Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/be1c97-418f-4e46-bc1c-ee03f3de44aa/1/VmRpui7FavQFn4UHViCEec4VW3o.mft
File: VmRpui7FavQFn4UHViCEec4VW3o.mft (raw, json)
Hash identifier: okof6ZK/NJ8y3UlYGHFKZF4jwyHcGCJlghPnRLgGo18=
Subject key identifier: 51:10:8D:70:93:47:FB:17:5A:6A:AA:EC:6D:F4:06:63:C3:20:D1:9C
Authority key identifier: 56:64:69:BA:2E:C5:6A:F4:05:9F:85:07:56:20:84:79:CE:15:5B:7A
Certificate issuer: /CN=566469ba2ec56af4059f850756208479ce155b7a
Certificate serial: 0198469B44C6A0960326E846675069F1CABD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VmRpui7FavQFn4UHViCEec4VW3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/be1c97-418f-4e46-bc1c-ee03f3de44aa/1/VmRpui7FavQFn4UHViCEec4VW3o.mft
Manifest number: 0538
Signing time: Sat 26 Jul 2025 12:00:37 +0000
Manifest this update: Sat 26 Jul 2025 12:00:37 +0000
Manifest next update: Sun 27 Jul 2025 12:00:37 +0000
Files and hashes: 1: VmRpui7FavQFn4UHViCEec4VW3o.crl (hash: PBH7SAkzk76UAGZybWwwHf9BCFztDVhP6gwfreOSF1s=)
2: kniutbSU_-qRAK95UI_8HV0omH8.roa (hash: O5mP5p6KZHlt5DYxryJnWdH3oyg1kqV5mUt5tDGEri0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/be1c97-418f-4e46-bc1c-ee03f3de44aa/1/VmRpui7FavQFn4UHViCEec4VW3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/be1c97-418f-4e46-bc1c-ee03f3de44aa/1/VmRpui7FavQFn4UHViCEec4VW3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/VmRpui7FavQFn4UHViCEec4VW3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:9b:44:c6:a0:96:03:26:e8:46:67:50:69:f1:ca:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=566469ba2ec56af4059f850756208479ce155b7a
Validity
Not Before: Jul 26 12:00:37 2025 GMT
Not After : Jul 27 12:00:37 2025 GMT
Subject: CN=51108d709347fb175a6aaaec6df40663c320d19c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ef:53:31:4c:aa:22:5e:97:e4:e2:2c:75:d6:
cd:8d:c2:ab:9e:1c:19:64:81:30:7f:51:99:07:66:
e9:4a:c4:1f:f7:ee:ff:99:6c:a7:9a:d9:30:c9:9b:
40:8d:c3:46:8c:bf:f4:a3:e7:5d:70:d4:46:70:ac:
27:7b:ea:51:9d:b0:87:de:1b:2f:3e:1b:ca:a9:89:
a9:ff:13:81:f1:cc:a9:a6:45:b5:68:ca:0e:8b:72:
d9:c1:de:9a:d5:e5:7b:5b:8c:fd:80:51:ce:6d:78:
ef:af:e5:8e:d0:41:80:f1:9f:8a:ec:28:1f:5c:51:
00:cd:d3:8d:40:41:11:f7:28:5f:21:2b:82:a4:9d:
1b:85:6e:13:38:0b:cb:2f:41:34:f4:89:c5:ec:11:
99:60:7f:40:14:10:e7:57:f6:1c:49:13:d4:b6:90:
e1:92:15:2a:6d:96:00:eb:f8:61:68:20:8b:c5:76:
c5:5a:61:ea:6c:96:11:75:42:6b:14:96:70:7f:0f:
bd:42:5c:a4:a7:a0:39:21:e7:7f:80:b9:77:b1:ce:
3a:42:12:5a:23:41:ea:ef:f5:e0:03:2d:f8:97:2c:
25:31:5e:6c:8f:be:7a:cf:48:6a:94:ea:39:fe:ba:
af:05:df:9f:98:ff:45:a8:c4:64:05:32:d7:72:11:
de:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:10:8D:70:93:47:FB:17:5A:6A:AA:EC:6D:F4:06:63:C3:20:D1:9C
X509v3 Authority Key Identifier:
keyid:56:64:69:BA:2E:C5:6A:F4:05:9F:85:07:56:20:84:79:CE:15:5B:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VmRpui7FavQFn4UHViCEec4VW3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/be1c97-418f-4e46-bc1c-ee03f3de44aa/1/VmRpui7FavQFn4UHViCEec4VW3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/be1c97-418f-4e46-bc1c-ee03f3de44aa/1/VmRpui7FavQFn4UHViCEec4VW3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:ba:55:e5:d6:c1:54:46:03:14:6c:fe:aa:aa:02:32:b4:74:
77:2c:83:a8:91:47:c4:f5:88:25:1f:e9:41:8d:dd:46:57:73:
f3:e4:68:7c:23:c9:c3:3e:69:00:a9:2a:a1:8c:df:84:a2:fc:
92:83:ad:2a:39:7e:82:6f:a7:0d:45:49:b0:1d:36:8f:7f:e7:
dd:c1:6e:f7:c0:ba:d4:00:a3:0b:30:b9:30:41:2c:7f:42:57:
84:2d:c2:fe:36:7f:65:0b:1b:c6:ce:fc:df:3f:13:aa:a1:87:
a3:c5:19:51:8a:f9:e6:ee:43:e1:af:e6:f2:6a:ff:70:56:38:
47:de:08:58:39:bf:d4:a1:40:5f:32:b7:cc:52:f8:28:e9:b9:
44:1e:01:3b:dc:a7:9f:39:fe:d6:e9:b6:76:35:cc:78:26:72:
8a:c9:1d:56:ba:20:dd:e0:ee:15:92:87:ac:24:49:c0:04:03:
7c:20:a6:51:be:ca:86:f3:ae:9a:d9:36:cf:c0:77:a3:04:da:
11:a8:da:a0:03:44:a1:1d:e9:19:1a:94:28:c3:b3:be:1c:42:
93:7f:00:e8:2f:de:82:3e:0e:1a:eb:2c:c3:99:33:60:9b:9c:
9d:e7:ac:63:12:40:bb:26:3d:db:d8:48:1b:a8:f3:10:c2:38:
31:cb:77:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:53:41 2025 by rpki-client