Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft
File: VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft (raw, json)
Hash identifier: KonYLJ4jQKIa3vCbveKyj57ZZpajf4ZDR+2IYn6FfAk=
Subject key identifier: 5E:0B:76:CF:77:A7:96:85:02:BD:E7:6A:E3:D3:E8:84:6C:0E:1B:EE
Authority key identifier: 54:3E:20:BF:5F:25:2B:1B:DB:D2:1D:C9:9D:94:CD:97:EA:7F:0F:E6
Certificate issuer: /CN=543e20bf5f252b1bdbd21dc99d94cd97ea7f0fe6
Certificate serial: 0198541FD447A78CBBBB1096F89082B8E945
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft
Manifest number: 10E4
Signing time: Tue 29 Jul 2025 03:00:28 +0000
Manifest this update: Tue 29 Jul 2025 03:00:28 +0000
Manifest next update: Wed 30 Jul 2025 03:00:28 +0000
Files and hashes: 1: 8ywt7YsrRBMREchgHLgyKhwPgx4.roa (hash: aCuMcxrQC+7OXrTGuhaVav/hwtQSKlgeWzdcYZWQMpw=)
2: VD4gv18lKxvb0h3JnZTNl-p_D-Y.crl (hash: EsR4fyZd6WQ91XxVzqyX3kPcnwhOxhS+beYptv2XUVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:1f:d4:47:a7:8c:bb:bb:10:96:f8:90:82:b8:e9:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543e20bf5f252b1bdbd21dc99d94cd97ea7f0fe6
Validity
Not Before: Jul 29 03:00:28 2025 GMT
Not After : Jul 30 03:00:28 2025 GMT
Subject: CN=5e0b76cf77a7968502bde76ae3d3e8846c0e1bee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2c:1f:36:cf:d0:35:16:d6:c8:1f:e3:3f:06:
e9:80:46:32:04:64:48:19:86:08:49:6a:6b:24:39:
33:12:cd:6c:3f:59:f8:55:ed:a9:6c:a8:9b:b5:07:
cb:98:9d:bc:24:af:02:22:54:e9:52:be:76:c7:f2:
d7:cf:e5:cf:ac:77:06:78:2a:0c:05:a4:e7:ec:e5:
e6:eb:45:52:1c:c6:ac:f2:bd:0f:d1:61:70:59:fb:
df:8b:cb:81:a7:f5:71:61:79:fd:78:12:70:4c:a8:
2c:a0:f3:1e:6d:c0:1e:76:df:ee:a2:c0:36:78:65:
e0:be:f8:f4:e2:3a:ef:17:e6:db:6b:a1:2e:60:b1:
8e:e3:ea:6f:ae:4e:1f:19:88:d1:97:44:f7:38:03:
d1:38:2a:61:51:c3:50:24:e3:7c:ef:b4:53:1a:bd:
ba:b9:14:db:4e:a3:25:2b:fa:95:2d:c3:cc:6c:16:
80:7d:e4:e2:07:10:2e:97:00:24:b9:5d:6f:11:26:
e3:e4:09:6a:74:b1:a4:81:3a:6d:23:55:6f:20:d4:
52:02:b2:c9:92:da:b6:0f:45:93:ae:ad:d3:8e:d5:
b3:d8:10:11:c6:9c:87:d1:10:1b:e4:b5:e6:63:47:
9d:b1:ba:19:3a:b4:ed:2f:53:7e:a2:00:8e:e4:36:
f8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:0B:76:CF:77:A7:96:85:02:BD:E7:6A:E3:D3:E8:84:6C:0E:1B:EE
X509v3 Authority Key Identifier:
keyid:54:3E:20:BF:5F:25:2B:1B:DB:D2:1D:C9:9D:94:CD:97:EA:7F:0F:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:62:b3:a2:00:b4:df:43:3a:ce:e8:f3:12:51:df:58:b9:66:
1f:6d:14:06:70:09:d8:15:eb:ed:5e:fc:11:d7:23:ba:4b:78:
b4:e1:f9:06:d0:d1:45:ef:ef:9d:4f:23:c7:7d:bf:15:97:a3:
e7:17:dc:78:00:3d:41:b0:af:63:83:5f:9a:a0:0f:2d:36:85:
f0:d7:1a:91:72:9a:f5:36:7c:f7:61:ad:3d:c9:c7:5d:c1:5b:
fe:05:fe:6e:79:df:d2:42:e9:ab:39:6f:e8:5f:ae:2e:de:35:
66:91:86:81:2a:30:8c:1d:c2:b6:81:0b:6d:45:be:d3:f0:3c:
82:1a:52:ac:7b:f5:0b:ff:98:a9:b7:89:a0:8a:62:d2:c9:cf:
77:cd:bd:3e:8d:7d:0d:e2:64:04:b2:92:6c:0d:6e:e9:e0:bc:
12:bb:ab:89:34:5b:8d:d5:8b:83:e4:d9:a6:08:64:e1:31:56:
be:e3:c7:9c:42:47:41:fe:6a:7d:78:ba:20:ba:95:d5:e9:78:
6a:db:76:3d:ed:bb:3b:42:30:be:14:ad:fe:82:15:6c:7b:ed:
e5:96:e6:f7:47:9a:09:5c:39:3d:8c:22:e0:f7:67:7f:3c:22:
f6:a3:39:67:e9:30:14:56:ad:8d:db:04:c0:16:00:81:72:d8:
68:b4:43:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:43:21 2025 by rpki-client