Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.mft
File: VvciqIWr65qv-zLadk7wkbWyA0A.mft (raw, json)
Hash identifier: FJ6DvRFY/RFdqltHvZh8+BgRaloWmfG5q6PfQU8GeYU=
Subject key identifier: 14:D3:46:9C:14:5A:B3:81:51:49:DA:8E:6F:8B:E4:FE:33:05:27:BB
Authority key identifier: 56:F7:22:A8:85:AB:EB:9A:AF:FB:32:DA:76:4E:F0:91:B5:B2:03:40
Certificate issuer: /CN=56f722a885abeb9aaffb32da764ef091b5b20340
Certificate serial: 0198481BC0EC1F8E79AACAA4133FA469AA86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VvciqIWr65qv-zLadk7wkbWyA0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.mft
Manifest number: 0922
Signing time: Sat 26 Jul 2025 19:00:35 +0000
Manifest this update: Sat 26 Jul 2025 19:00:35 +0000
Manifest next update: Sun 27 Jul 2025 19:00:35 +0000
Files and hashes: 1: VvciqIWr65qv-zLadk7wkbWyA0A.crl (hash: jnhkQ/CNYOgQQMyzaCA2T1mdgXIfZNResn4WdsyAcrc=)
2: vpimmj50rM3b693dSW6yAkLWvvA.roa (hash: 5VKPzqmzdczcoLOJtvbaVQfmAQ+1p8lObAjIuI3KfsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/VvciqIWr65qv-zLadk7wkbWyA0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 19:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:c0:ec:1f:8e:79:aa:ca:a4:13:3f:a4:69:aa:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56f722a885abeb9aaffb32da764ef091b5b20340
Validity
Not Before: Jul 26 19:00:35 2025 GMT
Not After : Jul 27 19:00:35 2025 GMT
Subject: CN=14d3469c145ab3815149da8e6f8be4fe330527bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:32:f6:93:3e:0e:99:c1:14:48:ae:a6:c7:c6:
3c:54:ce:51:e0:d8:81:01:bd:88:1e:05:93:17:1e:
22:29:e1:49:4f:e8:53:6a:c6:1f:d6:49:43:1f:0b:
78:db:22:00:18:e6:02:7a:a8:eb:61:01:5d:f9:87:
b1:84:ce:c7:3e:5a:39:a5:47:d4:57:c0:0f:66:d1:
ef:ec:c2:6c:b1:bd:19:0a:59:3b:9d:61:a9:59:09:
92:0f:4c:b8:3f:a6:36:35:c4:fa:26:31:56:df:13:
0e:9b:b3:98:00:f1:56:af:58:c0:4e:35:51:f5:87:
f9:df:17:bc:40:bc:8d:16:98:00:72:dc:81:91:0c:
fc:0c:3e:93:c5:1a:64:8b:b1:e1:54:93:4e:78:80:
2f:bb:bc:06:c2:59:fc:f3:03:70:26:1e:ac:43:9e:
67:7d:60:4c:ad:3e:41:8c:33:b7:b7:aa:40:c0:d1:
99:ec:36:68:63:92:1b:19:f3:df:66:db:28:84:cb:
1b:92:fe:68:6f:d7:34:a9:11:1a:10:d0:e7:f9:fb:
74:63:9e:e0:3d:80:4d:44:1b:13:45:cb:5d:e5:2d:
76:2e:10:b8:39:bc:b5:0b:d2:3a:af:df:a5:49:90:
77:90:7b:aa:ba:a3:78:7f:62:0a:c7:e4:33:aa:0b:
d7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D3:46:9C:14:5A:B3:81:51:49:DA:8E:6F:8B:E4:FE:33:05:27:BB
X509v3 Authority Key Identifier:
keyid:56:F7:22:A8:85:AB:EB:9A:AF:FB:32:DA:76:4E:F0:91:B5:B2:03:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VvciqIWr65qv-zLadk7wkbWyA0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:0d:cc:70:3c:1e:dd:ac:c9:d0:8c:40:e1:10:46:65:a7:55:
70:b2:16:77:00:8d:e7:17:a4:87:04:9f:a5:55:fd:5d:26:c9:
ab:cf:6e:64:d9:ea:fa:bf:f7:93:be:f9:a9:83:77:60:6d:e9:
ae:83:a8:f9:d4:7d:69:87:f7:fe:0c:62:2b:48:90:ab:56:6c:
b8:2e:fa:c8:bd:07:4c:82:28:f7:80:19:81:3a:56:03:c4:5f:
42:06:62:bf:43:ac:70:99:2e:c0:17:5c:a6:c8:9b:95:b6:01:
55:c1:9e:f5:8d:7e:bb:ac:58:2e:a1:45:fa:42:b0:1f:2d:fd:
1c:34:61:f9:2d:63:d2:57:f7:85:11:e5:c5:6a:bc:f3:d3:0f:
80:5a:60:0c:6b:db:49:21:ff:7f:bd:06:ee:d8:6e:a6:a9:bb:
fc:0d:23:90:6d:05:6a:1d:6f:2d:55:5e:b2:2f:ef:d1:ab:19:
79:ac:a5:e9:3b:bf:41:11:64:b0:36:1a:87:7c:51:f7:e0:cb:
9a:93:46:96:12:86:3a:fc:76:09:67:67:69:10:68:0c:2e:c2:
03:52:b5:7f:0f:4f:79:c5:62:2d:49:e6:ac:85:99:3b:46:8a:
01:23:4a:11:58:6b:84:5a:5a:22:d5:4f:52:fb:8e:85:86:44:
c4:6d:19:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:05:04 2025 by rpki-client