Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft
File: VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft (raw, json)
Hash identifier: ZY1SwG4DZNc2c2KUW/KDC3dBxu3cOVBsw1fna0ornkA=
Subject key identifier: 75:2E:AF:37:26:A5:AF:05:CA:A9:B2:22:64:47:54:F9:ED:53:F1:A4
Authority key identifier: 57:14:D0:81:F6:5F:0C:8B:04:F1:D2:FE:73:E0:90:B0:7A:B1:AB:58
Certificate issuer: /CN=5714d081f65f0c8b04f1d2fe73e090b07ab1ab58
Certificate serial: 0197496845564A6E379F26D085013D9D3D4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxTQgfZfDIsE8dL-c-CQsHqxq1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft
Manifest number: 0D31
Signing time: Sat 07 Jun 2025 08:00:59 +0000
Manifest this update: Sat 07 Jun 2025 08:00:59 +0000
Manifest next update: Sun 08 Jun 2025 08:00:59 +0000
Files and hashes: 1: VxTQgfZfDIsE8dL-c-CQsHqxq1g.crl (hash: Ht9iTNy8wu9hKKXSD6nvAzNBw+RdNL1s82SVO9iljv0=)
2: q4OtYqQ5F8toaT0oHQfCemmVpFY.roa (hash: pSnKgnqoG1TyZ2WLGeGgthK4U38JeBxESDQq72YUX64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/VxTQgfZfDIsE8dL-c-CQsHqxq1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:45:56:4a:6e:37:9f:26:d0:85:01:3d:9d:3d:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5714d081f65f0c8b04f1d2fe73e090b07ab1ab58
Validity
Not Before: Jun 7 08:00:59 2025 GMT
Not After : Jun 8 08:00:59 2025 GMT
Subject: CN=752eaf3726a5af05caa9b222644754f9ed53f1a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:31:af:77:b6:2b:ec:d7:68:de:6f:f2:58:da:
35:78:c1:65:2b:f2:1c:69:6c:6a:ef:5d:fa:ed:d4:
04:56:aa:10:cf:ac:e7:56:04:38:c9:e7:8b:4b:be:
5b:78:f3:fe:c3:f9:4e:8c:3f:5e:6d:6e:5d:f5:ca:
81:46:03:cc:26:d7:64:04:67:b8:5b:cf:75:27:84:
ed:3d:70:7c:e3:fb:61:20:f2:4c:c1:6e:c9:89:5d:
a3:b8:60:84:2e:f4:56:fd:1e:77:f2:a4:8e:52:14:
9a:e2:99:9f:c3:17:da:11:65:4c:fb:f2:ed:f8:ba:
9b:a9:57:b3:c2:29:7b:a8:b7:66:62:14:6c:b8:b8:
a1:80:16:94:0d:a2:d3:f6:fc:37:57:7d:d2:cd:27:
8b:35:a4:46:00:93:bd:c1:a2:76:f4:c9:18:a3:2a:
7c:80:db:09:9f:af:88:ac:f0:c6:44:b0:4c:70:16:
54:d1:fd:e1:b1:5f:fe:18:21:2a:df:24:d7:b0:9d:
45:04:38:78:0f:d1:05:fc:cb:46:bd:3e:ca:ba:e0:
d2:d3:3a:b0:ee:ac:8a:c1:2e:95:8a:ce:b5:a1:b9:
28:e0:54:c9:8c:6b:6f:ff:02:9d:fd:f4:55:c5:f8:
bf:3c:7e:ee:da:31:ba:86:df:f9:60:88:f8:2c:86:
4e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:2E:AF:37:26:A5:AF:05:CA:A9:B2:22:64:47:54:F9:ED:53:F1:A4
X509v3 Authority Key Identifier:
keyid:57:14:D0:81:F6:5F:0C:8B:04:F1:D2:FE:73:E0:90:B0:7A:B1:AB:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxTQgfZfDIsE8dL-c-CQsHqxq1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:83:68:db:49:61:56:df:46:64:ed:35:c2:ad:e0:b5:86:03:
87:b9:57:23:ad:3c:1c:d2:a3:a9:b9:9a:d2:74:68:f0:c9:c0:
09:92:9b:7f:54:17:bc:b2:29:ba:2d:24:9f:8e:3e:4a:00:c2:
38:d9:ef:46:4b:bc:e0:15:45:89:26:94:60:ee:85:46:20:e8:
97:32:b4:7e:2d:0f:b6:ae:c5:45:f7:cc:cb:20:40:52:e3:ba:
2a:21:df:ee:6b:bd:00:76:b8:98:e8:2c:d2:02:53:bc:81:fc:
07:43:a5:1b:65:0c:c5:8f:88:5c:1a:29:27:91:84:80:b6:b0:
28:08:e7:8e:ab:36:89:f1:a9:47:7b:4d:81:0e:57:e1:b0:89:
7f:ad:b2:75:20:9b:aa:9f:ff:a6:7f:0b:0e:71:80:92:26:76:
68:99:87:c2:14:cb:01:47:ab:c6:48:f8:28:89:d2:a4:e4:b7:
0b:85:e9:53:3f:13:06:e5:b8:0e:b7:fc:d1:ef:4e:af:c3:51:
c5:07:7d:19:69:f2:56:74:ca:16:06:da:f2:8b:f4:e1:11:57:
62:3b:df:0e:72:88:5d:f6:2d:d5:e0:d0:36:d7:df:50:96:3f:
e4:dc:44:64:8e:5e:15:ee:ad:f2:ab:45:33:7f:78:df:e9:2c:
ec:6d:e7:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:28:29 2025 by rpki-client