e9:ac:0d:30:18:c6:16:14:00:
5b:f2:48:d0:c6:24:3e:f7:04:5f:5a:55:50:55:35:
53:d1:8b:66:f0:14:cf:2a:9d:58:4d:79:d3:b0:74:
71:e7:49:05:f9:fa:56:84:f8:9b:9a:85:9e:fe:6f:
97:ce:69:f4:7f:52:60:2d:7a:8f:17:dd:23:af:b0:
b6:db:2b:28:c6:2f:85:02:03:bf:05:4f:88:5e:cd:
14:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:DF:42:66:28:35:58:45:48:52:A7:19:90:42:7C:6A:1E:8C:89:BA
X509v3 Authority Key Identifier:
keyid:BE:3C:54:D1:ED:CA:69:2F:44:C9:DA:38:34:02:C2:4F:DE:72:35:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjxU0e3KaS9Eydo4NALCT95yNQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:b3:7a:83:21:8c:c5:3d:63:40:f4:a1:9c:ce:71:21:bb:ef:
6f:28:72:2a:f8:49:45:9f:46:fe:fc:95:9f:ad:28:59:a0:a8:
9a:b3:79:f5:5b:8d:eb:ed:aa:5f:53:09:47:70:0d:57:3b:a0:
0b:cd:7c:c3:ab:76:14:ac:e8:b7:98:07:ec:e1:d8:ed:5f:34:
49:d1:79:c8:bb:02:06:8e:49:b7:68:56:b5:5c:65:e0:84:18:
1b:64:42:be:6a:67:94:cc:08:28:75:a1:1b:52:78:bc:66:da:
d2:a0:6c:9a:74:96:3c:fd:fb:a1:11:39:e1:12:ef:b7:f1:6d:
78:62:9b:65:5e:dd:a7:03:f6:29:71:43:16:b6:70:d6:82:2c:
95:5c:14:18:e6:68:f3:c5:9d:ba:57:a2:17:7c:d5:3b:a7:27:
2f:a0:3e:0c:46:35:63:7b:2d:0e:a3:ba:28:b8:d7:4b:b7:4f:
bf:95:9c:28:1f:c6:62:14:c5:be:30:c2:d7:46:32:9a:7f:0a:
3d:25:b5:e0:3e:ac:a6:a4:8c:5a:20:61:6b:59:30:0c:6b:a9:
b0:6a:b5:ec:3f:19:31:51:42:8f:d6:ed:26:76:fc:b9:de:a4:
20:0d:f7:56:42:d0:c2:93:7e:3f:cd:63:91:ee:55:7e:ab:b8:
9d:97:a5:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:47:10 2025 by rpki-client