Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft
File: VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft (raw, json)
Hash identifier: 1qVj8QpkVlDKd8c2016zT1iFAIuKxKbhOADpvIfv4GE=
Subject key identifier: CF:07:AA:4B:F0:35:8E:90:9B:21:FA:A3:FB:69:83:0B:F0:C1:27:D5
Authority key identifier: 57:14:D0:81:F6:5F:0C:8B:04:F1:D2:FE:73:E0:90:B0:7A:B1:AB:58
Certificate issuer: /CN=5714d081f65f0c8b04f1d2fe73e090b07ab1ab58
Certificate serial: 019916F5EDBDF47150AD9F8513DD5DECF0EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxTQgfZfDIsE8dL-c-CQsHqxq1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft
Manifest number: 0E20
Signing time: Thu 04 Sep 2025 23:00:39 +0000
Manifest this update: Thu 04 Sep 2025 23:00:39 +0000
Manifest next update: Fri 05 Sep 2025 23:00:39 +0000
Files and hashes: 1: VxTQgfZfDIsE8dL-c-CQsHqxq1g.crl (hash: Bnv1lXBmxBoLJS8d2uqPpHdnO7qCnGbu0fjciFMOKAM=)
2: q4OtYqQ5F8toaT0oHQfCemmVpFY.roa (hash: pSnKgnqoG1TyZ2WLGeGgthK4U38JeBxESDQq72YUX64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/VxTQgfZfDIsE8dL-c-CQsHqxq1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:f5:ed:bd:f4:71:50:ad:9f:85:13:dd:5d:ec:f0:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5714d081f65f0c8b04f1d2fe73e090b07ab1ab58
Validity
Not Before: Sep 4 23:00:39 2025 GMT
Not After : Sep 5 23:00:39 2025 GMT
Subject: CN=cf07aa4bf0358e909b21faa3fb69830bf0c127d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e6:d1:61:ad:de:ba:4a:ec:99:87:93:32:7e:
ac:60:ed:de:bd:c4:37:8f:17:66:f3:31:e9:a4:11:
a2:19:f8:da:1e:d1:16:75:9c:8f:25:a7:ff:55:ac:
86:e7:c5:23:13:be:a2:50:df:68:80:f6:b6:1a:32:
50:24:84:02:20:a4:f9:3c:48:f3:f7:24:ee:9b:1c:
0c:ed:99:70:93:e8:3d:d0:ac:58:93:2c:ce:47:6d:
2d:d4:70:c8:12:32:ef:7d:e1:a6:5f:77:0e:a4:fc:
33:a8:85:a2:b1:45:9b:7b:32:89:93:33:5c:74:ff:
f4:54:04:99:d0:b7:5f:4b:d6:0a:c8:56:64:b2:40:
03:b7:d9:95:db:59:2b:7e:22:49:ff:a3:5b:44:02:
a5:07:00:22:85:1d:b6:06:a6:a9:e5:16:f8:c2:0b:
75:81:34:72:85:55:f7:88:64:57:5b:36:d9:ba:80:
25:f2:85:08:3e:94:52:09:c2:9a:a9:fd:b5:61:c3:
66:19:90:37:51:60:2a:18:e0:70:f3:6c:77:a9:c7:
47:8c:95:1f:78:24:fa:04:ab:12:ef:bc:1c:0f:66:
d1:9b:e3:29:42:2e:15:5f:94:2e:a7:a7:60:5d:df:
4e:d3:90:91:51:07:2e:71:10:c2:9c:b8:3f:03:a7:
09:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:07:AA:4B:F0:35:8E:90:9B:21:FA:A3:FB:69:83:0B:F0:C1:27:D5
X509v3 Authority Key Identifier:
keyid:57:14:D0:81:F6:5F:0C:8B:04:F1:D2:FE:73:E0:90:B0:7A:B1:AB:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxTQgfZfDIsE8dL-c-CQsHqxq1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:36:c6:98:03:d5:cf:5a:f7:45:0b:49:f6:25:0b:5d:36:53:
e2:d6:b8:fe:bd:38:65:e8:3d:37:df:7a:7d:e4:7f:e4:a8:f9:
10:76:b8:6a:a6:f6:77:25:06:0c:45:69:76:11:d3:d7:41:60:
61:bf:22:b5:49:36:34:c2:65:63:f9:3f:ae:64:d9:4e:cd:aa:
5b:49:a0:25:31:ef:65:31:bb:b2:5b:ed:f4:de:21:bf:93:51:
af:85:c0:e0:ff:8d:23:a7:7e:19:24:35:c3:bf:87:2b:e6:38:
c4:55:ac:d4:c4:58:00:12:a5:a3:fe:9d:27:80:c9:b9:8f:61:
4a:33:3a:36:e6:30:bb:85:da:4f:b7:42:b7:64:30:20:1d:91:
8a:c9:03:5f:f7:89:19:61:22:4d:ec:04:b9:a0:6c:b6:85:63:
86:34:8b:82:4e:dd:36:a5:35:72:25:17:50:ff:a6:ad:4e:3b:
87:7b:55:c7:19:04:3f:8a:4e:0f:ee:0f:17:7b:b5:40:1c:83:
7b:66:1c:2a:e1:f9:cf:dd:79:28:39:e1:53:25:a6:e2:57:61:
3b:50:1e:3b:21:b0:aa:3a:94:a5:75:29:c5:9f:51:b2:6a:6b:
9c:3c:0a:d6:8d:33:62:8a:78:a9:7a:07:01:1a:30:26:88:96:
94:08:55:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 07:34:55 2025 by rpki-client