Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft
File: VSyaHJxP95PoiL1YPcqYFcxFdMA.mft (raw, json)
Hash identifier: VRvDOxJyjCY8OWOhCLFhC4Q1GtBaytiu0lyX2eEtLdw=
Subject key identifier: E6:38:72:CD:8E:80:F8:59:21:1E:71:6A:BD:C4:8D:D3:7F:15:ED:E6
Authority key identifier: 55:2C:9A:1C:9C:4F:F7:93:E8:88:BD:58:3D:CA:98:15:CC:45:74:C0
Certificate issuer: /CN=552c9a1c9c4ff793e888bd583dca9815cc4574c0
Certificate serial: 0199315A9D7B6BB3871170698AA3B007C38F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSyaHJxP95PoiL1YPcqYFcxFdMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft
Manifest number: 160A
Signing time: Wed 10 Sep 2025 02:00:45 +0000
Manifest this update: Wed 10 Sep 2025 02:00:45 +0000
Manifest next update: Thu 11 Sep 2025 02:00:45 +0000
Files and hashes: 1: OY4UYP6MQJjL7Sxg2gh9CE4T1RE.roa (hash: ZrfsE/pEoCJELDNN+z7XrdVrqnmY0w2a+56TbedDcbs=)
2: VSyaHJxP95PoiL1YPcqYFcxFdMA.crl (hash: FyoNk/PPCuaVVq1RU71zToq3v355QPyMexp7urYYAkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VSyaHJxP95PoiL1YPcqYFcxFdMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:5a:9d:7b:6b:b3:87:11:70:69:8a:a3:b0:07:c3:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552c9a1c9c4ff793e888bd583dca9815cc4574c0
Validity
Not Before: Sep 10 02:00:45 2025 GMT
Not After : Sep 11 02:00:45 2025 GMT
Subject: CN=e63872cd8e80f859211e716abdc48dd37f15ede6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:18:95:da:d5:f8:00:b1:a9:e8:c9:93:2d:7c:
3d:c9:4d:90:cb:28:17:b4:fb:f7:d4:45:b4:f1:43:
46:ab:12:7e:31:06:31:bf:d5:28:c7:e1:b4:80:6c:
fd:47:9c:a5:c7:4e:e3:3a:fe:c9:37:9e:b8:48:5d:
ae:ed:f8:99:1b:08:eb:73:7d:63:30:71:d2:ab:f7:
19:58:92:0a:a9:84:13:2c:b9:14:0c:3a:26:6d:40:
bf:dd:26:02:78:85:97:7a:30:9c:3e:80:05:4b:87:
2a:7c:a2:00:7b:fb:82:38:c7:80:10:f6:25:17:2a:
20:a9:c7:eb:07:24:a3:52:3b:fa:f5:5f:df:e2:10:
b6:50:9b:20:e8:7c:9d:b0:77:da:1c:62:f4:e0:dd:
4b:ba:cc:a2:c3:5c:eb:55:82:d4:be:b1:9e:d1:98:
b2:d3:00:c2:56:77:45:78:7d:a5:6b:9d:fc:64:97:
94:ad:06:97:fc:35:aa:8f:5f:c2:2c:39:12:fb:3f:
97:61:7f:20:0d:03:c7:0e:6a:fc:95:6c:0e:36:ad:
3d:08:c9:1b:f7:ff:8e:a6:c8:8e:f0:07:64:93:3c:
6f:1c:72:c6:d5:fc:de:0d:c5:38:2a:d2:7c:1f:42:
1c:19:f2:65:a2:15:da:70:f0:03:ea:20:dc:21:78:
e6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:38:72:CD:8E:80:F8:59:21:1E:71:6A:BD:C4:8D:D3:7F:15:ED:E6
X509v3 Authority Key Identifier:
keyid:55:2C:9A:1C:9C:4F:F7:93:E8:88:BD:58:3D:CA:98:15:CC:45:74:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSyaHJxP95PoiL1YPcqYFcxFdMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:dd:aa:bc:aa:34:25:f6:61:4b:0d:2a:f2:0d:e3:ac:42:1e:
46:a0:8e:ab:09:37:ea:19:55:b3:af:41:fa:f4:d0:43:18:1f:
8e:6b:cc:6a:d3:4b:3a:ef:5b:22:9a:57:b3:93:64:52:f6:0f:
4b:2e:93:f4:9b:dd:dd:c0:4b:c2:97:4c:03:e2:7a:9e:f1:d2:
32:33:f6:27:bb:3e:a9:20:45:0a:99:17:14:1f:01:3b:d4:5e:
94:24:d5:8c:61:8a:82:71:ab:e0:35:c2:0e:8d:4a:c6:8a:4a:
02:d5:89:d3:5d:84:d5:59:09:f6:10:0a:96:31:e2:5b:64:1d:
24:59:50:a8:57:90:f4:07:a0:8c:97:38:60:5b:c4:48:8f:66:
87:a6:8a:d9:e5:00:19:12:0d:cb:1e:98:03:1f:e8:d9:17:3c:
fa:a4:54:05:5f:71:bf:82:fa:a4:01:d6:eb:7c:99:27:a3:e5:
1b:cb:64:c8:6d:4c:20:59:6a:d4:81:c1:78:e4:76:45:94:2d:
d2:67:07:59:0c:79:6e:a1:14:b7:7c:10:6f:d4:56:6b:d7:e1:
12:c9:c7:29:16:90:bf:2d:77:f7:86:5c:f6:b8:f1:1a:60:9e:
9d:9d:17:b1:97:8f:3d:38:55:ca:c4:55:2d:ac:78:93:b7:2e:
e8:b5:f9:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 09:15:46 2025 by rpki-client