
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.mft
File: VT9LxBZjmn4bbE8BmeAuMWCh5kI.mft (raw, json)
Hash identifier: NgffNmAUyR+VyRq/DbXzAx8EPR9o7oYBJUwwxkpnrf8=
Subject key identifier: 7D:A4:34:D1:9A:20:F2:EC:0A:9B:ED:35:F0:84:7F:8F:B8:67:99:3B
Authority key identifier: 55:3F:4B:C4:16:63:9A:7E:1B:6C:4F:01:99:E0:2E:31:60:A1:E6:42
Certificate issuer: /CN=553f4bc416639a7e1b6c4f0199e02e3160a1e642
Certificate serial: 019849D33E9050D22A70AF381047A3601F27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VT9LxBZjmn4bbE8BmeAuMWCh5kI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.mft
Manifest number: 0AFD
Signing time: Sun 27 Jul 2025 03:00:37 +0000
Manifest this update: Sun 27 Jul 2025 03:00:37 +0000
Manifest next update: Mon 28 Jul 2025 03:00:37 +0000
Files and hashes: 1: Hgi_WtigQe-4a9mBK4OJ2dE5DEg.roa (hash: glvgmho6qzikqxgDEl6Npj+ieTiLH+pi39kY0pjWHaY=)
2: VT9LxBZjmn4bbE8BmeAuMWCh5kI.crl (hash: AEq32uerrnUO/Afd5llyZw/HfFMEZAfLvFWdCjyJXMo=)
3: YHJMwPpMbGI_zFjgbXnZP4EWLRA.roa (hash: PbBfFMHu68bzOncJDtOs1K4e5CV47wx0OGKsJihA0w8=)
4: zQrSyIjUHwJboP1xxZbE_ExqSB4.roa (hash: BdysfnABpVK+6w8shMYkAFX35eeb6edXdvxWPmnVvoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.mft
rsync://rpki.ripe.net/repository/DEFAULT/VT9LxBZjmn4bbE8BmeAuMWCh5kI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:3e:90:50:d2:2a:70:af:38:10:47:a3:60:1f:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=553f4bc416639a7e1b6c4f0199e02e3160a1e642
Validity
Not Before: Jul 27 03:00:37 2025 GMT
Not After : Jul 28 03:00:37 2025 GMT
Subject: CN=7da434d19a20f2ec0a9bed35f0847f8fb867993b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:43:5f:b0:54:98:d6:f0:f2:66:2a:5b:b2:59:
62:5f:1a:c5:00:e4:97:19:48:8c:e3:01:9c:a5:c7:
17:94:d3:10:f8:cb:53:99:09:7a:53:46:6e:e5:fa:
0d:88:36:c3:58:e7:d9:a1:bc:fc:84:f5:73:bb:0e:
b2:48:cb:41:50:e4:aa:82:f6:bc:7b:d8:4d:15:06:
71:37:d8:5b:fd:0c:a7:92:dc:4d:3b:bb:93:c4:1c:
50:69:bf:1b:f1:c5:a8:c0:94:29:38:f7:5e:a6:3b:
a1:0d:52:03:a2:90:0a:a2:c9:10:23:ce:26:6f:f9:
4b:b9:ae:ed:93:17:65:f4:38:f4:e5:e1:6f:af:1c:
7c:8f:9d:1a:99:c3:4f:4b:a9:5c:a7:93:14:22:bb:
3b:55:34:34:7f:b8:98:c2:36:6f:e7:0d:54:75:86:
6a:bc:b7:fa:bb:0c:37:f5:71:f9:bd:c8:df:02:5f:
91:2e:86:7b:17:c5:c3:e8:60:d9:84:07:9b:18:4f:
b3:86:a0:28:ac:eb:d2:b6:96:6e:c2:76:2b:7f:27:
a3:56:e7:b7:17:37:26:e8:14:bc:f9:aa:d8:a5:9c:
d8:29:3b:de:69:4c:4a:8d:42:14:fe:97:dd:26:67:
f8:c0:6d:f8:d7:0c:f0:17:b7:5c:c8:cf:b3:2b:a1:
f0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A4:34:D1:9A:20:F2:EC:0A:9B:ED:35:F0:84:7F:8F:B8:67:99:3B
X509v3 Authority Key Identifier:
keyid:55:3F:4B:C4:16:63:9A:7E:1B:6C:4F:01:99:E0:2E:31:60:A1:E6:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VT9LxBZjmn4bbE8BmeAuMWCh5kI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:11:bc:11:5c:c1:51:04:24:4c:00:87:e6:ee:48:a8:f5:2d:
08:d8:8c:d1:75:dd:e0:6c:07:44:40:5c:52:22:1b:86:35:34:
bd:83:f8:71:05:70:f9:26:1f:03:61:cc:2d:21:5b:54:e0:bf:
f6:7d:1a:a0:d5:e3:3b:13:89:7b:fd:9d:95:08:2f:ba:6d:37:
63:b1:ff:51:52:7c:7f:4b:e2:33:e7:1c:e8:6a:85:37:c3:d1:
61:a1:0f:0d:44:64:0d:fc:e4:84:45:0e:12:b4:8e:c4:ec:fe:
6b:41:1f:1b:6a:0d:11:6f:12:48:14:65:50:9b:d3:8c:17:d3:
91:3a:49:bc:4d:b7:67:f2:cc:d9:d6:45:f8:9b:cd:9e:b1:18:
4c:3e:65:73:9d:66:e4:ef:a2:3b:ed:f6:79:0f:ac:c6:2e:47:
d5:d3:58:5a:6a:18:c8:62:dc:35:b8:33:20:e7:60:a7:4a:32:
a2:11:22:dc:01:02:e8:54:4e:28:a5:37:84:71:af:02:fa:15:
dd:2d:e1:c8:2b:2e:3f:5e:54:fa:1a:96:31:e5:3c:fc:f7:c0:
d8:ba:d6:1c:d8:05:4d:6c:3c:47:b7:b2:d1:60:e0:55:33:d8:
fe:fb:74:15:73:47:4c:de:c6:e2:24:83:a4:c2:c9:89:fa:92:
47:34:80:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:17:02 2025 by rpki-client