Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft
File: VxoPwBLvuJZQp35vvRLcq9pCjLA.mft (raw, json)
Hash identifier: Jc+sndj6InJ68IZv2zI6gFJu5ky6oB5Ul+qRZctyIZw=
Subject key identifier: 8B:A6:94:71:7F:F9:66:03:43:93:6F:8C:6A:FA:E2:0A:C8:98:54:46
Authority key identifier: 57:1A:0F:C0:12:EF:B8:96:50:A7:7E:6F:BD:12:DC:AB:DA:42:8C:B0
Certificate issuer: /CN=571a0fc012efb89650a77e6fbd12dcabda428cb0
Certificate serial: 01992857DFE7F66347C1C9EA18A4C98EBE67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxoPwBLvuJZQp35vvRLcq9pCjLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft
Manifest number: 1605
Signing time: Mon 08 Sep 2025 08:01:11 +0000
Manifest this update: Mon 08 Sep 2025 08:01:11 +0000
Manifest next update: Tue 09 Sep 2025 08:01:11 +0000
Files and hashes: 1: 5mIqDi-qSZMNQfzVabCDYIualIY.roa (hash: emChHnQclj1wViLAe/VRE5oA1OWGgrZwj1qbaE68eS4=)
2: VxoPwBLvuJZQp35vvRLcq9pCjLA.crl (hash: WXBTjI/HtqJvXc3LG9QI1TM6Vbz7M/siy+ozzTaooNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VxoPwBLvuJZQp35vvRLcq9pCjLA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 08:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:28:57:df:e7:f6:63:47:c1:c9:ea:18:a4:c9:8e:be:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=571a0fc012efb89650a77e6fbd12dcabda428cb0
Validity
Not Before: Sep 8 08:01:11 2025 GMT
Not After : Sep 9 08:01:11 2025 GMT
Subject: CN=8ba694717ff9660343936f8c6afae20ac8985446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ac:15:ef:4c:72:df:0b:be:aa:a9:48:70:93:
29:4f:ea:17:eb:ab:49:a7:aa:45:a0:03:81:a0:06:
c7:f3:91:91:2d:f5:fc:5d:66:32:27:5b:22:39:c3:
e5:23:f4:d3:13:d0:e6:6b:e5:16:ce:db:71:96:c8:
f0:1f:f5:38:f7:7c:01:44:91:70:17:fb:56:8e:ed:
5b:43:6c:3f:d2:b2:3d:88:ec:ad:44:3d:07:db:52:
81:0d:de:e1:f2:d4:21:b9:84:57:42:99:ab:1c:08:
aa:81:53:fc:81:92:16:53:43:72:7e:91:c8:0f:ff:
22:c6:49:8a:44:b7:dc:f5:ed:af:28:9e:1a:64:c8:
c6:6c:78:eb:bb:92:cd:56:85:64:3a:ac:e1:7f:6b:
a9:3e:e6:22:9d:d1:5f:d7:78:f0:a4:44:4a:33:bf:
1c:b4:e6:40:ec:06:12:2d:20:30:35:9c:d7:f0:a0:
41:9e:af:2f:5b:1e:e6:fd:20:87:c6:57:58:ad:51:
aa:b8:90:a7:06:1f:32:df:e3:54:08:64:a9:fb:89:
fe:4b:6e:96:49:79:22:6d:f2:ee:25:80:53:16:5f:
83:a9:7c:c9:9e:0c:4a:38:fd:57:d7:43:cd:c0:54:
29:ad:e1:7b:48:01:46:63:1a:31:22:f3:fc:24:b8:
52:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A6:94:71:7F:F9:66:03:43:93:6F:8C:6A:FA:E2:0A:C8:98:54:46
X509v3 Authority Key Identifier:
keyid:57:1A:0F:C0:12:EF:B8:96:50:A7:7E:6F:BD:12:DC:AB:DA:42:8C:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxoPwBLvuJZQp35vvRLcq9pCjLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:ba:ac:5f:e8:cd:a8:15:f8:7d:06:79:70:a2:5a:a0:f7:81:
d0:dc:c6:10:4b:e4:a7:d3:e3:c3:64:fc:83:bf:bf:28:46:61:
e4:09:4d:6f:63:5e:8e:62:8d:da:d1:62:30:2e:f2:41:7d:eb:
d1:c1:63:f4:29:41:2d:86:b8:39:38:ea:4e:9e:0c:d2:31:a7:
75:aa:88:e6:ee:dc:5f:f7:da:fb:c6:57:b0:f8:9b:94:30:d4:
ab:c8:34:ad:fb:5f:16:c6:ed:dd:51:0c:7b:0c:90:51:c8:c7:
e5:e3:6c:31:de:36:2b:5d:ed:dd:cd:6a:22:fa:c7:54:84:ee:
9e:10:34:2c:bd:81:21:cd:63:16:51:b1:0e:ab:66:8d:19:7a:
68:10:39:88:60:58:5f:9b:c2:de:f6:d1:36:6a:da:e1:d2:2d:
ce:09:09:80:5a:6c:55:cd:60:fe:91:f7:e7:c9:74:43:71:bd:
c9:8b:25:4f:c7:57:7e:6b:68:80:f6:34:94:fa:22:21:d4:23:
0b:ce:45:a2:35:e0:b3:23:1f:8d:ab:2f:91:02:a0:10:df:86:
35:2b:4c:9d:42:c3:91:aa:71:76:2a:a0:bc:7a:52:f6:39:78:
a9:1e:4b:59:79:aa:b7:be:82:1e:42:fc:ec:9e:56:7e:17:40:
5e:88:50:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 16:09:26 2025 by rpki-client