Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/9a8d08-e4bb-492f-9863-454f99c74f11/1/VT9MRjGjOFxeOV7h2dqgdrC8z_E.mft
File: VT9MRjGjOFxeOV7h2dqgdrC8z_E.mft (raw, json)
Hash identifier: 0LYKPOggFrfE6GAO18OQaFbpX8UZCe0C7on6cjzIWME=
Subject key identifier: CA:0D:C5:C6:D6:A4:C5:70:85:36:64:20:52:09:D9:AB:A6:67:B7:5B
Authority key identifier: 55:3F:4C:46:31:A3:38:5C:5E:39:5E:E1:D9:DA:A0:76:B0:BC:CF:F1
Certificate issuer: /CN=553f4c4631a3385c5e395ee1d9daa076b0bccff1
Certificate serial: 0198515563C4EEC85D67BEB1ED75E6F0DBF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VT9MRjGjOFxeOV7h2dqgdrC8z_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/9a8d08-e4bb-492f-9863-454f99c74f11/1/VT9MRjGjOFxeOV7h2dqgdrC8z_E.mft
Manifest number: 10EB
Signing time: Mon 28 Jul 2025 14:00:07 +0000
Manifest this update: Mon 28 Jul 2025 14:00:07 +0000
Manifest next update: Tue 29 Jul 2025 14:00:07 +0000
Files and hashes: 1: VT9MRjGjOFxeOV7h2dqgdrC8z_E.crl (hash: XZ7LTaoLU6XyX6zvqMwrQry82fNGczrnFXnbhOK+Vno=)
2: y1unGvVewluXyGeDL5LFoMVtcdw.roa (hash: /h17T8UK70DqWL88fo4si+DcDqq+rRewkenDmJ5Ct8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/9a8d08-e4bb-492f-9863-454f99c74f11/1/VT9MRjGjOFxeOV7h2dqgdrC8z_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/9a8d08-e4bb-492f-9863-454f99c74f11/1/VT9MRjGjOFxeOV7h2dqgdrC8z_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/VT9MRjGjOFxeOV7h2dqgdrC8z_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:55:63:c4:ee:c8:5d:67:be:b1:ed:75:e6:f0:db:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=553f4c4631a3385c5e395ee1d9daa076b0bccff1
Validity
Not Before: Jul 28 14:00:07 2025 GMT
Not After : Jul 29 14:00:07 2025 GMT
Subject: CN=ca0dc5c6d6a4c570853664205209d9aba667b75b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cf:d0:2a:3b:5a:a8:fe:a5:c0:b3:13:63:67:
9d:2b:22:81:48:4e:32:d5:54:c0:8c:6e:92:3b:8a:
99:00:77:74:01:8b:55:aa:aa:a9:41:91:c5:9e:52:
b8:75:b0:58:40:6b:05:41:69:c9:ae:cf:75:98:78:
af:c5:5d:97:95:52:cc:c0:49:28:dd:e2:57:b7:c9:
37:5f:cc:89:22:18:fa:44:21:86:3a:01:6a:6e:4f:
20:83:98:03:98:d9:8a:a6:05:7e:21:51:ea:40:1c:
e4:c9:3b:d9:30:1c:dc:4a:80:d3:3e:74:20:f7:cb:
ab:c7:73:66:a7:a6:85:21:cd:6f:8b:dd:a7:ec:08:
b6:21:42:c7:f6:32:55:74:9a:8e:10:3b:f4:71:f5:
7d:32:99:cc:24:21:4a:f2:9c:30:29:99:d3:9d:9a:
a0:4e:fb:9a:d1:54:e3:5d:c5:fc:5e:a9:b9:2a:7d:
e3:e1:00:cb:a9:a7:af:55:0f:5c:21:0b:37:35:85:
03:65:aa:50:14:71:94:88:b7:e1:47:38:d0:1a:b4:
2a:af:cb:57:66:cb:ca:e0:a3:ec:90:9e:39:4c:65:
4c:f8:f2:4c:cb:ac:cf:73:cf:74:8f:f3:5c:62:e1:
9b:3a:f4:77:10:29:4a:64:32:cb:d6:78:9b:4c:5f:
3f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:0D:C5:C6:D6:A4:C5:70:85:36:64:20:52:09:D9:AB:A6:67:B7:5B
X509v3 Authority Key Identifier:
keyid:55:3F:4C:46:31:A3:38:5C:5E:39:5E:E1:D9:DA:A0:76:B0:BC:CF:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VT9MRjGjOFxeOV7h2dqgdrC8z_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/9a8d08-e4bb-492f-9863-454f99c74f11/1/VT9MRjGjOFxeOV7h2dqgdrC8z_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/9a8d08-e4bb-492f-9863-454f99c74f11/1/VT9MRjGjOFxeOV7h2dqgdrC8z_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:33:ab:43:d4:21:17:47:16:5b:c9:da:57:b9:e9:4d:07:4b:
44:31:4f:b3:33:96:95:f7:2c:06:ac:13:9f:c3:eb:c7:eb:7b:
94:1f:3c:63:8e:a9:84:05:b5:68:f4:7e:77:87:a6:88:1e:8a:
e8:3a:4a:12:60:f4:06:a1:92:97:a3:af:4e:c6:6c:11:4b:30:
21:97:34:37:98:c6:85:ab:03:7b:5a:cc:cd:5d:7d:d4:17:d9:
8a:0f:a4:d8:66:03:46:0a:d2:90:7f:db:d7:3b:a5:a6:64:ed:
8b:de:97:5a:27:96:8c:12:fa:b1:57:84:20:48:91:3e:9b:0c:
c0:78:50:03:3e:ac:6b:a1:53:17:36:d3:de:d4:c4:8f:74:cc:
2a:21:3d:30:d9:84:a4:7d:e6:5a:cc:bd:62:45:14:e8:52:bb:
46:4c:17:ff:25:c4:93:c3:56:2c:3f:a7:cf:61:3e:64:2b:d7:
35:2e:80:ec:9d:11:bb:f6:0b:87:b5:25:89:de:cb:89:da:12:
da:16:75:ab:94:14:07:82:55:e1:52:84:72:1c:9f:9e:eb:98:
74:fa:4d:cb:77:70:e8:48:1c:94:a0:14:f6:04:6b:dd:3b:6c:
a9:b1:de:be:be:db:e2:13:ef:3c:12:13:32:e0:5b:58:00:2d:
c9:c0:60:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 23:02:50 2025 by rpki-client