Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/da9489-6b8f-47b0-a69d-b69e44349395/1/VyWt0r_z5miuGFVL7r8xojpp3aU.mft
File: VyWt0r_z5miuGFVL7r8xojpp3aU.mft (raw, json)
Hash identifier: byMLyvpPTdN5FPSw+AtQD8ARqssKibBLPeO8rgEzQU4=
Subject key identifier: BA:DB:3E:00:34:D9:0F:A1:C0:AC:94:3E:FD:0E:60:C2:60:A4:18:C8
Authority key identifier: 57:25:AD:D2:BF:F3:E6:68:AE:18:55:4B:EE:BF:31:A2:3A:69:DD:A5
Certificate issuer: /CN=5725add2bff3e668ae18554beebf31a23a69dda5
Certificate serial: 019855A05AAD7A422028D071AC5823155439
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VyWt0r_z5miuGFVL7r8xojpp3aU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/da9489-6b8f-47b0-a69d-b69e44349395/1/VyWt0r_z5miuGFVL7r8xojpp3aU.mft
Manifest number: 1609
Signing time: Tue 29 Jul 2025 10:00:28 +0000
Manifest this update: Tue 29 Jul 2025 10:00:28 +0000
Manifest next update: Wed 30 Jul 2025 10:00:28 +0000
Files and hashes: 1: VyWt0r_z5miuGFVL7r8xojpp3aU.crl (hash: kr2i29DMjQR/lvyzU/4WgTlk+orY1yjkECJ+YxdiG7c=)
2: t0Kv0MY22kEd7yEkvuzKVP6NwDY.roa (hash: c5cNtbv2n0bwtPtYnHvGMxhfp9rjmRcTS2FRbov2ZW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/da9489-6b8f-47b0-a69d-b69e44349395/1/VyWt0r_z5miuGFVL7r8xojpp3aU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/da9489-6b8f-47b0-a69d-b69e44349395/1/VyWt0r_z5miuGFVL7r8xojpp3aU.mft
rsync://rpki.ripe.net/repository/DEFAULT/VyWt0r_z5miuGFVL7r8xojpp3aU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:a0:5a:ad:7a:42:20:28:d0:71:ac:58:23:15:54:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5725add2bff3e668ae18554beebf31a23a69dda5
Validity
Not Before: Jul 29 10:00:28 2025 GMT
Not After : Jul 30 10:00:28 2025 GMT
Subject: CN=badb3e0034d90fa1c0ac943efd0e60c260a418c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:49:c1:f8:f5:96:28:c5:90:ef:92:3d:96:db:
ef:be:ea:11:a5:9c:15:3a:fa:5e:ee:a8:53:4b:22:
c1:8b:c2:61:80:9a:4c:51:20:f8:8d:1d:bb:69:d7:
79:77:43:16:1a:a4:5f:ae:6d:bf:44:b7:2a:88:ef:
f7:54:99:34:84:c2:41:0d:a9:69:f9:00:ff:e4:1e:
4a:23:bb:cd:cd:32:9c:4b:5d:f5:0a:e5:a9:d5:d5:
50:3f:11:20:99:d9:28:d1:68:86:81:e6:2a:e5:2e:
27:75:49:ae:85:f8:ad:28:55:5a:2c:ac:71:69:9c:
6d:82:6e:ba:0d:28:1d:fa:9a:87:d0:7e:01:64:64:
8b:21:b0:d4:78:5a:73:60:e1:b0:1f:1a:d7:41:ff:
ed:37:cb:a2:d8:42:f9:94:4a:b8:b6:6f:80:34:a9:
5b:b2:4c:10:68:fa:8b:e9:99:21:ea:71:8d:3f:4a:
35:bc:1d:3c:a9:6e:86:96:0e:5d:3b:4c:74:55:6e:
dc:9b:29:85:05:bd:f6:cc:17:66:af:db:2b:5a:fd:
1b:03:b0:30:74:0a:eb:f0:15:3b:6c:6e:24:95:5f:
ed:95:17:fe:0e:f7:97:23:c9:ad:93:86:f1:cb:fb:
c6:e4:dc:8a:f0:66:fe:7a:df:51:a8:97:48:7b:1f:
c3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:DB:3E:00:34:D9:0F:A1:C0:AC:94:3E:FD:0E:60:C2:60:A4:18:C8
X509v3 Authority Key Identifier:
keyid:57:25:AD:D2:BF:F3:E6:68:AE:18:55:4B:EE:BF:31:A2:3A:69:DD:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VyWt0r_z5miuGFVL7r8xojpp3aU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/da9489-6b8f-47b0-a69d-b69e44349395/1/VyWt0r_z5miuGFVL7r8xojpp3aU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/da9489-6b8f-47b0-a69d-b69e44349395/1/VyWt0r_z5miuGFVL7r8xojpp3aU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:6b:40:e2:54:2b:bc:c4:12:29:22:9b:49:ed:00:11:c0:c3:
10:72:42:0d:0e:0e:28:01:e2:2a:1a:84:81:8b:84:37:22:2a:
14:dc:d0:e0:8d:7a:fe:91:6c:cf:1c:7e:35:6f:82:22:e7:9d:
2d:17:18:27:76:3c:a0:ac:b9:f2:3d:a1:e3:d7:8d:fd:28:71:
63:e6:2f:a5:69:77:60:ca:ba:93:5e:04:e1:b3:f0:f6:29:49:
5d:36:2a:4e:2c:f1:ef:3a:83:ab:0d:a6:8c:fe:95:73:e4:99:
05:4c:41:e2:14:19:a5:47:cd:6b:b0:5a:bb:5f:de:bf:d2:f9:
11:46:58:a6:d7:fd:80:85:3c:ac:28:c7:d2:0f:0c:6b:87:6e:
70:d1:a3:ec:bc:e5:b9:dc:ee:47:46:8e:29:fe:b9:d2:0c:a3:
b6:11:bc:b4:55:b4:08:2c:38:29:26:1f:e7:e9:08:b4:eb:5c:
1a:7a:75:78:c5:81:11:fe:0c:dd:36:8b:aa:ac:c0:50:b2:9b:
09:5f:f5:26:af:43:d9:48:20:99:d9:19:db:c7:33:f3:69:ad:
ae:0d:89:30:55:8d:a4:65:f3:9b:5a:93:b7:3d:a2:9d:fd:65:
05:be:f5:b5:2b:35:9f:20:bb:ee:a6:c1:dd:f9:37:c0:1e:d7:
e0:67:0d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 14:39:01 2025 by rpki-client