Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/VuAvc1Cb3jXZXRhRgD4fAIKetxg.mft
File: VuAvc1Cb3jXZXRhRgD4fAIKetxg.mft (raw, json)
Hash identifier: rmd6fZ+Z5hBoRl/GiAQlYVHT6G+hTdhOa9eB04MuAKc=
Subject key identifier: 04:29:BF:4A:32:AD:E9:ED:EF:A2:7F:2B:7D:0E:B4:09:28:CB:34:76
Authority key identifier: 56:E0:2F:73:50:9B:DE:35:D9:5D:18:51:80:3E:1F:00:82:9E:B7:18
Certificate issuer: /CN=56e02f73509bde35d95d1851803e1f00829eb718
Certificate serial: 0198402AD8FFB7973E622EAE132EC34C84AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VuAvc1Cb3jXZXRhRgD4fAIKetxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/VuAvc1Cb3jXZXRhRgD4fAIKetxg.mft
Manifest number: 05DA
Signing time: Fri 25 Jul 2025 06:00:06 +0000
Manifest this update: Fri 25 Jul 2025 06:00:06 +0000
Manifest next update: Sat 26 Jul 2025 06:00:06 +0000
Files and hashes: 1: Kk17QDRaVm55Nj1Ql5GZNxMxg-E.roa (hash: 1DI9vhSZXA/YJqAVaaagZypXr5kFSqz0lKWRcfLOEfQ=)
2: VuAvc1Cb3jXZXRhRgD4fAIKetxg.crl (hash: VDrSwdw0qhbKgS16F9Q4tOG0D0GjlsjzQRg+gonefLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/VuAvc1Cb3jXZXRhRgD4fAIKetxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/VuAvc1Cb3jXZXRhRgD4fAIKetxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/VuAvc1Cb3jXZXRhRgD4fAIKetxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 06:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:40:2a:d8:ff:b7:97:3e:62:2e:ae:13:2e:c3:4c:84:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56e02f73509bde35d95d1851803e1f00829eb718
Validity
Not Before: Jul 25 06:00:06 2025 GMT
Not After : Jul 26 06:00:06 2025 GMT
Subject: CN=0429bf4a32ade9edefa27f2b7d0eb40928cb3476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2f:e0:23:55:26:31:00:8e:4d:7c:87:ae:c7:
5e:93:7e:df:81:4c:18:95:c8:21:94:c3:af:0d:9a:
db:3f:46:4e:19:38:94:7b:5b:74:6b:51:a6:1e:69:
c1:d1:38:f6:d9:59:bb:e7:ac:4d:9d:a3:1f:e5:9f:
47:42:e0:6c:44:d4:e1:db:38:72:6b:db:23:b2:0b:
b9:64:5d:d5:26:68:df:dd:86:66:46:a0:c6:77:be:
20:f7:49:4b:f8:12:53:57:11:6e:f9:14:7b:92:d1:
d2:19:95:d1:a3:02:ea:a3:bb:a8:37:78:82:82:2c:
0d:41:18:57:92:b8:6a:9c:3d:c9:71:e8:1c:39:b9:
8e:10:2c:5f:e9:5e:0b:9d:5c:d0:93:bf:70:b3:2c:
d0:e4:23:35:72:44:dc:46:a3:99:19:9f:ef:5f:95:
c7:df:e6:03:49:93:7c:f5:71:05:85:40:22:54:21:
ea:ea:5d:6f:34:cc:35:60:57:c6:1d:90:5b:bd:fc:
5e:bc:bd:ce:7e:2e:ff:fa:8e:55:79:86:a1:aa:1d:
ff:61:0c:33:b4:d3:cc:d3:80:06:61:34:49:f0:da:
ca:0e:bd:60:f8:5f:d3:47:90:32:24:1f:21:60:7a:
07:74:ef:1a:5c:86:ca:28:37:84:35:36:f9:dd:92:
48:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:29:BF:4A:32:AD:E9:ED:EF:A2:7F:2B:7D:0E:B4:09:28:CB:34:76
X509v3 Authority Key Identifier:
keyid:56:E0:2F:73:50:9B:DE:35:D9:5D:18:51:80:3E:1F:00:82:9E:B7:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VuAvc1Cb3jXZXRhRgD4fAIKetxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/VuAvc1Cb3jXZXRhRgD4fAIKetxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/VuAvc1Cb3jXZXRhRgD4fAIKetxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:c9:4d:8b:be:0f:c5:ba:fc:89:11:6d:cc:1e:75:70:c4:3d:
ec:32:cd:bc:ad:b7:4a:3c:94:2e:d0:31:55:8c:f5:fe:e6:c4:
1a:cf:38:3a:03:46:63:4f:9f:2c:5b:6a:4f:f4:41:12:a4:e7:
08:3f:34:12:59:d0:e7:64:8a:da:99:87:99:f9:fc:3b:c5:16:
19:ca:1f:1f:5d:2a:b6:0a:1a:5e:56:7a:20:df:92:55:bb:ea:
4d:7d:2a:5a:d3:70:6a:90:4d:d5:e7:bb:f8:1f:db:da:e0:81:
8e:67:ad:6f:71:2d:5e:a2:0b:99:51:c9:bb:22:4e:c7:1d:6d:
fc:d8:50:1d:cb:9f:ec:fa:cb:8b:2b:d7:da:a6:98:0b:4f:86:
7b:58:e5:4d:ea:05:97:81:97:e7:6b:ec:fc:89:bf:a6:e9:ad:
12:c9:d5:d0:3e:b5:04:ab:d5:20:3d:f6:e6:84:91:9a:61:32:
9c:1d:cc:8a:6b:38:f5:52:b2:d9:a9:67:f9:03:5a:3b:35:c2:
42:11:e1:a6:04:34:4e:5d:9a:46:7b:cf:2b:88:8d:92:9e:dd:
84:6a:f1:07:b5:e6:36:d8:04:68:6c:85:99:26:7f:c8:4f:5c:
b1:d5:24:44:10:4e:40:d6:9f:75:c6:20:df:94:f5:dc:ea:8a:
ce:bd:6a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 15:24:33 2025 by rpki-client