
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/VcQvLHehgijJ-pqzeYQmYNB5KQg.mft
File: VcQvLHehgijJ-pqzeYQmYNB5KQg.mft (raw, json)
Hash identifier: tzev18FPX9GsLxq/bVQqEg+00xsopdfzmMXgD4M5vPg=
Subject key identifier: 48:3A:B4:31:01:45:AE:AA:CF:57:98:E7:26:5F:1E:B5:0B:14:F0:46
Authority key identifier: 55:C4:2F:2C:77:A1:82:28:C9:FA:9A:B3:79:84:26:60:D0:79:29:08
Certificate issuer: /CN=55c42f2c77a18228c9fa9ab379842660d0792908
Certificate serial: 019849D34BEC90F55B4668B6864784FFD385
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VcQvLHehgijJ-pqzeYQmYNB5KQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/VcQvLHehgijJ-pqzeYQmYNB5KQg.mft
Manifest number: 05C7
Signing time: Sun 27 Jul 2025 03:00:40 +0000
Manifest this update: Sun 27 Jul 2025 03:00:40 +0000
Manifest next update: Mon 28 Jul 2025 03:00:40 +0000
Files and hashes: 1: En2fZob7-Xp8zkiLryaS1TtBdYw.roa (hash: zk5DD5xhiB++oRKxPmJdvhY2qq8VEHhmVtAgMqGgPO4=)
2: VcQvLHehgijJ-pqzeYQmYNB5KQg.crl (hash: Ur3aZ3XsGg9H0hK2zKrRGODH12JE9UHD37XCYPdoi50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/VcQvLHehgijJ-pqzeYQmYNB5KQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/VcQvLHehgijJ-pqzeYQmYNB5KQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/VcQvLHehgijJ-pqzeYQmYNB5KQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:4b:ec:90:f5:5b:46:68:b6:86:47:84:ff:d3:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55c42f2c77a18228c9fa9ab379842660d0792908
Validity
Not Before: Jul 27 03:00:40 2025 GMT
Not After : Jul 28 03:00:40 2025 GMT
Subject: CN=483ab4310145aeaacf5798e7265f1eb50b14f046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c1:e0:43:aa:f2:54:1f:9a:12:bf:7d:9d:3e:
e3:35:fc:56:3b:90:b1:a3:60:89:23:c5:fd:28:24:
00:6e:10:bc:8c:d4:7b:71:b1:3c:58:50:2c:92:a2:
29:15:ad:ff:d5:d4:11:b8:bb:45:ec:87:e5:0c:4a:
fd:b0:49:c7:26:55:d5:cf:3c:ee:d1:7f:65:60:46:
10:2f:31:9c:0a:01:49:93:0b:7f:a3:eb:e9:a2:ad:
e8:12:fc:80:86:1a:a6:7d:1b:ef:e4:ac:a8:f0:11:
1e:f8:ca:b3:79:98:67:8f:97:1c:11:33:b4:af:61:
df:94:ef:ff:57:c2:4a:94:c9:bf:e8:74:51:b8:88:
ab:6c:ff:7c:8e:81:8c:50:bc:cf:07:b5:76:ec:b9:
5b:f4:b2:eb:05:e4:e8:46:17:b5:b9:5b:01:8d:4d:
fa:d5:c4:33:52:da:ce:bd:6e:c3:95:23:fd:d2:2c:
fb:b8:05:66:46:15:28:e9:e3:40:fa:87:9c:b1:fd:
69:bf:b1:f7:c2:44:dc:3b:a5:18:0d:13:25:1b:29:
7f:c3:ff:14:09:23:9a:bf:ba:04:4e:f2:d9:05:ba:
ca:56:d1:d1:f6:df:a5:3c:b0:b6:42:b2:b6:81:ff:
cd:2f:b4:0f:2c:08:bc:f8:cf:fe:45:f3:dd:d0:5b:
3a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:3A:B4:31:01:45:AE:AA:CF:57:98:E7:26:5F:1E:B5:0B:14:F0:46
X509v3 Authority Key Identifier:
keyid:55:C4:2F:2C:77:A1:82:28:C9:FA:9A:B3:79:84:26:60:D0:79:29:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VcQvLHehgijJ-pqzeYQmYNB5KQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/VcQvLHehgijJ-pqzeYQmYNB5KQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/VcQvLHehgijJ-pqzeYQmYNB5KQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:a4:08:10:4d:20:4b:d9:21:4e:09:4d:27:20:1d:a7:dd:68:
77:b1:a2:fe:a6:20:3d:c8:21:29:67:37:81:2a:a2:e4:df:b9:
52:65:67:4a:f6:53:e0:b5:24:bd:87:c0:ed:26:d0:63:11:2d:
c9:2f:5e:9d:40:5d:95:95:ac:d0:8f:9d:3c:af:1c:19:5e:97:
88:58:a9:02:77:1d:6e:58:46:06:f6:ee:37:2f:ac:55:23:45:
08:8a:a8:26:3f:62:62:32:a0:b6:1c:2c:ea:91:52:81:05:c8:
7c:0d:e9:a0:5f:83:21:ad:a3:f1:f1:26:7c:57:8f:80:3d:09:
77:74:a1:ed:61:bf:47:75:80:7f:52:99:b5:d6:27:43:58:b6:
df:e2:39:fd:f6:75:eb:de:57:82:41:59:bf:c5:75:05:9a:18:
67:94:19:8e:70:cb:b1:29:5c:99:04:52:d3:de:e4:40:e4:2a:
e9:03:56:49:7e:e0:65:2f:7f:a4:b0:87:34:25:81:97:c9:fe:
eb:bd:73:40:d2:85:63:d1:c0:fc:50:4e:ad:52:62:ad:34:9c:
66:da:a7:e4:58:90:c8:58:1a:f2:49:29:e1:43:4b:a7:85:d1:
50:01:79:a8:e8:79:23:9c:43:a1:a6:a2:48:38:57:d4:1c:09:
31:d8:6d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:51:52 2025 by rpki-client