Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
File: VmHZZN9KhtuP-5mqiVgtpoowkIw.mft (raw, json)
Hash identifier: liE0WuhQlwHF3V0vBfAp+aviY8BLMEF5c9KKxpLFbc8=
Subject key identifier: 7A:E5:C4:1C:D3:AB:25:D9:CB:F7:49:13:1C:7E:DD:B8:65:D9:B9:A7
Authority key identifier: 56:61:D9:64:DF:4A:86:DB:8F:FB:99:AA:89:58:2D:A6:8A:30:90:8C
Certificate issuer: /CN=5661d964df4a86db8ffb99aa89582da68a30908c
Certificate serial: 019922C36B3A546187F5AF6AEF3569BD89DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
Manifest number: 0207
Signing time: Sun 07 Sep 2025 06:00:56 +0000
Manifest this update: Sun 07 Sep 2025 06:00:56 +0000
Manifest next update: Mon 08 Sep 2025 06:00:56 +0000
Files and hashes: 1: VmHZZN9KhtuP-5mqiVgtpoowkIw.crl (hash: 36PyxcsRLPU4ZM17rQWXyFj/is2HRlbZfPwhRMzpg1Y=)
2: xMdRmutHFokxkkQckhp-estBVrY.roa (hash: B+GeVyXFQ8LdKQlX7fXVWpcWBfpc+XAscpHvCnfEhnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:6b:3a:54:61:87:f5:af:6a:ef:35:69:bd:89:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5661d964df4a86db8ffb99aa89582da68a30908c
Validity
Not Before: Sep 7 06:00:56 2025 GMT
Not After : Sep 8 06:00:56 2025 GMT
Subject: CN=7ae5c41cd3ab25d9cbf749131c7eddb865d9b9a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3b:e0:9b:0b:db:b7:bc:25:88:46:04:86:70:
ec:06:25:ab:aa:48:d5:97:ae:45:96:41:c4:ab:d6:
a4:73:97:da:a7:77:e9:83:03:03:ea:ee:9a:aa:cc:
f8:f7:9c:99:77:24:41:b2:a8:b8:6c:28:74:d5:d4:
a3:3a:5e:73:1b:9d:2e:6d:4d:77:74:a2:ec:f5:01:
eb:19:e0:96:24:fd:80:b4:df:e1:7f:be:28:12:b7:
91:b2:82:f8:b4:12:7b:8d:ba:64:62:5e:5c:37:61:
24:bf:6c:4c:e3:23:07:3a:8a:3a:21:92:71:5f:79:
14:f6:79:c8:85:95:fd:0e:02:c7:8b:ae:48:84:07:
e1:f2:21:0b:ea:f3:de:5a:2a:60:b4:b1:a4:88:4d:
e3:39:bf:2d:77:93:a3:9d:ac:12:c8:51:3c:5a:06:
ac:bd:cc:d7:03:60:24:8e:61:b7:1c:3c:bd:42:63:
5f:65:b3:37:38:03:46:d9:4b:72:65:ed:e9:eb:c5:
8d:50:c0:17:51:9a:b6:2b:37:99:b8:2f:e9:4a:c6:
b2:d4:f9:74:37:18:7a:ae:14:a9:66:84:9c:61:1f:
1b:34:bd:c7:51:db:fe:6c:53:47:e6:a3:85:63:0e:
1f:0f:10:05:55:24:39:e6:62:ae:78:e8:01:08:d3:
a4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E5:C4:1C:D3:AB:25:D9:CB:F7:49:13:1C:7E:DD:B8:65:D9:B9:A7
X509v3 Authority Key Identifier:
keyid:56:61:D9:64:DF:4A:86:DB:8F:FB:99:AA:89:58:2D:A6:8A:30:90:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:d8:d4:93:b2:cf:5e:85:6d:a4:29:19:64:fa:b0:28:ba:64:
d1:3d:48:e1:66:e8:92:e3:1f:e9:77:41:0e:37:ec:48:e1:74:
23:46:b4:43:22:3c:58:65:65:3f:6e:70:93:67:9d:06:e6:68:
fa:99:63:a7:c4:48:b0:bf:d5:f7:06:d4:45:22:50:02:dd:7e:
74:66:9c:c2:2e:49:37:3c:4e:eb:57:47:d5:75:9b:4d:7c:33:
3d:e6:29:ca:65:c3:4d:61:7e:d4:94:b0:0c:80:40:6f:22:34:
05:07:90:e2:e1:79:21:e2:7d:4e:a6:03:4c:26:ad:9f:9e:f7:
23:66:5f:23:7b:b3:93:b1:ff:22:2f:cb:ab:0d:12:ba:f5:0d:
5e:94:06:ee:0c:41:85:45:e2:39:29:b4:f6:e6:2a:fc:1b:70:
18:03:ba:2f:58:5b:a8:5c:2c:93:70:22:20:10:a0:39:0d:a4:
6e:1e:2a:3c:fe:f7:6e:83:2a:6a:e4:24:ce:5d:df:2f:e0:3f:
a7:e4:f2:03:a1:98:b3:f7:fa:e0:a5:62:1b:54:ac:a7:9f:d1:
e1:09:f0:5f:1b:22:cb:bc:a6:08:7f:2a:77:85:d2:02:ca:d5:
b8:14:46:fc:a2:35:6d:53:10:cf:22:9f:d8:0e:8d:c2:0f:b0:
1a:8a:93:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:08:24 2025 by rpki-client