Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/2cbe39-4fac-45af-99fd-52ec61bc6c00/1/VHzkg8gkHXpOZiWXd5gDW2OFhsY.mft
File: VHzkg8gkHXpOZiWXd5gDW2OFhsY.mft (raw, json)
Hash identifier: TnUhhrzAaEfwGI9Ye+r0gGdEi7T0ex9m1Da0F+3ke+c=
Subject key identifier: 37:60:51:4B:99:9E:8F:CF:07:4E:DB:02:E0:9F:0D:D7:05:FA:6A:EB
Authority key identifier: 54:7C:E4:83:C8:24:1D:7A:4E:66:25:97:77:98:03:5B:63:85:86:C6
Certificate issuer: /CN=547ce483c8241d7a4e6625977798035b638586c6
Certificate serial: 0199C6B3496FB1392495143B663E23C73A86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHzkg8gkHXpOZiWXd5gDW2OFhsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/2cbe39-4fac-45af-99fd-52ec61bc6c00/1/VHzkg8gkHXpOZiWXd5gDW2OFhsY.mft
Manifest number: 08A0
Signing time: Thu 09 Oct 2025 02:01:02 +0000
Manifest this update: Thu 09 Oct 2025 02:01:02 +0000
Manifest next update: Fri 10 Oct 2025 02:01:02 +0000
Files and hashes: 1: VHzkg8gkHXpOZiWXd5gDW2OFhsY.crl (hash: otn7CLkemYUAk+dRXzNXTo1VM+pR774TDKoktLgiDFM=)
2: b9l5sinWdqskbev4cuOxwSEYd68.roa (hash: qnq/UFSTcLvSI/5FTEwaMtiCFn9CDv5K60YTyMFcpss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/2cbe39-4fac-45af-99fd-52ec61bc6c00/1/VHzkg8gkHXpOZiWXd5gDW2OFhsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/2cbe39-4fac-45af-99fd-52ec61bc6c00/1/VHzkg8gkHXpOZiWXd5gDW2OFhsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VHzkg8gkHXpOZiWXd5gDW2OFhsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Oct 2025 02:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c6:b3:49:6f:b1:39:24:95:14:3b:66:3e:23:c7:3a:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=547ce483c8241d7a4e6625977798035b638586c6
Validity
Not Before: Oct 9 02:01:02 2025 GMT
Not After : Oct 10 02:01:02 2025 GMT
Subject: CN=3760514b999e8fcf074edb02e09f0dd705fa6aeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7c:64:10:7c:35:dd:59:39:1e:04:76:6d:30:
d5:bb:06:d5:ad:17:4f:bb:02:7a:ce:83:b3:70:42:
9d:e3:b1:59:3d:b0:fd:f8:36:81:26:ec:dc:9d:57:
a1:4b:e3:0f:f8:1d:92:55:dd:35:b6:99:6a:ab:0c:
8b:6e:e0:42:e9:29:9f:59:e1:fa:90:74:81:34:64:
26:de:aa:31:80:e7:bb:1c:c8:81:f9:aa:1d:94:49:
83:6e:e7:40:a0:08:03:20:5c:c1:b6:91:89:02:71:
43:84:57:bb:63:90:69:78:61:99:23:b7:bf:43:3b:
d3:46:0c:59:72:6a:8d:8e:64:70:4a:60:63:9f:65:
ef:32:0b:62:5d:0c:8b:16:f1:27:c9:63:17:ee:62:
b6:e3:de:ae:ff:65:41:22:ac:f1:0a:d7:ba:82:47:
99:57:0d:e0:7e:70:55:fc:fc:a4:38:12:a4:30:16:
63:b0:7e:91:05:55:ee:d8:2a:df:68:32:94:14:72:
9c:4b:a9:1c:a4:e6:0f:b6:42:25:41:48:d3:c1:47:
e2:65:a5:37:41:d7:3a:89:e5:58:ee:6d:22:2e:6c:
03:e8:32:e3:19:e1:7f:2d:e4:44:4b:4b:de:de:c9:
3e:64:fa:89:18:9d:62:58:52:d0:93:ab:1f:17:0a:
5c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:60:51:4B:99:9E:8F:CF:07:4E:DB:02:E0:9F:0D:D7:05:FA:6A:EB
X509v3 Authority Key Identifier:
keyid:54:7C:E4:83:C8:24:1D:7A:4E:66:25:97:77:98:03:5B:63:85:86:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHzkg8gkHXpOZiWXd5gDW2OFhsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2cbe39-4fac-45af-99fd-52ec61bc6c00/1/VHzkg8gkHXpOZiWXd5gDW2OFhsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2cbe39-4fac-45af-99fd-52ec61bc6c00/1/VHzkg8gkHXpOZiWXd5gDW2OFhsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e7:69:49:32:88:4c:f2:28:d6:ff:4a:f8:3f:eb:dc:2d:39:9a:
ee:5f:82:5e:11:10:af:bf:bb:7e:bd:8e:df:2b:5e:c5:e9:7a:
4a:e2:aa:dd:ef:8a:8a:5d:ca:4a:b3:5e:a8:fc:f8:84:25:d5:
99:6d:94:6f:ff:ea:fb:44:2c:9a:d2:38:d9:cc:33:69:e9:8f:
ac:d8:11:e4:72:8f:eb:d1:e0:e7:73:1c:91:34:2f:cc:f8:90:
a1:bd:71:cd:0d:c2:bf:59:79:59:c2:82:63:2b:8d:4c:38:e3:
bf:1f:d3:05:8d:d0:84:25:c8:5a:9c:84:6c:a8:36:bd:97:93:
ac:78:2b:70:35:98:08:ed:1c:b2:f7:fe:53:05:c2:8f:dd:67:
c4:33:9a:c0:cd:ac:88:0d:a2:45:87:eb:25:df:56:7c:a4:b7:
25:1c:8e:8d:68:81:da:51:d0:74:94:52:43:bb:38:a8:5d:62:
c9:20:d2:36:71:e4:22:78:1a:0b:d8:ed:76:95:04:f2:8d:f1:
64:90:0e:93:39:09:c1:53:9a:39:f5:d3:2e:19:97:4b:9b:85:
c8:35:05:6a:fb:6a:3d:bd:06:48:a2:fa:cf:64:7a:1a:0e:25:
20:1d:ff:45:28:21:74:3f:2b:33:7a:5a:b0:c1:c8:52:7b:87:
47:67:71:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 11:11:17 2025 by rpki-client