Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft
File: VwhmHGruys2bcRdqct6WybRQlDk.mft (raw, json)
Hash identifier: EZQsNel3m2aAxuXagWJQ8GiEh91MGMLT1o4ls3RLRfU=
Subject key identifier: 1D:D1:51:55:71:02:C0:C3:2F:F5:4F:0B:A6:04:C8:E8:59:FA:F6:12
Authority key identifier: 57:08:66:1C:6A:EE:CA:CD:9B:71:17:6A:72:DE:96:C9:B4:50:94:39
Certificate issuer: /CN=5708661c6aeecacd9b71176a72de96c9b4509439
Certificate serial: 01984A09E8E287B04DAFA6B9D6F3C966415A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VwhmHGruys2bcRdqct6WybRQlDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft
Manifest number: 0F2C
Signing time: Sun 27 Jul 2025 04:00:20 +0000
Manifest this update: Sun 27 Jul 2025 04:00:20 +0000
Manifest next update: Mon 28 Jul 2025 04:00:20 +0000
Files and hashes: 1: 0DRAcYwVU1wTPmKPUVZE-cIvVWk.roa (hash: SCcdCtXYPz3bfVKFsB8kMQkE3rKjzNyXJ29sazaODiU=)
2: VwhmHGruys2bcRdqct6WybRQlDk.crl (hash: 8s/oU+AEIEYUj6SZQeTK5TuuCJEdSA+UlOp7YPYyFFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VwhmHGruys2bcRdqct6WybRQlDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:e8:e2:87:b0:4d:af:a6:b9:d6:f3:c9:66:41:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5708661c6aeecacd9b71176a72de96c9b4509439
Validity
Not Before: Jul 27 04:00:20 2025 GMT
Not After : Jul 28 04:00:20 2025 GMT
Subject: CN=1dd151557102c0c32ff54f0ba604c8e859faf612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a9:c4:73:c1:f1:d6:b0:57:dd:fb:a7:5a:16:
89:5a:44:a1:c5:0c:2a:87:fc:de:f6:e2:f8:e2:c5:
95:17:aa:a3:d1:75:4a:8f:ed:89:5f:93:39:fc:5e:
d1:1b:4e:69:4c:ec:bd:ea:b1:37:76:03:0f:66:9a:
13:9a:9c:9d:5b:3a:24:bd:4e:a9:e0:00:43:56:86:
d9:76:f3:7b:28:a7:d9:e0:5c:85:9b:5a:70:a6:7a:
3c:bc:8d:d8:93:f1:85:ca:5c:92:64:52:41:f1:86:
b6:8c:b5:5e:c9:b0:59:a5:40:c2:6f:3d:2b:95:e1:
e0:31:f4:e5:3b:2b:59:4f:e7:52:65:ff:73:1d:1e:
24:8d:85:37:a1:1c:47:22:98:87:01:74:05:96:04:
fa:d5:9f:c4:3f:14:26:cd:5a:1d:bd:8a:23:4d:95:
65:ce:de:57:25:1f:2c:a3:68:a1:51:c1:8c:eb:16:
0c:6e:1e:f9:04:50:60:26:49:ef:65:15:0d:aa:3d:
6c:07:fb:da:20:bf:b2:c9:cf:5d:75:37:87:25:73:
ff:32:ec:3a:ee:ee:01:af:1b:9a:9b:ff:eb:dc:ae:
fe:eb:15:61:20:bb:f2:17:e0:57:63:5f:fd:19:e6:
a3:34:fd:15:c1:64:41:34:eb:bd:91:5c:34:4e:55:
00:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D1:51:55:71:02:C0:C3:2F:F5:4F:0B:A6:04:C8:E8:59:FA:F6:12
X509v3 Authority Key Identifier:
keyid:57:08:66:1C:6A:EE:CA:CD:9B:71:17:6A:72:DE:96:C9:B4:50:94:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwhmHGruys2bcRdqct6WybRQlDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:a8:3a:31:f8:9d:74:b3:73:f0:f9:fb:2c:82:f5:69:29:fb:
ec:96:4b:01:4f:73:74:bb:c0:8b:c7:f9:bf:00:e1:64:97:48:
16:3a:94:2f:b5:de:31:42:da:9c:17:8f:4c:b0:a3:ac:16:ea:
33:67:92:77:9e:79:a9:73:df:db:7a:c9:da:30:a8:c5:14:40:
2c:5c:d4:c3:e3:b4:c0:40:ca:ee:0a:b0:66:ad:2a:14:c8:54:
96:75:33:98:55:c3:15:b0:0f:dd:20:9c:32:36:05:0a:90:d8:
79:8b:95:c5:58:c9:0e:fa:8f:78:94:31:5a:63:f2:09:0a:54:
ef:3d:db:49:ea:73:56:b5:5f:d2:45:cc:99:eb:23:a2:ee:fb:
9f:4b:d5:46:d1:b9:af:b6:85:b9:19:a2:c0:e1:f0:61:e3:42:
0b:34:e3:4b:c6:f4:74:d8:12:a5:dd:11:75:a3:0f:62:5a:e5:
ea:c4:ea:9b:cd:14:a0:e0:d1:5d:8c:e6:44:e8:9c:35:f6:ee:
8e:20:34:06:c9:0f:f4:ec:e0:f7:99:01:f6:6a:da:9d:7a:e5:
b8:8b:17:80:95:2c:f5:55:0a:a1:95:86:1c:3a:5a:fc:a5:40:
b7:f7:10:45:e5:d1:bf:ca:bc:98:61:f7:fc:2f:ec:b8:5f:71:
d2:ba:44:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:26:51 2025 by rpki-client