Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/759288-10de-4916-b4d9-d0b9dc3aca23/1/vlR-u1wFb3ApbkCGISYfPE4tQjk.mft
File: vlR-u1wFb3ApbkCGISYfPE4tQjk.mft (raw, json)
Hash identifier: 6uhFF2Ks58tIx+oAMmk5En5AxfT+5BiPzswblLWIdlg=
Subject key identifier: 39:86:F4:4F:D6:72:17:4A:19:15:F7:FD:A4:2F:AE:E9:AE:A3:28:66
Authority key identifier: BE:54:7E:BB:5C:05:6F:70:29:6E:40:86:21:26:1F:3C:4E:2D:42:39
Certificate issuer: /CN=be547ebb5c056f70296e408621261f3c4e2d4239
Certificate serial: 01984966226848DF3752BD4AE9CAC1BB9582
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vlR-u1wFb3ApbkCGISYfPE4tQjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/759288-10de-4916-b4d9-d0b9dc3aca23/1/vlR-u1wFb3ApbkCGISYfPE4tQjk.mft
Manifest number: 0AE7
Signing time: Sun 27 Jul 2025 01:01:26 +0000
Manifest this update: Sun 27 Jul 2025 01:01:26 +0000
Manifest next update: Mon 28 Jul 2025 01:01:26 +0000
Files and hashes: 1: CKAk2cC-uYUGuYFqMOzXbvUXtPM.roa (hash: BpxkyCoQfkm6yG5imjMFMQgDsZS9FxcArr/Be2DDC9M=)
2: vlR-u1wFb3ApbkCGISYfPE4tQjk.crl (hash: iHrlnott8ge8GiQJlP7rbD9MHKblONFKp6Tg9acA/bY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/759288-10de-4916-b4d9-d0b9dc3aca23/1/vlR-u1wFb3ApbkCGISYfPE4tQjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/759288-10de-4916-b4d9-d0b9dc3aca23/1/vlR-u1wFb3ApbkCGISYfPE4tQjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vlR-u1wFb3ApbkCGISYfPE4tQjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:22:68:48:df:37:52:bd:4a:e9:ca:c1:bb:95:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be547ebb5c056f70296e408621261f3c4e2d4239
Validity
Not Before: Jul 27 01:01:26 2025 GMT
Not After : Jul 28 01:01:26 2025 GMT
Subject: CN=3986f44fd672174a1915f7fda42faee9aea32866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:37:24:d9:2a:81:e1:bd:b6:2e:a8:b8:77:15:
e2:a2:0a:bc:d2:25:55:06:14:93:87:8d:85:0d:0f:
42:5d:4e:c0:14:59:0a:69:27:47:bc:b2:a4:db:c3:
5d:d7:7f:95:2d:67:cb:87:66:48:8a:20:f6:66:df:
3c:5f:cd:37:4d:ed:dc:6c:a0:fb:d9:9d:78:2d:5d:
bb:95:9b:78:dd:c4:4a:a1:8b:50:00:0a:01:1b:c1:
09:41:60:cb:60:fc:c1:19:8d:61:5d:08:a4:ff:a6:
99:7c:c5:e8:b9:89:38:b2:44:14:45:e7:e4:90:d1:
35:9b:78:56:72:fe:0b:e0:64:f0:fa:0d:b6:a4:c4:
3a:74:8e:00:bb:e9:47:1a:82:5f:ed:4c:32:62:60:
61:f1:4d:32:15:a1:ff:e4:29:54:89:7c:9a:b4:e5:
95:da:ab:3e:ed:9b:99:42:3e:58:5c:bd:ba:4a:16:
3e:0b:f7:51:ec:02:d6:8d:b1:c3:59:d5:6a:87:5f:
f3:e2:0f:e8:65:df:25:b2:d4:08:a5:10:74:fc:cd:
2b:0d:e0:92:5e:78:9b:06:af:22:41:ee:26:f2:c2:
2a:b5:e1:34:a8:b3:39:f7:61:42:4e:e3:a1:68:fb:
fa:fd:6f:e6:36:80:20:38:0e:32:5d:8c:9c:2b:c3:
9d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:86:F4:4F:D6:72:17:4A:19:15:F7:FD:A4:2F:AE:E9:AE:A3:28:66
X509v3 Authority Key Identifier:
keyid:BE:54:7E:BB:5C:05:6F:70:29:6E:40:86:21:26:1F:3C:4E:2D:42:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlR-u1wFb3ApbkCGISYfPE4tQjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/759288-10de-4916-b4d9-d0b9dc3aca23/1/vlR-u1wFb3ApbkCGISYfPE4tQjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/759288-10de-4916-b4d9-d0b9dc3aca23/1/vlR-u1wFb3ApbkCGISYfPE4tQjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:07:ad:3f:db:61:29:2f:48:ce:94:f0:28:9e:a9:da:f1:54:
46:ae:3e:7a:92:fd:fb:f1:ca:d5:8a:6e:59:79:3a:8b:4e:d9:
41:33:6d:2b:00:a5:99:ff:ca:33:e6:05:42:a4:80:9e:97:2a:
0c:bd:36:52:95:81:61:26:6d:be:82:fb:b7:32:de:2a:62:c7:
44:15:e0:b1:fc:af:2b:3e:aa:f6:12:79:af:5c:63:e5:48:70:
ee:9a:84:fb:7b:c5:78:3a:a1:0e:4f:57:c0:ee:f4:29:c7:d7:
4c:95:5b:f1:cc:92:08:f8:f7:6d:e5:de:bd:b3:5d:f8:ab:d3:
c4:02:3f:35:65:ea:dd:fe:4e:61:ae:30:d6:eb:95:d4:c1:eb:
46:22:a3:ec:89:b6:a2:63:8b:08:99:3f:9d:65:7d:ac:85:29:
55:60:e2:29:46:a8:11:0d:86:db:e8:f7:bb:43:2b:5e:e1:73:
33:f5:06:47:a0:a9:82:b1:87:4c:8f:8b:80:5f:27:d6:ca:3c:
6c:98:d7:fe:86:71:46:c0:63:00:f1:77:82:3b:34:4b:0b:5d:
ee:61:37:0d:0c:d1:68:ee:14:ed:0b:09:92:54:0b:16:d8:2c:
25:45:03:b3:ac:53:f7:a3:18:4f:7d:c9:d9:34:e3:39:9c:89:
2a:ec:6a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:53:07 2025 by rpki-client