Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
File: vosVwjfzTFxcU0S0B567OlidAUg.mft (raw, json)
Hash identifier: XAWS4Yzr5xCSilHdUDzI7Oxun4RODyKDKd2XS5PPtoE=
Subject key identifier: 7B:EB:12:60:5A:E7:6C:07:F3:D6:98:3C:C7:60:6D:7F:C0:8C:C9:93
Authority key identifier: BE:8B:15:C2:37:F3:4C:5C:5C:53:44:B4:07:9E:BB:3A:58:9D:01:48
Certificate issuer: /CN=be8b15c237f34c5c5c5344b4079ebb3a589d0148
Certificate serial: 019922FA37C95E1F2EECD49CDA8E12732B98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
Manifest number: 0C44
Signing time: Sun 07 Sep 2025 07:00:47 +0000
Manifest this update: Sun 07 Sep 2025 07:00:47 +0000
Manifest next update: Mon 08 Sep 2025 07:00:47 +0000
Files and hashes: 1: hKsPJ4MnZD2pYCjFxua95M8Pd_I.roa (hash: doF91Tq6urawTtlcrWXugjS7shhgWKPbbEAfjccw0S8=)
2: vosVwjfzTFxcU0S0B567OlidAUg.crl (hash: i1QfcPqzq1Y6cLOQ8FcYvyXXAKPOo+DIX316/AYzVUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:37:c9:5e:1f:2e:ec:d4:9c:da:8e:12:73:2b:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be8b15c237f34c5c5c5344b4079ebb3a589d0148
Validity
Not Before: Sep 7 07:00:47 2025 GMT
Not After : Sep 8 07:00:47 2025 GMT
Subject: CN=7beb12605ae76c07f3d6983cc7606d7fc08cc993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7c:7a:55:29:a8:31:52:13:95:64:99:2b:ea:
eb:5b:66:93:e6:ec:ee:c6:47:a7:3b:cb:04:d3:70:
ec:87:39:5f:d9:92:09:d8:5c:f2:dd:37:a9:b3:3c:
46:d5:78:e5:3e:79:c8:30:fb:50:dc:d5:6c:0d:57:
d0:24:5f:0f:32:73:5a:66:3a:f8:1d:05:a5:a5:62:
60:7f:37:bd:d0:80:e8:90:55:90:7b:56:07:82:4e:
fe:de:01:6a:83:8c:76:94:30:9b:92:e6:73:76:38:
a6:ad:04:b5:af:5d:d1:f8:7b:6d:f6:70:89:cb:53:
ac:47:f2:ae:bd:46:80:6f:43:c1:26:49:e7:6a:4e:
07:c3:ac:f7:81:44:4d:e5:4a:02:6f:a0:92:58:11:
22:f7:85:cc:a5:99:29:fd:23:ab:0f:7f:70:45:fc:
0c:ca:90:d1:28:a5:82:d8:d1:ae:fd:a3:34:24:93:
79:b8:36:80:27:c1:c8:a8:91:a5:8b:ce:02:b2:5c:
ee:f0:3b:d0:2e:c7:6a:e7:ba:da:d3:03:43:43:59:
01:19:ab:83:90:68:be:94:e2:1c:bf:de:65:18:8e:
7f:b7:16:a6:39:bc:0e:67:23:43:56:4f:bb:da:a1:
4c:2e:fb:52:6d:71:a6:12:19:06:c0:32:6b:89:b3:
af:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:EB:12:60:5A:E7:6C:07:F3:D6:98:3C:C7:60:6D:7F:C0:8C:C9:93
X509v3 Authority Key Identifier:
keyid:BE:8B:15:C2:37:F3:4C:5C:5C:53:44:B4:07:9E:BB:3A:58:9D:01:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:cc:c4:77:c9:03:6c:61:9a:65:47:26:04:6a:45:79:b1:2b:
7f:1e:ae:8e:74:e0:70:31:55:66:3e:d3:39:85:ba:74:a2:f1:
ba:1a:7e:8a:1b:a4:f6:10:79:a3:8c:2c:93:3d:fd:be:1a:97:
05:68:df:63:df:1b:2a:15:f8:99:4a:76:39:32:ae:fa:2c:8b:
e0:78:58:aa:45:a7:5b:b5:21:de:51:cf:97:3b:3c:19:59:8a:
01:ec:53:45:a9:03:fc:1c:6d:e4:0b:81:f2:ef:4f:7b:c8:54:
20:a4:e5:b4:69:0d:bd:88:85:c1:33:70:24:18:ef:49:21:2f:
01:3a:45:e9:b8:57:27:56:0f:85:9f:d5:6b:e8:eb:65:53:df:
47:0f:0f:cb:f2:87:fa:52:cc:0d:6a:c2:ee:ca:4a:b0:f2:cd:
ab:18:c4:13:27:ed:e6:99:f2:3c:30:87:30:07:20:90:8a:6a:
15:41:74:14:d3:5a:fe:42:ae:47:60:0c:c9:9e:79:0b:dd:39:
09:ff:9d:ab:0b:87:bc:81:d2:38:c2:2f:72:dd:a2:63:6b:1c:
09:c4:72:06:f1:16:22:63:3c:c4:7f:33:d5:b0:c8:55:9a:53:
93:f1:d5:6e:b5:8a:3f:60:f5:8e:a4:0c:4c:51:27:49:3f:42:
d0:d3:b0:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:49:42 2025 by rpki-client