Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/509d0b-acd1-4958-a3cd-375f2449a8c1/1/VDxwGANHJZY6lxyWqMqrWYyuY4o.mft
File: VDxwGANHJZY6lxyWqMqrWYyuY4o.mft (raw, json)
Hash identifier: E4k8brLasATh32G6EVzYh7+oV6AZY4Qlnw+gzCjO4ZU=
Subject key identifier: A8:B5:B6:FE:FD:DC:99:C9:F0:E1:8B:A4:F1:F7:6A:86:12:71:81:EC
Authority key identifier: 54:3C:70:18:03:47:25:96:3A:97:1C:96:A8:CA:AB:59:8C:AE:63:8A
Certificate issuer: /CN=543c7018034725963a971c96a8caab598cae638a
Certificate serial: 019841E27EE29E8F5EB6CF99E44BEDE813A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VDxwGANHJZY6lxyWqMqrWYyuY4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/509d0b-acd1-4958-a3cd-375f2449a8c1/1/VDxwGANHJZY6lxyWqMqrWYyuY4o.mft
Manifest number: 03F2
Signing time: Fri 25 Jul 2025 14:00:19 +0000
Manifest this update: Fri 25 Jul 2025 14:00:19 +0000
Manifest next update: Sat 26 Jul 2025 14:00:19 +0000
Files and hashes: 1: O7wVhYp5aN-EHbBcAt5o4QIzfyg.roa (hash: 1pH3pLqu6QshZ8HwYPfHNSe335AW5zx9SMrVG3Y2btc=)
2: VDxwGANHJZY6lxyWqMqrWYyuY4o.crl (hash: TIwRlKZBBWmjNv/w967fHPs1KV6yM1TYaSD2WTGF0q0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/509d0b-acd1-4958-a3cd-375f2449a8c1/1/VDxwGANHJZY6lxyWqMqrWYyuY4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/509d0b-acd1-4958-a3cd-375f2449a8c1/1/VDxwGANHJZY6lxyWqMqrWYyuY4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/VDxwGANHJZY6lxyWqMqrWYyuY4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 14:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:41:e2:7e:e2:9e:8f:5e:b6:cf:99:e4:4b:ed:e8:13:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543c7018034725963a971c96a8caab598cae638a
Validity
Not Before: Jul 25 14:00:19 2025 GMT
Not After : Jul 26 14:00:19 2025 GMT
Subject: CN=a8b5b6fefddc99c9f0e18ba4f1f76a86127181ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:eb:8a:4f:74:22:0b:55:12:69:5a:f2:1e:1c:
1d:15:48:58:75:4f:50:a6:73:98:7e:82:d1:b9:52:
a6:96:57:00:f1:cd:35:47:0b:7e:c3:b4:45:7b:fe:
9c:c9:5d:54:e4:31:8f:05:4b:ad:35:ee:94:d8:d5:
2b:77:c5:65:67:c9:8b:d9:2b:b7:4e:d3:1e:3e:ce:
54:2d:b6:0d:53:0b:a3:05:44:6d:bf:28:ef:99:50:
62:77:57:90:75:0d:29:77:db:6f:ab:4d:4d:be:1d:
2d:0c:45:95:b6:bb:45:82:df:50:0d:af:49:12:62:
5b:2e:fc:4d:91:19:3a:72:14:01:2e:ae:8b:ad:25:
78:32:dd:89:71:cf:1d:f1:a6:dc:71:94:00:b0:e8:
f9:fd:88:1d:84:34:5d:58:7a:d9:1d:d6:ac:bd:7a:
20:04:98:c1:ab:09:67:25:fa:59:da:a2:5a:c1:22:
4d:82:0c:a3:63:4a:e0:9a:76:64:02:71:e9:7c:69:
0c:37:be:ed:46:e1:7c:9b:88:03:fd:12:75:77:45:
7e:d5:13:a8:b0:57:37:c4:8e:0b:e4:38:be:65:76:
a5:67:f5:c3:9a:23:4e:5c:24:07:d1:b4:92:ca:31:
d4:01:58:06:4a:11:70:33:70:ad:d7:41:86:3b:4c:
58:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B5:B6:FE:FD:DC:99:C9:F0:E1:8B:A4:F1:F7:6A:86:12:71:81:EC
X509v3 Authority Key Identifier:
keyid:54:3C:70:18:03:47:25:96:3A:97:1C:96:A8:CA:AB:59:8C:AE:63:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDxwGANHJZY6lxyWqMqrWYyuY4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/509d0b-acd1-4958-a3cd-375f2449a8c1/1/VDxwGANHJZY6lxyWqMqrWYyuY4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/509d0b-acd1-4958-a3cd-375f2449a8c1/1/VDxwGANHJZY6lxyWqMqrWYyuY4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:63:fc:0f:1e:52:ea:c5:f8:0f:3d:c6:e3:6a:d5:f2:50:d3:
8a:09:5f:1b:ef:13:b7:78:f8:c5:4c:b6:91:20:a8:33:d2:75:
62:c9:c3:60:26:f6:0c:7e:a0:e2:86:5e:da:64:46:50:8e:7d:
92:ea:c8:35:db:a9:1f:24:73:ba:84:3c:5f:aa:b4:d8:d0:51:
fa:d2:aa:20:4c:69:f3:d0:4a:7f:a0:bf:5a:1e:1c:4e:ca:4c:
fd:c9:02:5e:9a:36:9a:50:7e:4f:a0:1c:9c:57:fe:f1:fe:fc:
20:1b:97:2a:e0:70:1a:3a:97:e1:52:00:77:80:55:56:fd:a6:
f6:e4:7b:82:c2:1f:35:4d:a2:eb:54:aa:02:be:b5:1d:6c:09:
55:ff:e3:14:fc:8e:c6:4f:80:b9:0a:7a:6f:1f:34:f6:17:c5:
94:33:21:6a:d3:a1:8a:9d:18:bd:ce:25:fd:6f:af:f2:70:d2:
f4:04:58:5e:c6:1e:6c:b2:b2:79:04:8b:e2:4e:cd:02:2c:02:
e8:0e:98:f5:43:ae:f3:4c:e4:11:82:8f:d8:f4:d5:17:14:0a:
4c:30:6e:ec:e5:c3:e6:f3:6d:3f:e7:7f:67:44:99:9b:a0:ac:
38:2c:dd:37:6c:ad:47:56:fb:dc:99:cc:61:88:46:83:fe:41:
be:a3:50:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 22:29:39 2025 by rpki-client