Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.mft
File: VWgo1ipbiT4i1YZ_GhQtGY6F4as.mft (raw, json)
Hash identifier: NnHFe5NwTeZ2SquGnVSj0yPWEKX4HHfGE8dGD08ph9Y=
Subject key identifier: 09:93:7F:F3:E5:73:31:53:98:D2:D3:D6:61:7E:C9:7C:A6:91:65:CB
Authority key identifier: 55:68:28:D6:2A:5B:89:3E:22:D5:86:7F:1A:14:2D:19:8E:85:E1:AB
Certificate issuer: /CN=556828d62a5b893e22d5867f1a142d198e85e1ab
Certificate serial: 01982710FACDB44C71CCE8AC60A353671ED2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VWgo1ipbiT4i1YZ_GhQtGY6F4as.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.mft
Manifest number: 5A
Signing time: Sun 20 Jul 2025 09:01:20 +0000
Manifest this update: Sun 20 Jul 2025 09:01:20 +0000
Manifest next update: Mon 21 Jul 2025 09:01:20 +0000
Files and hashes: 1: VWgo1ipbiT4i1YZ_GhQtGY6F4as.crl (hash: 1DYqPdvgnsxjrdFVhhwmPU1l8ihU/566QhVOoUnK+Hw=)
2: w9nvjOWk8C3C6okM2fJbltiz6Ts.roa (hash: cpGlnXUiTmun4rJ5XWY0h3JOGdRAWAFOUtSEsrbjwUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.mft
rsync://rpki.ripe.net/repository/DEFAULT/VWgo1ipbiT4i1YZ_GhQtGY6F4as.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 09:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:10:fa:cd:b4:4c:71:cc:e8:ac:60:a3:53:67:1e:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=556828d62a5b893e22d5867f1a142d198e85e1ab
Validity
Not Before: Jul 20 09:01:20 2025 GMT
Not After : Jul 21 09:01:20 2025 GMT
Subject: CN=09937ff3e573315398d2d3d6617ec97ca69165cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e2:a4:86:4b:a0:75:4a:e3:f4:c6:6a:52:4b:
7c:33:54:7c:5e:c2:37:52:41:2c:c4:73:a8:a1:27:
c8:44:ca:11:f8:05:da:ab:fe:79:f6:2b:da:a1:85:
18:96:cb:e3:84:2f:0f:32:8a:97:ee:47:3d:a0:f3:
8d:8c:22:52:cd:a7:87:94:c8:61:2e:94:68:b6:bc:
7d:fe:fa:71:34:10:24:20:68:6e:15:fb:4f:bb:0d:
a9:ea:2b:55:29:56:aa:54:57:46:90:96:8d:fe:f9:
9e:61:cb:9d:13:d2:a0:5b:4c:81:fe:a0:9c:24:4d:
17:cb:44:1e:8e:40:40:03:f2:d4:4e:9d:7b:f4:65:
07:db:65:4d:37:5d:d2:d1:f9:65:99:48:c9:32:a3:
be:79:8f:12:d6:3f:d1:ba:8b:11:60:93:0d:71:65:
34:eb:9a:3b:31:7f:d4:88:a7:29:a8:52:25:88:b8:
06:6b:79:7c:44:55:c9:aa:24:f1:eb:65:88:c1:6c:
10:4c:c6:78:de:77:36:3d:88:69:f3:b4:ce:3f:5f:
64:0a:7d:f8:de:48:03:b1:4d:cd:8c:75:c7:c9:e0:
a9:8b:07:30:20:4d:3a:bc:46:54:e8:6b:5a:28:2c:
29:64:3f:e6:42:82:ee:8b:1d:61:3b:45:24:2b:6d:
f5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:93:7F:F3:E5:73:31:53:98:D2:D3:D6:61:7E:C9:7C:A6:91:65:CB
X509v3 Authority Key Identifier:
keyid:55:68:28:D6:2A:5B:89:3E:22:D5:86:7F:1A:14:2D:19:8E:85:E1:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VWgo1ipbiT4i1YZ_GhQtGY6F4as.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:19:d9:a7:a0:d9:64:a6:47:05:51:78:44:0c:83:e3:40:26:
48:ab:64:4e:db:1b:97:22:23:ed:81:48:3b:75:00:41:f6:54:
46:e9:aa:c9:68:19:a8:33:18:b1:b2:25:de:a4:75:84:57:0f:
e0:c5:ef:d0:c0:1b:84:11:7e:e1:8d:1b:59:0d:0d:b2:a2:dd:
af:28:38:6e:b0:51:59:20:fb:a8:3c:21:e6:c9:af:31:1f:d6:
80:69:54:c1:d2:2d:ba:ba:5b:7a:87:ca:a7:44:03:c6:e1:b6:
be:1a:fe:46:fd:63:fa:ba:2e:ea:01:98:dc:ef:9e:e0:f5:e9:
3c:5f:d2:04:f3:f8:67:a9:34:48:f8:c7:65:96:22:34:ca:6f:
7b:24:c6:fb:7f:b5:38:bf:fe:a3:c1:34:9b:f0:e9:73:ce:91:
10:d4:79:a3:24:54:a9:78:f9:42:89:84:fc:68:3a:64:89:ff:
d2:fd:66:45:5a:9e:de:25:73:06:bb:62:77:7d:b4:9e:f0:9c:
4f:78:7a:e0:27:66:a8:d8:21:52:96:44:27:6a:29:13:4f:58:
c1:0c:ef:23:34:fb:df:10:c0:85:50:d7:3e:3e:f5:fb:60:5e:
9b:76:b8:7b:f3:5c:1a:47:99:42:fa:81:1a:81:b8:f1:00:f3:
96:be:c8:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:24:48 2025 by rpki-client