Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/VOZgtIyPBMmjLc3qHP7uUYBEa9k.mft
File: VOZgtIyPBMmjLc3qHP7uUYBEa9k.mft (raw, json)
Hash identifier: fFhXCbS/vSk7+AAv1G3yk6qDQUWezM64LV1y/R04D90=
Subject key identifier: 25:4F:4E:24:11:92:04:EA:B9:B7:81:CC:21:76:BC:3F:83:20:9B:18
Authority key identifier: 54:E6:60:B4:8C:8F:04:C9:A3:2D:CD:EA:1C:FE:EE:51:80:44:6B:D9
Certificate issuer: /CN=54e660b48c8f04c9a32dcdea1cfeee5180446bd9
Certificate serial: 019849D38661E56CF9EDF1AFFBE26484636A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VOZgtIyPBMmjLc3qHP7uUYBEa9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/VOZgtIyPBMmjLc3qHP7uUYBEa9k.mft
Manifest number: 1295
Signing time: Sun 27 Jul 2025 03:00:55 +0000
Manifest this update: Sun 27 Jul 2025 03:00:55 +0000
Manifest next update: Mon 28 Jul 2025 03:00:55 +0000
Files and hashes: 1: OUuP-6YCe14zgkfTQMdJLc2r9MQ.roa (hash: Aex7iaImK8VF1F7ddVhsOVcjsTFE1aBCNKfli39IJNE=)
2: VOZgtIyPBMmjLc3qHP7uUYBEa9k.crl (hash: lCgcM9npUGkqfLpeZM3WBJOOl3iifaS7OsfNJBGimuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/VOZgtIyPBMmjLc3qHP7uUYBEa9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/VOZgtIyPBMmjLc3qHP7uUYBEa9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/VOZgtIyPBMmjLc3qHP7uUYBEa9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:86:61:e5:6c:f9:ed:f1:af:fb:e2:64:84:63:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54e660b48c8f04c9a32dcdea1cfeee5180446bd9
Validity
Not Before: Jul 27 03:00:55 2025 GMT
Not After : Jul 28 03:00:55 2025 GMT
Subject: CN=254f4e24119204eab9b781cc2176bc3f83209b18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fe:6f:89:56:91:df:4e:89:10:c9:a9:a5:82:
a8:07:44:fa:cd:5c:db:9e:62:18:83:f5:d9:85:74:
94:1e:a9:5a:58:fc:ff:9d:e5:9e:af:f9:d0:07:cd:
6a:27:43:eb:6b:93:77:d9:fa:ff:a5:09:85:13:27:
0a:2a:f9:0b:e8:26:c8:de:69:62:16:0b:93:ae:68:
ea:8b:b9:a1:45:2c:46:95:34:39:b2:64:a4:2b:5e:
80:94:ec:d5:f8:7c:50:9d:18:ec:92:66:ca:75:28:
93:65:fd:8a:06:59:c2:51:1e:ac:ad:3c:7e:21:7a:
22:10:bc:cd:94:49:7c:ab:bb:3d:76:79:7a:bb:35:
5c:a5:c8:83:38:cd:f6:cc:0c:4a:c4:40:d5:cc:c8:
83:04:8a:3c:74:b2:dd:a6:09:04:b4:1b:f1:1f:fe:
f0:3d:f0:3c:20:33:73:b8:6b:e2:1e:f7:cc:62:9f:
f4:29:cc:2e:5a:10:cf:01:4f:8d:79:e2:cb:ed:f5:
88:93:74:78:34:07:61:d3:e5:c8:99:f5:a1:69:63:
b6:73:5b:41:9b:88:fc:40:15:40:e8:0a:ea:77:d8:
a9:74:3f:38:02:5f:d8:03:ab:b0:11:52:57:07:8e:
8b:c1:36:76:48:ad:83:99:51:83:06:ac:f9:6e:69:
58:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:4F:4E:24:11:92:04:EA:B9:B7:81:CC:21:76:BC:3F:83:20:9B:18
X509v3 Authority Key Identifier:
keyid:54:E6:60:B4:8C:8F:04:C9:A3:2D:CD:EA:1C:FE:EE:51:80:44:6B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VOZgtIyPBMmjLc3qHP7uUYBEa9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/VOZgtIyPBMmjLc3qHP7uUYBEa9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/VOZgtIyPBMmjLc3qHP7uUYBEa9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:b1:57:8f:f5:28:e4:3e:65:6f:d5:c2:91:ad:5f:7a:a7:a5:
d3:e3:48:8f:a1:2d:56:fd:bb:8b:e0:ad:6d:52:e5:e0:d5:50:
fb:c1:92:c3:ec:5b:2a:a4:2f:4e:2d:1b:27:42:dd:53:f8:67:
f0:ba:36:94:7a:1c:40:53:39:b8:90:4d:24:62:5a:e7:4b:79:
09:80:34:a7:78:0b:38:e7:16:fe:20:87:7c:b8:f4:c4:a1:72:
12:12:c2:c7:be:64:89:e8:bb:a1:c8:b2:a6:ce:4d:c7:26:e3:
e8:99:fd:14:f5:45:09:0d:8f:2b:f8:d3:fe:c8:90:eb:d6:ef:
07:31:10:48:16:e8:6a:01:8e:80:33:d1:81:38:7d:cf:ea:6d:
a2:e3:e6:1f:25:9d:df:3f:3c:ae:f4:96:1c:0b:4b:a5:79:c7:
74:52:22:c2:5e:00:5d:4c:04:27:2c:d7:0a:35:b4:be:49:26:
f2:c6:66:35:80:11:ef:86:09:f9:4c:5b:67:ec:69:34:25:63:
0b:04:b7:67:36:c8:fe:04:d7:50:2c:32:6f:c0:a0:48:bf:45:
05:5b:8f:0f:1c:b5:34:8b:60:8b:2f:64:29:14:06:b5:38:b5:
04:a6:f7:70:17:f3:16:9a:74:be:9f:22:ca:73:1f:92:26:5d:
71:f7:66:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:22:02 2025 by rpki-client