Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.mft
File: VRIeW5L95kiJ9qqyzFzob8DloH4.mft (raw, json)
Hash identifier: ygAP/SbRIzrATVER+u3DMw4Y7QFN9SGX2YTubH5U7B4=
Subject key identifier: E5:8B:B1:8B:B9:CA:ED:73:D8:9E:AD:17:63:C4:45:86:18:82:65:F4
Authority key identifier: 55:12:1E:5B:92:FD:E6:48:89:F6:AA:B2:CC:5C:E8:6F:C0:E5:A0:7E
Certificate issuer: /CN=55121e5b92fde64889f6aab2cc5ce86fc0e5a07e
Certificate serial: 0198C6EE3D5BD01937B3D5725AB3F851E3E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRIeW5L95kiJ9qqyzFzob8DloH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.mft
Manifest number: 0483
Signing time: Wed 20 Aug 2025 10:02:38 +0000
Manifest this update: Wed 20 Aug 2025 10:02:38 +0000
Manifest next update: Thu 21 Aug 2025 10:02:38 +0000
Files and hashes: 1: 3kr8jiGy7HT0Z986eqHHTqrUADA.roa (hash: MLirpl2z9NyzltBKgB+dkcH7YYTRCJswwoZsSxn21Jw=)
2: VRIeW5L95kiJ9qqyzFzob8DloH4.crl (hash: 1Iu8hfvLU2EiCTPSVDJeDG3zM3/sNcMLfFeJvQWnThw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VRIeW5L95kiJ9qqyzFzob8DloH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c6:ee:3d:5b:d0:19:37:b3:d5:72:5a:b3:f8:51:e3:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55121e5b92fde64889f6aab2cc5ce86fc0e5a07e
Validity
Not Before: Aug 20 10:02:38 2025 GMT
Not After : Aug 21 10:02:38 2025 GMT
Subject: CN=e58bb18bb9caed73d89ead1763c44586188265f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a1:32:d9:9d:da:fc:08:07:76:57:bc:63:1a:
08:a6:71:42:43:c1:8c:f0:e3:ff:c6:89:39:36:b8:
e4:f9:48:ae:ad:da:69:18:77:a3:2f:94:15:04:b5:
27:31:e8:8c:88:ac:a7:a1:4c:42:52:fe:21:8e:b5:
1d:87:bd:0c:3e:81:8b:1b:14:7b:f0:50:7d:ba:f8:
bb:9c:6b:07:a2:38:26:40:ba:1b:13:51:c6:03:aa:
21:88:84:44:ee:28:ab:c3:37:89:d5:8b:7e:b9:da:
fb:76:48:93:33:72:14:3a:36:6e:4e:65:ca:55:cd:
93:d2:95:55:8c:f5:99:24:bd:ed:d8:12:90:df:a4:
5f:f0:54:cd:d5:20:dc:36:b9:11:0b:1a:3d:b6:0b:
ec:0e:2a:18:61:27:e7:1c:8f:16:09:a1:b0:de:f7:
4d:b8:9e:fa:12:34:e1:b8:f5:ea:57:aa:bc:ca:f2:
a0:82:c8:51:c9:2d:7f:e0:2e:e5:ae:6a:a0:18:a6:
e7:8d:db:31:58:d2:b7:1c:aa:6a:e6:8a:b4:3b:3c:
9d:70:b2:90:2a:88:92:87:7f:d7:36:98:dd:ea:f8:
6f:0d:6b:57:94:ee:69:52:50:5d:b9:41:8b:0f:ce:
25:44:f8:96:91:e9:b5:f1:cd:ff:c6:0a:84:15:49:
b4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:8B:B1:8B:B9:CA:ED:73:D8:9E:AD:17:63:C4:45:86:18:82:65:F4
X509v3 Authority Key Identifier:
keyid:55:12:1E:5B:92:FD:E6:48:89:F6:AA:B2:CC:5C:E8:6F:C0:E5:A0:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRIeW5L95kiJ9qqyzFzob8DloH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:4a:7b:ee:08:fc:2f:09:2c:93:9d:0f:da:ec:60:ef:53:49:
48:6e:4a:e3:3d:27:45:47:d2:30:fd:dc:db:6a:bf:6f:f7:d0:
20:3c:74:71:67:52:28:9e:cb:68:c7:ac:81:06:38:66:03:72:
3d:48:bd:95:e3:8c:29:be:9a:93:dc:3d:89:af:02:90:81:ac:
52:d9:4a:80:59:e8:8b:32:ee:7e:00:bc:1b:11:f7:e7:ac:f5:
23:80:e4:56:8a:64:77:32:6c:4f:ea:bc:b6:86:b5:11:bb:07:
9b:99:21:c3:9c:aa:9a:79:f7:db:c8:7c:1f:c9:d5:f3:31:9b:
5c:3d:6f:52:91:64:36:b4:3c:db:2f:7e:c5:16:48:f3:c1:dd:
0a:5d:fb:7e:04:a4:4a:4c:06:fc:92:d7:0c:e5:44:b6:f0:70:
e7:50:b2:65:37:f5:9d:50:6c:0f:94:47:12:dc:43:24:8b:fd:
3c:f5:5f:a5:88:fb:b0:64:50:a8:16:ab:41:a9:89:f7:c0:ca:
a0:66:7a:5e:bd:65:ff:6e:b7:91:8b:ff:7d:9d:9d:22:29:2d:
6c:93:dc:3b:ab:6a:4a:b1:c8:02:59:2f:48:e9:d1:cb:83:de:
bd:7f:af:c8:75:d8:71:11:b3:31:9e:e4:f1:69:65:bc:8c:37:
10:d4:9c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 15:28:02 2025 by rpki-client