
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.mft
File: VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.mft (raw, json)
Hash identifier: pJe8Atheyz5fOSBhU81pB0zq5SXFjM+ZEs14jp2RfcU=
Subject key identifier: 77:0C:C8:3E:C3:54:EE:6F:20:58:A9:4B:1A:22:EA:38:B2:EB:2E:4C
Authority key identifier: 54:96:F2:E9:0D:B2:BD:35:D5:4C:6D:23:EE:D9:B0:F9:9F:96:63:A6
Certificate issuer: /CN=5496f2e90db2bd35d54c6d23eed9b0f99f9663a6
Certificate serial: 019921B09CF0BB6C246B816FDA362E4669C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.mft
Manifest number: 0E38
Signing time: Sun 07 Sep 2025 01:00:46 +0000
Manifest this update: Sun 07 Sep 2025 01:00:46 +0000
Manifest next update: Mon 08 Sep 2025 01:00:46 +0000
Files and hashes: 1: VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.crl (hash: yvELcW4mbBEz6AT+WbmFN76a1lqcix/YwxSkCbZTTR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:9c:f0:bb:6c:24:6b:81:6f:da:36:2e:46:69:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5496f2e90db2bd35d54c6d23eed9b0f99f9663a6
Validity
Not Before: Sep 7 01:00:46 2025 GMT
Not After : Sep 8 01:00:46 2025 GMT
Subject: CN=770cc83ec354ee6f2058a94b1a22ea38b2eb2e4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:7f:8a:43:ef:1b:2c:94:7f:74:f6:ed:99:52:
f0:e9:fe:41:57:37:b8:35:73:35:59:b9:70:66:85:
5f:8a:73:1c:79:85:40:80:e6:de:b0:dc:76:fa:a9:
48:12:8c:b4:a2:d7:86:bb:1c:46:cc:1f:ef:b5:7f:
c7:c5:b2:88:6f:3f:de:2d:04:20:79:e3:28:1a:0e:
3a:72:06:cd:e2:e8:e8:46:cb:1c:f1:a8:d4:85:a1:
cd:40:28:ef:b4:74:e5:67:62:78:2f:ff:b2:a4:4e:
99:e3:fb:90:4f:3e:7d:5a:11:96:d2:a1:d0:51:6d:
78:ee:2a:7d:4c:0f:ec:d4:c9:fa:0d:27:e0:ed:f7:
7b:c0:82:89:3a:7c:d9:f8:3c:93:dc:9e:77:ff:d4:
48:1d:b9:f2:47:22:b4:46:3f:6b:14:90:74:76:9b:
0a:88:fb:5a:95:93:12:1d:54:15:a4:f4:04:d3:cd:
2a:d4:99:be:30:fe:09:9c:2b:6f:e4:e0:53:66:e1:
cc:ba:dd:37:5e:59:92:35:2c:b2:18:29:c6:75:78:
58:b3:4f:ad:64:a9:5a:0b:d8:72:bf:a3:ff:22:60:
21:c2:df:9f:07:15:af:14:d3:22:a2:5a:f2:4c:f8:
e8:46:06:54:14:6b:09:64:82:97:f8:56:cc:22:30:
14:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:0C:C8:3E:C3:54:EE:6F:20:58:A9:4B:1A:22:EA:38:B2:EB:2E:4C
X509v3 Authority Key Identifier:
keyid:54:96:F2:E9:0D:B2:BD:35:D5:4C:6D:23:EE:D9:B0:F9:9F:96:63:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:95:c1:c2:5f:2b:88:30:a0:79:a5:3f:1c:3f:70:9f:be:da:
58:57:0d:2a:8c:0e:84:d6:61:e2:45:83:05:37:39:77:6d:34:
da:79:f1:b0:28:89:57:bd:28:06:c0:f7:c3:58:d8:ad:d4:82:
70:ad:07:c4:41:d3:36:8c:76:23:59:6f:68:38:43:ee:b1:a5:
80:05:63:03:03:a0:fb:44:8d:61:7d:8b:a9:bf:77:41:9d:dd:
a6:d6:7d:44:ef:bb:7f:a9:44:1b:68:90:bd:ac:75:24:6d:ac:
3a:f9:dc:f4:59:22:1f:0d:18:3c:7b:19:fa:4d:93:00:e4:6c:
91:10:8d:ab:e1:12:1e:07:a2:ea:de:0e:5b:3a:e1:c4:45:ba:
74:10:a3:65:3a:9a:c8:0d:fd:76:2d:b4:40:c0:65:cc:28:d1:
f1:9c:ea:b5:b8:42:fb:8b:b9:3c:04:c4:a4:16:6f:06:dc:74:
64:0d:66:34:7b:48:5a:cd:37:9e:a5:12:1d:d6:c1:8e:32:72:
c9:fd:44:ed:dc:af:d3:a1:3d:a7:bb:fe:ec:e1:10:24:2f:eb:
fd:08:34:6e:43:37:28:cf:89:6f:90:66:d9:b2:51:e1:8d:1f:
d6:99:2f:01:4b:52:36:ff:a3:04:de:e5:a7:80:c8:f2:e4:46:
0d:e6:4b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:58:24 2025 by rpki-client