Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.mft
File: VRNzP1CmpEqRS5-Pjr941_pOqaA.mft (raw, json)
Hash identifier: M5wWuw0fsmgUUVALFuMXgsYh5g1djddvyiaWQMWQNAY=
Subject key identifier: BC:42:95:11:A3:DE:9F:CC:27:AD:BB:18:09:6F:2C:20:36:B3:11:BB
Authority key identifier: 55:13:73:3F:50:A6:A4:4A:91:4B:9F:8F:8E:BF:78:D7:FA:4E:A9:A0
Certificate issuer: /CN=5513733f50a6a44a914b9f8f8ebf78d7fa4ea9a0
Certificate serial: 01984965ABAC1B2C4C04F2FD2FA957BF716D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRNzP1CmpEqRS5-Pjr941_pOqaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.mft
Manifest number: 132C
Signing time: Sun 27 Jul 2025 01:00:56 +0000
Manifest this update: Sun 27 Jul 2025 01:00:56 +0000
Manifest next update: Mon 28 Jul 2025 01:00:56 +0000
Files and hashes: 1: 0T5ioKjx83-tTr3Mt9le068JcTQ.roa (hash: W8RCmNZUMfFbxdN1LMLcVYrh7MEw9Ur5XcdnTWf1Txo=)
2: VRNzP1CmpEqRS5-Pjr941_pOqaA.crl (hash: HG4YFasmoyqNXg4p6vzG1bddB9jznpPfXn45DUMOEHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VRNzP1CmpEqRS5-Pjr941_pOqaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:ab:ac:1b:2c:4c:04:f2:fd:2f:a9:57:bf:71:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5513733f50a6a44a914b9f8f8ebf78d7fa4ea9a0
Validity
Not Before: Jul 27 01:00:56 2025 GMT
Not After : Jul 28 01:00:56 2025 GMT
Subject: CN=bc429511a3de9fcc27adbb18096f2c2036b311bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:99:a2:1e:4f:28:2b:0a:05:42:31:09:9e:f9:
05:3c:22:e4:c1:f4:50:5a:f6:1b:98:97:b3:4f:f7:
52:b8:12:3d:35:b4:52:1f:26:d4:6e:63:69:8d:4f:
b2:03:7d:74:62:f5:d6:2e:b6:89:8d:73:b0:7d:94:
5a:f1:e1:ab:48:e5:f1:25:9e:9b:80:fd:41:2a:a4:
81:54:eb:fa:ad:fb:26:7a:d5:84:a8:90:41:e1:1d:
f2:d0:03:4e:78:50:08:d6:d4:27:2a:ff:6f:fe:c8:
74:0e:28:d0:9d:ae:81:49:25:9f:a2:0b:93:44:8b:
36:a3:be:e3:ed:48:6e:3f:ef:ad:97:a2:ee:f4:7b:
df:de:c0:bd:35:02:7f:26:93:83:54:a3:8b:09:72:
0b:10:38:9a:16:5f:4f:d6:d7:c8:55:10:13:68:24:
0d:85:3c:7e:b2:6c:3e:f6:96:35:ac:12:17:7d:cb:
12:74:57:50:95:bd:54:64:c4:76:47:b3:35:15:cd:
18:08:21:dd:de:e8:bd:99:b3:de:ea:eb:d1:62:45:
da:48:63:47:92:ac:fc:33:a8:b3:40:91:35:71:43:
ed:23:c7:d5:85:b9:1d:05:81:d1:43:a3:dc:19:20:
08:0a:dd:22:82:f7:3e:b9:2e:42:94:bf:0b:0a:be:
5f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:42:95:11:A3:DE:9F:CC:27:AD:BB:18:09:6F:2C:20:36:B3:11:BB
X509v3 Authority Key Identifier:
keyid:55:13:73:3F:50:A6:A4:4A:91:4B:9F:8F:8E:BF:78:D7:FA:4E:A9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRNzP1CmpEqRS5-Pjr941_pOqaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:6e:20:95:8f:7a:36:d2:06:4a:e2:22:fa:10:56:cb:94:8e:
46:2c:c8:b1:e9:86:11:a0:44:6f:fb:1c:ce:57:23:91:69:02:
a4:7c:71:b8:d2:09:a0:d1:06:53:0d:f7:c9:e3:e5:0a:0f:3b:
0f:d7:9b:5d:51:15:a6:1a:f1:7d:b4:87:85:00:75:1e:98:37:
ad:ca:88:76:34:2f:43:37:99:96:e7:c7:96:0a:16:de:60:ba:
4a:9f:0f:f0:d0:f5:c3:c1:44:9f:1b:51:5c:28:68:f5:16:52:
2c:44:3c:60:bc:90:ec:55:41:35:e1:86:d7:4c:c8:32:07:d0:
cb:d1:ee:fa:4b:31:9b:33:c1:4c:0d:74:f8:e4:1a:9b:1f:8b:
e0:87:50:62:bf:ad:dd:10:7a:60:b8:e4:fe:bf:cf:ee:33:8d:
86:ec:5a:28:83:27:97:de:13:1a:62:3d:78:c5:d2:65:13:1a:
b0:c4:e5:eb:5f:91:c8:8c:0d:dc:d6:f1:f9:d1:db:fe:96:eb:
53:41:89:8b:55:e0:f7:c6:6a:c0:02:e1:e0:1b:be:ef:45:fc:
ee:d3:e1:a9:a2:41:8b:77:61:18:23:33:09:ba:74:fd:db:df:
c8:ad:aa:ab:dc:c2:4c:8b:ca:f4:22:8f:97:bd:d3:19:13:95:
da:81:27:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:05:04 2025 by rpki-client