Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.mft
File: VzCjLzFiRs4LFHu4lejN8K7UPtY.mft (raw, json)
Hash identifier: 6mAblo5EDhkU6VmQ5Y1FKVnTd0RKk6bRDFgQ8hIvlTo=
Subject key identifier: EA:7C:60:5C:9A:65:19:D9:8D:E0:E6:05:A0:5E:0D:B4:DA:94:5C:BC
Authority key identifier: 57:30:A3:2F:31:62:46:CE:0B:14:7B:B8:95:E8:CD:F0:AE:D4:3E:D6
Certificate issuer: /CN=5730a32f316246ce0b147bb895e8cdf0aed43ed6
Certificate serial: 0197D10572A69AA320C8AFC60A1BAC22AAEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VzCjLzFiRs4LFHu4lejN8K7UPtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.mft
Manifest number: 0871
Signing time: Thu 03 Jul 2025 16:01:24 +0000
Manifest this update: Thu 03 Jul 2025 16:01:24 +0000
Manifest next update: Fri 04 Jul 2025 16:01:24 +0000
Files and hashes: 1: JdnQsGvdkhLMYKHimmIYbcmtu_4.roa (hash: XQ8/SW7MphrctHqH7PZ0NzqyE28ii273Q0FygBQXgEo=)
2: VzCjLzFiRs4LFHu4lejN8K7UPtY.crl (hash: gBpS9jYFkPVAPrt5T3WnysvxpoW/z40ucLckHzFr0nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VzCjLzFiRs4LFHu4lejN8K7UPtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d1:05:72:a6:9a:a3:20:c8:af:c6:0a:1b:ac:22:aa:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5730a32f316246ce0b147bb895e8cdf0aed43ed6
Validity
Not Before: Jul 3 16:01:24 2025 GMT
Not After : Jul 4 16:01:24 2025 GMT
Subject: CN=ea7c605c9a6519d98de0e605a05e0db4da945cbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:34:14:e4:6c:6d:56:5b:32:59:f4:4e:47:3a:
b3:97:52:79:d4:e0:ad:bc:a7:73:8b:50:94:47:a5:
af:fa:8c:6c:45:9e:31:7f:95:b7:a0:04:9a:2b:9e:
29:f7:02:ac:f9:6f:ab:88:c2:40:f8:d6:92:63:26:
ce:ba:6b:e2:e1:eb:8c:ab:54:e6:04:98:ce:cd:f2:
d3:bc:56:f7:fe:68:ac:b8:26:c3:3a:97:9b:06:48:
59:cb:00:06:2e:95:af:e3:de:39:e4:e2:1e:07:4c:
85:30:48:a7:74:a7:f5:e0:6c:5d:53:d9:98:94:75:
08:3f:df:e8:f4:aa:21:b9:52:43:5d:f4:a1:1c:06:
e8:a1:4f:3a:dd:ef:6d:0e:4e:9b:f5:2e:6f:52:d7:
31:83:f5:d1:98:68:d0:78:8f:fd:85:d2:ac:ca:ea:
7f:33:e0:f0:22:ee:3a:b6:19:1e:d6:4f:38:a8:74:
c9:70:f2:65:9f:db:0c:7e:c1:ea:5f:06:ad:11:f2:
96:5d:55:10:ee:b5:52:83:32:1d:fd:14:5d:94:0f:
c0:4a:6f:b2:86:fe:11:b8:93:31:d2:38:da:14:02:
7f:fa:c2:e3:d4:20:d3:e0:89:7c:6d:ca:1e:06:cf:
63:c4:48:ae:21:10:8b:f1:83:22:ef:01:0b:4b:7e:
2d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:7C:60:5C:9A:65:19:D9:8D:E0:E6:05:A0:5E:0D:B4:DA:94:5C:BC
X509v3 Authority Key Identifier:
keyid:57:30:A3:2F:31:62:46:CE:0B:14:7B:B8:95:E8:CD:F0:AE:D4:3E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzCjLzFiRs4LFHu4lejN8K7UPtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:55:43:1b:ad:73:c4:a5:0d:15:a6:2e:7a:fb:60:a2:fb:b9:
91:b2:c7:06:ac:d9:7f:be:56:ef:db:5a:2a:7d:9b:57:27:88:
c8:e1:40:a5:de:45:72:ca:16:50:47:94:45:f1:32:ec:b7:6c:
14:7e:25:d5:3c:e2:47:11:b6:4e:2c:6d:1a:94:e6:41:b8:86:
65:41:f1:7e:03:d6:cb:09:ef:90:18:13:21:68:87:1f:a7:99:
92:dc:be:84:ef:b6:7b:de:8a:1f:21:cc:a1:55:9b:38:85:0d:
65:6d:42:b9:33:22:9a:67:f8:1f:4b:db:3e:d1:a7:59:8a:c1:
e6:55:f6:91:75:51:5c:2b:f5:26:f1:51:2f:e9:64:2d:8d:62:
9b:e6:f8:8a:38:d3:eb:64:0c:3a:4f:ad:16:8f:47:75:fd:47:
52:de:6c:6c:97:f8:f7:0e:94:04:b0:4e:be:a4:ba:f4:c9:4b:
bc:f2:82:81:87:ec:47:57:0e:e1:19:8c:ef:fb:e7:d4:b1:04:
fa:a2:89:97:fc:da:b5:fe:00:46:a8:99:69:8f:96:e9:e9:05:
7d:89:f1:6f:db:4e:3d:aa:46:c8:98:ed:67:62:e6:10:1c:fd:
e5:7c:af:1a:27:69:d3:f7:bd:8b:40:83:4b:c8:4e:b2:fa:f3:
b7:ee:6a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 23:03:44 2025 by rpki-client