Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.mft
File: VWgo1ipbiT4i1YZ_GhQtGY6F4as.mft (raw, json)
Hash identifier: T8kw8UhOFBWfVdknScf/zIdZShwBW4cIWdfnJtySL1Y=
Subject key identifier: 85:72:DA:40:F9:4F:2D:DC:C8:13:5E:59:48:78:20:A3:25:B4:F9:E1
Authority key identifier: 55:68:28:D6:2A:5B:89:3E:22:D5:86:7F:1A:14:2D:19:8E:85:E1:AB
Certificate issuer: /CN=556828d62a5b893e22d5867f1a142d198e85e1ab
Certificate serial: 0199221EA38D03954C043BAA17E4C1C5DA1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VWgo1ipbiT4i1YZ_GhQtGY6F4as.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.mft
Manifest number: DC
Signing time: Sun 07 Sep 2025 03:00:57 +0000
Manifest this update: Sun 07 Sep 2025 03:00:57 +0000
Manifest next update: Mon 08 Sep 2025 03:00:57 +0000
Files and hashes: 1: VWgo1ipbiT4i1YZ_GhQtGY6F4as.crl (hash: dKqZpHJTlGC02CXrse+yQ2Jaobch7hpawLX0cnve5V4=)
2: w9nvjOWk8C3C6okM2fJbltiz6Ts.roa (hash: cpGlnXUiTmun4rJ5XWY0h3JOGdRAWAFOUtSEsrbjwUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.mft
rsync://rpki.ripe.net/repository/DEFAULT/VWgo1ipbiT4i1YZ_GhQtGY6F4as.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:a3:8d:03:95:4c:04:3b:aa:17:e4:c1:c5:da:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=556828d62a5b893e22d5867f1a142d198e85e1ab
Validity
Not Before: Sep 7 03:00:57 2025 GMT
Not After : Sep 8 03:00:57 2025 GMT
Subject: CN=8572da40f94f2ddcc8135e59487820a325b4f9e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:13:aa:8a:65:b8:ed:9c:a1:1f:34:a7:04:ea:
e6:e0:b6:5a:f0:dd:ef:0d:80:31:2d:36:a6:14:9a:
d5:35:ef:0f:d0:e0:4f:88:e1:b3:8d:0a:94:5f:18:
1b:f3:49:10:62:6f:82:ae:44:3d:a2:c8:5a:ad:03:
83:83:d7:f4:90:cd:29:8f:e0:51:51:fa:d5:22:56:
17:61:ae:c0:03:d2:c0:ac:1e:ee:ee:4b:dc:fc:00:
cd:39:0f:44:e0:3f:e1:32:f9:fb:2b:da:2e:01:26:
bd:da:39:75:05:2c:20:26:15:60:44:f2:e5:6e:eb:
ad:f6:62:c2:2b:fc:bb:31:7c:fa:86:8c:73:87:cc:
81:99:28:09:85:80:0d:9c:8c:52:61:32:18:87:55:
84:8d:6c:46:ea:10:e5:a4:2a:91:47:34:ec:9e:9b:
64:c0:0d:83:03:2c:4c:f8:39:70:93:93:75:b8:c2:
23:29:2d:19:ac:60:06:79:1a:89:aa:7d:cb:e5:7a:
35:8b:a4:15:00:3d:28:2f:6b:66:af:89:05:a8:7c:
57:c5:09:b3:94:f2:5f:4c:1c:63:91:2d:49:28:6e:
25:b8:14:a7:b8:d6:11:16:75:0f:1f:e4:c7:af:b7:
53:fd:22:d7:69:ce:d3:11:71:6a:56:98:17:51:1f:
48:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:72:DA:40:F9:4F:2D:DC:C8:13:5E:59:48:78:20:A3:25:B4:F9:E1
X509v3 Authority Key Identifier:
keyid:55:68:28:D6:2A:5B:89:3E:22:D5:86:7F:1A:14:2D:19:8E:85:E1:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VWgo1ipbiT4i1YZ_GhQtGY6F4as.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:a2:28:3c:00:8d:50:2a:4e:ff:56:dc:64:27:e5:d8:e6:1e:
95:57:6b:fb:85:da:c9:4a:a9:46:5a:e0:3b:62:a3:4a:c3:26:
55:d2:61:ef:64:db:ba:b6:1c:22:67:97:b2:16:74:03:77:8f:
30:80:91:64:fb:1e:fc:54:b7:83:f5:8c:fa:6f:22:b2:d8:cc:
55:d2:b5:2a:98:6f:cd:91:ed:75:d9:d2:90:e4:22:73:29:95:
de:35:1c:7c:10:ea:c1:a3:a4:8e:7f:f0:d3:c5:64:f1:3c:6e:
c4:52:1a:45:92:e6:6f:29:28:96:32:60:dd:47:e3:b1:ce:00:
fd:78:07:b2:6d:c9:d2:06:aa:17:ca:f8:19:54:5c:8e:87:db:
25:bf:e1:7b:89:6f:1f:b0:3a:7d:7f:25:ff:e0:13:7c:57:3d:
80:ae:3a:f4:86:e6:e3:83:35:c8:19:82:d4:8e:ef:a9:d3:02:
ef:11:d4:d0:cd:45:49:af:b1:65:9e:73:ff:73:d7:22:f5:c6:
49:72:af:4b:77:a8:65:85:c7:24:f3:16:9b:b9:7f:ed:ca:31:
8f:6d:f6:22:f3:c3:a2:e6:c9:2a:ba:ac:87:95:89:68:c1:14:
53:1a:84:76:37:88:0f:65:ed:09:7f:0a:31:c0:72:d7:00:9c:
32:f3:59:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:38 2025 by rpki-client