Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft
File: VDxcNKYv--2PwPDsAbQsDFDufvc.mft (raw, json)
Hash identifier: LY4m85DtwP+7so6S2+AxEXAVAjjtljSLGoz17TDKJv8=
Subject key identifier: 8E:4D:C9:52:E5:E0:47:54:E7:08:86:59:4C:AC:52:13:0A:DB:B4:58
Authority key identifier: 54:3C:5C:34:A6:2F:FB:ED:8F:C0:F0:EC:01:B4:2C:0C:50:EE:7E:F7
Certificate issuer: /CN=543c5c34a62ffbed8fc0f0ec01b42c0c50ee7ef7
Certificate serial: 01983803B9AF933D5746C8F1CD418F4E645F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft
Manifest number: 0811
Signing time: Wed 23 Jul 2025 16:00:24 +0000
Manifest this update: Wed 23 Jul 2025 16:00:24 +0000
Manifest next update: Thu 24 Jul 2025 16:00:24 +0000
Files and hashes: 1: 3OLIMizXOJwfjWRWiEBjpUKJwIU.roa (hash: QMFZT0i3XGS+MsKzCsZOmKPi7vfVCyuG5tTyqhdATNA=)
2: PVF7wnGzCTMj-DMi0Yh7tJoQV50.roa (hash: ifNzodbn64RIKDxyUKgvxQYTPT/TGzAFj9xlomWoMYM=)
3: VDxcNKYv--2PwPDsAbQsDFDufvc.crl (hash: FC03VhsRT71prKfWfW2ML8No3EX6ubG2BPpq2YIz1Lc=)
4: aP1xgGw8H7jCOI-VSZ01nj8-4CM.roa (hash: tc+u6WTs4frUnC9+3IttTv0/u7Rmmf/DRJCt109dDEg=)
5: egWiNnqY9Vl0Wup08EirG2JX11M.roa (hash: cdwWkaZBw0jnB5ddN/k9GlCFftOqTidrPnaELenZvX8=)
6: lSBrUQBEKuTSY6AdNT1ZVvcTRx8.roa (hash: G+WOXA6z8Ino3VGaelG9h3UW5mZBPuWh+ANhGCA7MB0=)
7: syJuYuSvaXOf4fdQODYBxl8Wvrk.roa (hash: OKn0SoHFQEbRlHhzEP06V2aRFhSoJE4DUwo1/nq5tgc=)
8: tRNUe3Kk3eWia8VX_dKXZILdgjE.roa (hash: JStwVDR6ukqM/F9+GpHeAO0i8HlEBKkQBbaoGUyV6eY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:38:03:b9:af:93:3d:57:46:c8:f1:cd:41:8f:4e:64:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543c5c34a62ffbed8fc0f0ec01b42c0c50ee7ef7
Validity
Not Before: Jul 23 16:00:24 2025 GMT
Not After : Jul 24 16:00:24 2025 GMT
Subject: CN=8e4dc952e5e04754e70886594cac52130adbb458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:81:c8:5b:29:e7:84:74:8f:73:ef:b4:cf:3f:
42:f8:80:3f:2d:dd:ab:bf:c0:a6:7e:a1:d5:4f:c2:
8f:d8:e8:1f:13:a1:45:c7:d9:8e:a4:cc:87:62:27:
8e:22:ff:30:3e:82:c3:88:d1:9a:d7:10:1a:59:35:
1c:62:f3:5a:f8:8e:38:b4:b8:c6:f0:b1:a1:98:35:
67:05:53:89:84:30:50:82:98:07:06:5e:77:e8:49:
fc:6e:9d:64:bb:57:78:af:34:6b:bd:44:f6:8f:c4:
fc:50:3c:61:22:a5:e6:9d:d8:49:67:0d:67:b7:79:
d4:1d:9a:51:9d:cd:77:b6:90:34:df:89:90:85:0e:
70:49:40:c8:8c:6b:f9:b9:33:bb:a8:42:68:62:7a:
2e:0b:0f:fb:0e:28:3b:13:9a:fa:9c:96:3d:20:bd:
d9:0b:8c:8c:4a:63:38:4a:4c:dc:70:7d:cd:6e:21:
b7:5b:13:38:fc:b6:72:87:b0:2c:80:37:7a:90:cf:
95:eb:6d:22:1a:33:31:02:98:c3:c4:1d:eb:42:db:
e0:52:3c:9c:01:c1:55:76:bd:33:73:22:5f:f9:1b:
2a:73:7a:4d:6f:ae:60:5f:81:40:2a:f2:67:8e:f8:
4f:51:33:94:ac:8e:7d:9c:6e:25:3e:42:45:a3:82:
f9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:4D:C9:52:E5:E0:47:54:E7:08:86:59:4C:AC:52:13:0A:DB:B4:58
X509v3 Authority Key Identifier:
keyid:54:3C:5C:34:A6:2F:FB:ED:8F:C0:F0:EC:01:B4:2C:0C:50:EE:7E:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:14:9c:2e:20:2c:c5:f4:be:45:9b:ba:ae:e7:54:1a:7c:07:
87:b2:32:30:d0:1f:8d:a4:8f:1b:3f:0e:56:dd:59:b0:90:dc:
ad:3f:e3:fe:98:18:74:7a:2b:ee:e1:dc:f7:5d:60:db:1a:82:
74:b6:53:00:e2:ce:36:41:0b:9c:fe:3d:ef:b9:be:42:7b:a3:
63:70:ac:9a:ad:5f:08:9d:ee:56:2a:cb:b7:3f:62:2c:9b:75:
d8:10:22:32:97:d9:2b:9c:51:bd:5f:7b:49:c2:46:3e:7c:7d:
3a:db:6a:0d:6b:d8:c3:52:70:69:ce:b1:7c:26:cb:56:7c:5e:
95:16:3e:66:62:ac:6a:05:45:e1:9f:c5:a9:09:2f:8b:8e:f3:
ba:9c:3f:0b:ed:45:f1:61:50:8a:20:55:ee:37:7c:18:13:02:
95:60:73:da:a7:a6:77:9f:32:55:ea:f6:51:47:20:18:fd:53:
df:ab:d1:be:15:df:37:d8:99:ac:d5:41:17:fa:f6:fd:f7:87:
77:3d:d5:ec:20:12:9a:12:0f:bf:44:1d:20:02:48:7c:f6:db:
88:b9:5d:0c:d9:ca:38:46:e6:66:6b:79:28:6d:8b:2d:13:8e:
0f:5a:bf:b5:a6:7e:1e:a7:cd:9e:c9:7e:cd:41:95:bf:c6:9f:
bd:9b:69:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 18:46:42 2025 by rpki-client