Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft
File: VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft (raw, json)
Hash identifier: hDc8HPacdfyXoeAaYRvyqAobkSTJdcIyGPhBBAZbP5A=
Subject key identifier: 97:4F:BB:B4:2E:48:5D:28:A1:44:8D:9C:E5:33:62:37:BF:6E:28:23
Authority key identifier: 56:D0:E3:B2:8F:2B:E3:3E:C5:A9:D2:CA:00:AC:64:15:55:36:CB:C6
Certificate issuer: /CN=56d0e3b28f2be33ec5a9d2ca00ac64155536cbc6
Certificate serial: 01984965BD3813BE2F5651F38B8681F7A115
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft
Manifest number: 0D0A
Signing time: Sun 27 Jul 2025 01:01:00 +0000
Manifest this update: Sun 27 Jul 2025 01:01:00 +0000
Manifest next update: Mon 28 Jul 2025 01:01:00 +0000
Files and hashes: 1: 1evcMDo7pi-aA6SWjQJ5C1thyaU.roa (hash: xYDgN0KV8Q5QXfbFX/hw20fHK9cnWhX/isL2BXocmSw=)
2: BFOQ1xipYhPtnW3G70pfAnmzwzg.roa (hash: /+UHFdHIIgWbmriMU+n5ynXyWKvmniC4nJpXONs4/qY=)
3: ISS1nVoFj6vql40oL7xs039XkbE.roa (hash: Uj1JIR2yGWgQKTO1hh05hzaRctOY0c3hfi9SPLtZHjc=)
4: VtDjso8r4z7FqdLKAKxkFVU2y8Y.crl (hash: VWFxg0tQ5xew3nvG8j0gyMpU5pwZgphx+nFBOcJ+rWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:bd:38:13:be:2f:56:51:f3:8b:86:81:f7:a1:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56d0e3b28f2be33ec5a9d2ca00ac64155536cbc6
Validity
Not Before: Jul 27 01:01:00 2025 GMT
Not After : Jul 28 01:01:00 2025 GMT
Subject: CN=974fbbb42e485d28a1448d9ce5336237bf6e2823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b4:3a:34:0d:91:08:46:67:c2:c8:05:df:16:
81:39:94:e0:cc:03:c2:b2:c4:54:c1:fa:e6:82:76:
5c:10:24:8c:02:9e:b1:a0:60:f0:ac:68:94:32:1d:
1d:f4:fc:51:41:4d:61:e0:6d:74:6c:b1:b5:53:ce:
40:f1:ac:e1:cd:6d:70:db:10:cc:3f:5e:c0:3a:4f:
43:b9:84:7d:1c:8d:c5:54:fd:c2:42:82:e9:e6:4d:
66:b8:4d:4e:9e:e4:ef:70:7b:76:83:0a:b6:c1:74:
3a:98:a9:a1:85:99:9d:da:5d:b1:97:70:cc:15:96:
b2:b8:60:de:42:63:83:26:0b:14:af:33:4c:66:c8:
3e:b2:0c:85:8a:bc:8a:e3:74:c7:c2:05:83:14:da:
1b:9d:4a:e4:6d:82:0c:d7:a6:e9:05:17:e3:8b:d8:
86:10:76:97:ae:5a:90:f7:7e:fd:74:f6:23:1f:e4:
d4:2d:60:b0:98:cf:c6:66:c8:0d:7d:17:d9:d3:09:
48:39:83:8e:b3:d3:0a:8f:f7:27:c2:0b:c1:fa:80:
54:d9:3c:c1:3c:67:a2:fc:45:90:a1:c7:e0:a1:20:
7f:d4:1d:fc:c4:cf:7c:0a:5c:56:46:fd:0d:8e:e4:
31:7c:0e:11:9e:19:2e:af:65:d5:fa:e1:fc:aa:19:
d1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:4F:BB:B4:2E:48:5D:28:A1:44:8D:9C:E5:33:62:37:BF:6E:28:23
X509v3 Authority Key Identifier:
keyid:56:D0:E3:B2:8F:2B:E3:3E:C5:A9:D2:CA:00:AC:64:15:55:36:CB:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:10:76:bc:f0:5f:64:35:b5:14:0c:41:b7:e5:0f:8a:e6:bd:
d3:37:47:78:f7:a3:89:85:6e:19:17:29:8e:b8:4c:15:12:79:
53:1c:23:41:1c:ad:e1:23:a1:d4:23:25:59:01:ed:e1:07:5f:
7c:2f:7c:99:84:0f:52:72:ff:4e:7f:5a:47:5f:a8:13:ca:2a:
64:a2:06:36:f4:93:ea:60:0d:fb:21:02:40:10:25:bc:e7:03:
d7:09:15:45:4e:05:0b:16:af:9b:2d:1a:7d:24:4b:84:51:a0:
5b:74:67:ab:8f:e1:10:69:f0:91:a3:0d:67:99:44:9e:68:c0:
4d:e0:c1:a0:75:0b:3d:69:0a:37:58:6c:39:5d:74:0c:81:4c:
9e:83:3d:7e:07:78:29:d3:20:14:47:c3:bf:08:79:c2:08:b3:
48:7e:ec:ba:9c:80:41:b8:ae:b3:27:65:2b:30:e5:c2:ab:d6:
c9:75:68:08:6a:06:30:19:1b:c1:f3:7c:81:ba:29:53:2d:7b:
dc:14:4d:64:94:76:73:e1:70:67:41:7d:ef:a7:13:72:1b:fc:
22:da:2b:1b:c2:c0:76:6a:02:ee:3d:ca:81:f2:b2:22:60:eb:
4b:44:f7:5c:69:95:36:e6:14:10:80:95:5f:0c:ae:5f:5a:92:
e2:07:5a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:33:43 2025 by rpki-client