Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/VPK5p1k1doKsQZtcAhHMDkICUro.mft
File: VPK5p1k1doKsQZtcAhHMDkICUro.mft (raw, json)
Hash identifier: GHK6/2SEWsFkuHUOb7pd9mLy1sE/sJD3GkpWCzMjSaA=
Subject key identifier: F5:49:E0:1D:CD:AB:8E:A8:D7:7B:A1:1F:4C:E6:14:09:C2:4A:1D:93
Authority key identifier: 54:F2:B9:A7:59:35:76:82:AC:41:9B:5C:02:11:CC:0E:42:02:52:BA
Certificate issuer: /CN=54f2b9a759357682ac419b5c0211cc0e420252ba
Certificate serial: 01984AE576D98503A4698226A3B603177F58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VPK5p1k1doKsQZtcAhHMDkICUro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/VPK5p1k1doKsQZtcAhHMDkICUro.mft
Manifest number: 1423
Signing time: Sun 27 Jul 2025 08:00:08 +0000
Manifest this update: Sun 27 Jul 2025 08:00:08 +0000
Manifest next update: Mon 28 Jul 2025 08:00:08 +0000
Files and hashes: 1: AqRcwBOoELP7sO7G2ArRpdIIf-8.roa (hash: Y1QC1/53Sd9JtcwMQ3kWoyldjEFlmNNOZ3rUXpglWPs=)
2: SPcGIGkkzQDmSeZ7dKXkZX_TMgQ.roa (hash: rHVmlh8TGkwEc4idYqR8fskh8r3CxSQPC0McskOxXCc=)
3: VPK5p1k1doKsQZtcAhHMDkICUro.crl (hash: 5GPoAtsiDgNPU1KFVnUBMIqPPKXThyUGOxSgQcCs5H8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/VPK5p1k1doKsQZtcAhHMDkICUro.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/VPK5p1k1doKsQZtcAhHMDkICUro.mft
rsync://rpki.ripe.net/repository/DEFAULT/VPK5p1k1doKsQZtcAhHMDkICUro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 08:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:76:d9:85:03:a4:69:82:26:a3:b6:03:17:7f:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54f2b9a759357682ac419b5c0211cc0e420252ba
Validity
Not Before: Jul 27 08:00:08 2025 GMT
Not After : Jul 28 08:00:08 2025 GMT
Subject: CN=f549e01dcdab8ea8d77ba11f4ce61409c24a1d93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3c:5f:58:15:9f:6c:32:95:7c:3f:7c:5b:cc:
94:1f:97:a2:10:15:0a:86:87:8b:36:fe:03:96:15:
a2:70:0f:90:fa:d5:33:f3:96:55:75:50:ef:ae:52:
e0:73:2e:e9:69:5a:95:6b:67:2b:07:25:5f:16:75:
9f:3d:38:4a:2a:90:e3:2c:6f:c9:4c:50:67:ff:b5:
bf:7f:a7:4e:13:e5:29:47:f2:1b:c5:0f:3a:5a:cf:
2f:ac:e5:91:62:e5:d8:80:ae:51:06:0b:a6:00:42:
4a:1a:51:39:e6:18:f7:fc:07:4f:13:e6:27:1e:99:
75:5b:52:07:c6:03:89:d5:cb:ed:64:ef:a4:c1:f7:
43:04:64:99:58:c5:73:f0:ae:3f:11:88:a0:fe:7a:
16:8e:78:b6:b8:79:0e:7a:59:be:09:ea:83:56:56:
80:b1:e2:7a:4a:16:9d:2e:f5:30:d2:2e:09:89:ff:
c7:90:b7:c1:33:96:13:23:03:bd:b5:c5:40:36:dc:
65:99:18:7b:e4:ea:39:cf:f6:41:8d:bf:0b:91:22:
ae:37:26:45:b3:e9:43:a7:86:94:f6:47:d9:5d:d2:
b8:91:81:0d:64:6f:70:30:53:ab:53:1e:24:ca:8b:
f2:e3:b1:97:8c:ea:78:de:59:76:be:56:98:00:be:
19:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:49:E0:1D:CD:AB:8E:A8:D7:7B:A1:1F:4C:E6:14:09:C2:4A:1D:93
X509v3 Authority Key Identifier:
keyid:54:F2:B9:A7:59:35:76:82:AC:41:9B:5C:02:11:CC:0E:42:02:52:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VPK5p1k1doKsQZtcAhHMDkICUro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/VPK5p1k1doKsQZtcAhHMDkICUro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/VPK5p1k1doKsQZtcAhHMDkICUro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:b8:23:67:a7:4b:e2:4b:1b:96:1a:81:b5:d4:03:c3:58:3b:
37:7f:b5:f0:7c:ba:ad:99:91:9c:6a:91:17:58:45:59:0b:84:
d6:46:35:a4:36:63:66:33:57:ee:6b:62:cd:1b:ff:34:9b:5c:
8b:df:29:e3:e5:c2:9b:3e:b8:21:f4:7c:b9:c0:bf:4b:fb:90:
3d:3c:58:ed:9e:e0:31:10:58:89:20:08:a2:8d:b2:40:bd:67:
5a:fe:fe:e2:b6:c1:98:65:c7:8a:ae:df:55:4c:8e:d4:7e:85:
b2:c7:08:95:f2:c5:72:9b:00:be:33:6a:32:80:73:19:3f:ac:
2b:e1:08:bb:96:d7:9a:f5:86:1e:ea:31:f8:3f:94:57:e2:97:
87:64:e2:a1:db:99:ed:f2:12:a6:5c:db:d3:07:83:bc:71:d1:
04:5c:45:26:71:02:99:bd:38:63:87:dc:ff:13:92:1a:8c:63:
ff:20:96:6d:0e:2c:41:22:7f:a2:4b:66:41:a1:c0:7e:21:ce:
9e:ca:a6:42:73:7c:7d:4a:d1:f2:db:1f:a8:d9:4b:35:d0:83:
c3:76:10:4b:82:09:2d:1b:da:8d:6f:3e:b9:8f:aa:fc:dd:d4:
84:59:f7:d1:ca:a2:f0:9b:7b:1e:bd:f3:b2:7d:cc:47:2a:a7:
26:17:bd:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 17:52:56 2025 by rpki-client