Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.mft
File: vvZlBYLADbslkc7cKYwM08WWirA.mft (raw, json)
Hash identifier: CteCO3AIDtDon8uuY/xpu4B0qHfu758mMhE98h3Ou6U=
Subject key identifier: 4E:87:D0:97:90:2E:BA:76:A2:0B:A6:1E:AC:04:86:AA:B1:05:37:60
Authority key identifier: BE:F6:65:05:82:C0:0D:BB:25:91:CE:DC:29:8C:0C:D3:C5:96:8A:B0
Certificate issuer: /CN=bef6650582c00dbb2591cedc298c0cd3c5968ab0
Certificate serial: 0198499C3A8EB267CC963913A7358DCB6CDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vvZlBYLADbslkc7cKYwM08WWirA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.mft
Manifest number: 14D4
Signing time: Sun 27 Jul 2025 02:00:31 +0000
Manifest this update: Sun 27 Jul 2025 02:00:31 +0000
Manifest next update: Mon 28 Jul 2025 02:00:31 +0000
Files and hashes: 1: VJcY17IQh2BSqR-lhhdapfFR2Jg.roa (hash: 42V4cyYK1j/bnIgnYxXURiJulSqpvLBcVAwt2BGPORo=)
2: vvZlBYLADbslkc7cKYwM08WWirA.crl (hash: mmoSOCHyaUxktdG/DL1KLt3cecjPmIAP2ZxhqfNf1Ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vvZlBYLADbslkc7cKYwM08WWirA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:3a:8e:b2:67:cc:96:39:13:a7:35:8d:cb:6c:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bef6650582c00dbb2591cedc298c0cd3c5968ab0
Validity
Not Before: Jul 27 02:00:31 2025 GMT
Not After : Jul 28 02:00:31 2025 GMT
Subject: CN=4e87d097902eba76a20ba61eac0486aab1053760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:95:47:de:0b:5c:ea:08:ab:7b:2a:e7:28:7d:
d8:e7:85:6c:c7:bd:69:fa:cf:71:da:17:41:5b:47:
a7:5c:62:f4:f2:5a:c2:30:27:53:a5:30:93:84:0c:
8f:bc:b6:ff:b1:b0:40:73:e0:af:11:90:c0:0c:6f:
95:ab:e7:17:01:be:fd:7f:60:62:b2:eb:0d:a7:2d:
cd:b2:3e:5c:7f:6f:42:84:22:91:52:70:f6:58:28:
5d:15:ca:ae:46:5d:b8:27:4d:fe:cc:cf:b2:55:9f:
f8:4a:0f:2b:83:91:0c:94:9e:f3:14:8d:12:ef:ae:
91:52:77:f2:6c:d1:fa:9e:bf:fb:b6:62:f4:1f:42:
d3:73:1c:21:d1:9e:c9:81:77:96:29:da:e1:93:b5:
de:1d:41:d0:3b:d6:15:96:24:b7:18:6d:33:73:05:
9e:02:1a:ba:a3:61:e3:df:55:07:04:ca:32:6f:a1:
e4:38:dc:f7:79:d4:db:7f:48:a9:63:39:7d:be:c0:
35:36:3a:3f:2b:fd:1d:0e:6c:9a:d8:0a:85:a9:1f:
0a:c4:98:0f:c0:df:29:3a:ed:5b:a8:bf:69:e5:56:
01:f8:21:4b:c2:2f:1e:6d:88:1f:0a:80:6d:1a:f0:
cd:25:e5:7a:83:64:a5:bc:29:fb:31:aa:72:3b:97:
53:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:87:D0:97:90:2E:BA:76:A2:0B:A6:1E:AC:04:86:AA:B1:05:37:60
X509v3 Authority Key Identifier:
keyid:BE:F6:65:05:82:C0:0D:BB:25:91:CE:DC:29:8C:0C:D3:C5:96:8A:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vvZlBYLADbslkc7cKYwM08WWirA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:53:3f:b7:0b:c4:63:af:c0:34:45:9d:3f:d4:ab:e9:87:ba:
b0:f2:e6:5c:d1:ab:36:b8:4f:db:f0:74:d0:8b:96:a2:f4:ac:
08:fb:67:cc:ed:d4:18:35:54:e9:ac:b6:61:54:08:73:28:37:
8f:dd:c8:50:dd:03:16:aa:42:90:76:81:cb:a0:6c:3f:8c:5c:
5b:90:5f:6f:21:7a:12:92:0e:e5:6e:d9:ad:7a:48:2d:ec:99:
0f:b5:41:f4:51:2c:bd:3c:f9:ee:07:db:91:ef:af:2f:de:ef:
ee:69:ad:ae:2f:06:d6:87:e6:56:a2:f8:ff:a6:1e:b4:f5:32:
aa:31:d2:10:29:91:12:9b:fd:ec:d2:1e:74:ee:f9:6b:12:1c:
44:ec:68:51:45:58:e0:e9:b5:dd:bb:4e:52:90:16:96:49:41:
10:ab:3c:e3:79:a0:31:db:59:ec:9e:b6:d5:61:bd:21:d7:56:
5a:64:89:d1:95:57:14:f9:87:47:b5:a9:3d:55:01:65:1f:88:
a1:b9:b1:a0:36:2b:ee:2a:71:91:0a:44:50:04:8c:b6:e9:b1:
c4:dc:30:af:57:b5:51:9c:a3:ba:13:8d:14:7d:6f:d3:8c:64:
8b:58:17:b5:cd:1c:2a:8f:c3:27:e7:00:f9:05:ac:78:04:ab:
50:73:a7:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:41:07 2025 by rpki-client