Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.mft
File: Vk6tOAljA7xLah8rAuG5G-SEkUY.mft (raw, json)
Hash identifier: SJyj42UWCcLOySFqDxnBqzV2Ag/a2bjopbLfQYYUEZk=
Subject key identifier: FE:CB:13:49:B7:E7:CE:F6:55:FC:1E:AC:66:59:52:EC:85:79:68:06
Authority key identifier: 56:4E:AD:38:09:63:03:BC:4B:6A:1F:2B:02:E1:B9:1B:E4:84:91:46
Certificate issuer: /CN=564ead38096303bc4b6a1f2b02e1b91be4849146
Certificate serial: 019855692B9724CA80727BB9C636BDDADDB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vk6tOAljA7xLah8rAuG5G-SEkUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.mft
Manifest number: 0B4E
Signing time: Tue 29 Jul 2025 09:00:12 +0000
Manifest this update: Tue 29 Jul 2025 09:00:12 +0000
Manifest next update: Wed 30 Jul 2025 09:00:12 +0000
Files and hashes: 1: Q1FzunJJgm72n4cjnOFriVc18KU.roa (hash: 9QqXBfYauaWBi+EvcV0793mlb9DkJUiHomWOWZ5zJGk=)
2: Vk6tOAljA7xLah8rAuG5G-SEkUY.crl (hash: LgL3JqbhOD9nTqH23GEkLFIOFleTsrGc7lhlSszFsL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vk6tOAljA7xLah8rAuG5G-SEkUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:69:2b:97:24:ca:80:72:7b:b9:c6:36:bd:da:dd:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=564ead38096303bc4b6a1f2b02e1b91be4849146
Validity
Not Before: Jul 29 09:00:12 2025 GMT
Not After : Jul 30 09:00:12 2025 GMT
Subject: CN=fecb1349b7e7cef655fc1eac665952ec85796806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fa:70:5b:0f:a4:c5:17:a4:e2:2a:de:38:f5:
de:a8:87:26:54:e1:a1:c6:2e:99:b6:c5:e5:bf:ef:
97:ae:36:a4:73:fa:2f:ea:b6:74:b9:51:bf:f9:82:
26:67:7f:24:7d:0f:9f:29:93:51:60:1b:10:3f:46:
07:9f:ae:7a:d5:b0:04:f1:36:18:e1:17:35:4e:80:
c3:db:e3:9e:2c:53:68:d5:ab:e8:74:ef:e4:64:f6:
73:da:8c:92:9d:8e:12:7d:b9:c9:d2:81:3a:5a:37:
06:4b:c4:5b:ab:bb:fb:fd:de:59:a9:d9:a7:a8:35:
0c:7d:05:bb:42:da:3f:2d:5c:32:9b:e6:03:bc:c1:
49:8b:f3:f5:37:8a:14:a3:b9:d9:19:ac:05:8f:7d:
74:72:06:ed:fc:00:00:61:81:36:f9:d6:43:06:11:
3d:f5:b8:46:1f:38:b6:64:9d:9c:59:63:34:bf:7a:
8a:9b:71:dd:df:6a:28:fc:57:da:29:9b:a6:cf:d6:
70:07:1c:74:1a:6b:54:17:eb:c8:ed:cc:6c:a3:60:
8c:25:91:56:ed:f1:85:89:09:cf:62:5c:79:e9:52:
17:30:bd:c5:71:5e:22:c1:e0:8f:c8:02:d2:ff:9e:
eb:5f:fc:1f:84:cf:0c:6f:b4:c5:fd:c9:b1:7d:a9:
7e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:CB:13:49:B7:E7:CE:F6:55:FC:1E:AC:66:59:52:EC:85:79:68:06
X509v3 Authority Key Identifier:
keyid:56:4E:AD:38:09:63:03:BC:4B:6A:1F:2B:02:E1:B9:1B:E4:84:91:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vk6tOAljA7xLah8rAuG5G-SEkUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:44:8e:2d:e8:fb:9a:1c:65:d8:d2:8f:05:83:77:38:ff:36:
ad:92:d4:ac:90:0a:5e:4f:35:06:e8:a1:df:9f:e8:ab:26:9e:
9f:50:69:95:ea:d8:49:7c:08:ee:29:4a:9a:be:e7:f5:bf:d8:
8b:1b:00:ab:42:eb:85:a0:2d:b0:c8:cb:c5:db:0a:1b:84:fe:
4a:47:2c:cb:4a:fe:6c:4a:59:6a:78:35:24:5d:77:69:c5:66:
00:54:c8:41:61:2d:d1:44:dc:9f:f3:d4:b6:18:dd:d2:ce:56:
6e:ab:90:9e:1c:0e:fe:27:88:ed:8d:b5:e3:d4:dd:5e:56:9d:
13:a2:fc:c0:c8:18:56:18:a0:2f:df:3f:ce:5b:d5:80:fc:6d:
f4:36:44:e2:94:aa:74:6f:32:a5:2c:63:ab:9c:c4:07:23:b2:
d7:d2:fb:fc:5d:5a:56:c2:16:d9:fb:30:bb:9c:44:07:e8:a8:
2b:a5:9c:e2:31:be:40:4c:15:22:be:40:07:cb:cb:87:59:cc:
f1:0b:7f:8f:b2:80:a6:7b:2b:b0:fa:0d:14:00:f2:ae:32:f3:
bc:45:77:79:f6:da:f8:c1:a5:34:0a:2c:df:bb:20:21:81:f0:
e6:97:25:e9:5d:4a:b9:5c:1c:14:eb:9b:2b:76:64:e8:22:30:
c5:50:97:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 12:12:29 2025 by rpki-client