Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft
File: VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft (raw, json)
Hash identifier: UDCE9J2RWt7XVHdon9xI/kE7ZzJutwvY1eP6cngsxzY=
Subject key identifier: DD:10:80:4A:15:DB:A1:4A:36:04:0C:8C:B9:BD:F5:03:24:C9:3D:3F
Authority key identifier: 54:0F:4A:1B:92:33:8B:49:CA:63:02:12:19:05:9C:E5:70:FF:59:64
Certificate issuer: /CN=540f4a1b92338b49ca63021219059ce570ff5964
Certificate serial: 0199345B69AC5564D96B709BA3BA2389E1F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VA9KG5Izi0nKYwISGQWc5XD_WWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft
Manifest number: 04B0
Signing time: Wed 10 Sep 2025 16:00:30 +0000
Manifest this update: Wed 10 Sep 2025 16:00:30 +0000
Manifest next update: Thu 11 Sep 2025 16:00:30 +0000
Files and hashes: 1: VA9KG5Izi0nKYwISGQWc5XD_WWQ.crl (hash: Q5N7rtaB2cvlRHeVRbM/GanSYvbBPV6ZdzhD2PWEY64=)
2: _WaDfELTBc_dUmy6Cu013iGAFy4.roa (hash: 4Ui783wG8atURB8iqdX/TxaJyYCKy9S+Gr0JJXsrTgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VA9KG5Izi0nKYwISGQWc5XD_WWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:5b:69:ac:55:64:d9:6b:70:9b:a3:ba:23:89:e1:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=540f4a1b92338b49ca63021219059ce570ff5964
Validity
Not Before: Sep 10 16:00:30 2025 GMT
Not After : Sep 11 16:00:30 2025 GMT
Subject: CN=dd10804a15dba14a36040c8cb9bdf50324c93d3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:10:81:c1:fb:0d:3f:75:40:e6:8d:2a:c2:5a:
d0:9f:a3:f7:68:74:48:bc:87:95:2a:c4:bc:82:dc:
59:cb:2f:85:76:d4:d1:cf:5a:fc:37:30:55:13:5c:
72:2e:db:e3:33:19:d4:f8:16:97:7d:23:27:05:df:
63:4d:05:18:cb:ef:23:23:17:1c:15:27:d7:c4:a9:
8d:2a:bb:1e:57:77:9d:b7:ee:43:42:fd:de:53:00:
5b:7b:a3:25:3e:cc:ab:db:ed:e3:73:c9:e7:72:fe:
3d:36:ed:c1:a4:c2:4b:de:aa:c2:8b:a1:7d:43:bf:
c8:14:62:2a:32:dd:a0:7b:7a:99:ee:fb:5b:51:76:
ba:5d:50:95:d4:e1:2c:61:00:20:04:29:ea:77:8f:
66:a8:ab:4e:31:a4:be:e5:34:8f:e0:c7:90:97:89:
33:42:03:fa:fd:52:20:97:38:c9:85:21:5c:42:0a:
d8:c2:2a:b4:cf:7f:70:7f:8c:80:e2:42:aa:57:2e:
be:e6:79:b6:b3:53:eb:d5:88:d2:21:59:ae:e2:21:
13:a1:92:ff:51:c6:15:74:c7:fc:e9:87:c5:c7:15:
19:0f:e0:bc:e1:ec:70:db:ed:82:7b:bf:1e:bc:eb:
05:5e:2b:f6:ed:ca:82:f5:7f:a6:9c:58:44:74:fc:
49:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:10:80:4A:15:DB:A1:4A:36:04:0C:8C:B9:BD:F5:03:24:C9:3D:3F
X509v3 Authority Key Identifier:
keyid:54:0F:4A:1B:92:33:8B:49:CA:63:02:12:19:05:9C:E5:70:FF:59:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VA9KG5Izi0nKYwISGQWc5XD_WWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:83:72:9e:89:25:fd:fd:98:f4:68:d4:e8:5c:ff:5c:48:52:
c5:99:33:d0:3f:97:9d:33:aa:a5:1c:c3:f4:6f:5d:c3:d5:04:
b3:d4:8a:7c:f0:ce:11:5e:a7:86:1c:a2:c4:39:1f:19:e1:00:
fb:d0:e8:e5:cf:ee:03:31:a6:1c:c5:aa:3d:d2:a2:1c:88:40:
f4:49:76:19:33:24:b3:83:eb:23:23:5d:93:b9:86:6f:8c:aa:
2c:c1:31:f5:4e:70:e9:ba:d4:84:8e:d4:52:33:b4:f2:8b:fd:
fa:17:de:dc:5a:7c:45:1a:cc:e2:e8:a0:7f:18:27:ca:e5:32:
97:19:7b:88:dc:06:b2:27:12:4f:b2:04:c8:97:0e:a7:8f:5d:
07:ef:d5:6c:78:8f:7f:c0:f8:0a:a6:d7:e7:e2:bb:38:f9:25:
68:6e:d0:2f:f0:4c:ba:85:c0:a5:05:c0:0d:3c:47:e5:af:4a:
e5:ac:f8:0f:2d:05:4a:a5:47:40:73:0a:80:67:09:f7:52:11:
f4:a4:ac:5c:1d:52:64:be:49:ca:e1:f4:57:8d:d5:34:03:03:
66:7c:36:8b:95:65:f6:71:f8:10:d8:ee:15:e5:93:53:f2:83:
2d:34:f9:3b:79:b5:db:f9:8e:11:57:79:b3:5e:ac:61:2c:33:
48:ec:4e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 00:14:39 2025 by rpki-client