Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/d158e1-512b-4486-af87-b490a6d6be25/1/VXe0uHq4aspXflbjjVuKWBPMzD0.mft
File: VXe0uHq4aspXflbjjVuKWBPMzD0.mft (raw, json)
Hash identifier: kktxRKSti9HG7iJm2zIxtKKrd2Cbc3ZuddGUyjLYigo=
Subject key identifier: 21:8E:4B:7B:03:61:97:0A:97:18:BA:56:96:6D:B1:8A:6C:A2:9C:9D
Authority key identifier: 55:77:B4:B8:7A:B8:6A:CA:57:7E:56:E3:8D:5B:8A:58:13:CC:CC:3D
Certificate issuer: /CN=5577b4b87ab86aca577e56e38d5b8a5813cccc3d
Certificate serial: 0198D5F1A059913FC57C482ADDEB4470E53E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VXe0uHq4aspXflbjjVuKWBPMzD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/d158e1-512b-4486-af87-b490a6d6be25/1/VXe0uHq4aspXflbjjVuKWBPMzD0.mft
Manifest number: 117C
Signing time: Sat 23 Aug 2025 08:00:38 +0000
Manifest this update: Sat 23 Aug 2025 08:00:38 +0000
Manifest next update: Sun 24 Aug 2025 08:00:38 +0000
Files and hashes: 1: P9bs-w5DkWpu1aBuTV3PHAzvH6Q.roa (hash: oAepJ4+j0gmtz7XxqoB+yGPsz6tmKuFLhq6h9fcVyTY=)
2: VXe0uHq4aspXflbjjVuKWBPMzD0.crl (hash: 8WR1cIacUL1KM8fJ9WeD3dCYE7YdXzwwAMBVbAiflFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/d158e1-512b-4486-af87-b490a6d6be25/1/VXe0uHq4aspXflbjjVuKWBPMzD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/d158e1-512b-4486-af87-b490a6d6be25/1/VXe0uHq4aspXflbjjVuKWBPMzD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VXe0uHq4aspXflbjjVuKWBPMzD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:a0:59:91:3f:c5:7c:48:2a:dd:eb:44:70:e5:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5577b4b87ab86aca577e56e38d5b8a5813cccc3d
Validity
Not Before: Aug 23 08:00:38 2025 GMT
Not After : Aug 24 08:00:38 2025 GMT
Subject: CN=218e4b7b0361970a9718ba56966db18a6ca29c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:34:01:13:a3:f2:c8:e8:f9:85:cf:75:d7:5e:
b3:27:98:4f:54:72:ea:94:18:63:cb:7c:be:6d:b1:
88:87:90:09:7a:5e:99:79:1c:c2:32:b9:41:f9:a3:
d7:a8:bb:10:10:3c:c0:50:ab:5d:5d:28:d5:a1:d9:
05:af:91:1e:56:b0:15:b7:cc:2b:70:f2:be:29:a0:
83:0b:8e:53:70:ac:b2:9f:16:c3:ef:51:3a:1c:f0:
81:3e:9e:d3:44:8b:5f:a4:98:5a:f7:7c:b6:c1:dc:
9a:6d:a8:2a:cd:cb:2b:f3:b4:bd:88:3f:a8:6d:69:
87:95:7d:5b:43:b5:e8:5c:7d:a6:53:c1:2b:5a:3b:
e0:00:b9:e7:35:9e:aa:f5:57:9f:1f:2a:a3:8f:c6:
c5:95:cb:21:11:5c:8e:d6:54:c7:d5:f7:3e:0e:24:
20:5f:16:51:d3:a9:57:f5:22:a9:df:d8:f9:78:92:
6f:9b:f2:91:70:66:a6:ba:b4:db:ab:07:65:c8:b7:
4d:70:88:cc:2a:15:a6:4c:ff:c3:78:89:94:0a:fb:
d9:64:f3:a2:d3:8c:57:58:e8:fc:49:3d:a2:87:23:
2c:26:45:11:b7:a1:79:55:65:e7:57:e7:97:7d:f0:
63:4d:51:a1:4c:4f:af:09:28:51:03:69:64:1b:75:
c2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:8E:4B:7B:03:61:97:0A:97:18:BA:56:96:6D:B1:8A:6C:A2:9C:9D
X509v3 Authority Key Identifier:
keyid:55:77:B4:B8:7A:B8:6A:CA:57:7E:56:E3:8D:5B:8A:58:13:CC:CC:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXe0uHq4aspXflbjjVuKWBPMzD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d158e1-512b-4486-af87-b490a6d6be25/1/VXe0uHq4aspXflbjjVuKWBPMzD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d158e1-512b-4486-af87-b490a6d6be25/1/VXe0uHq4aspXflbjjVuKWBPMzD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:10:89:72:26:77:57:e7:6b:c5:d3:7e:d6:b5:01:de:ac:a8:
7b:5f:a2:7b:38:75:f5:d4:5a:18:f1:1e:4e:b4:11:54:d9:33:
ef:37:1c:a1:d5:83:0c:5b:23:34:d9:dd:e0:fb:ab:4e:8e:a2:
16:a0:2b:db:77:42:0e:0c:95:77:8c:1d:71:1c:7a:7d:43:a1:
5c:d9:4a:8d:a4:4e:dc:2e:ee:e1:00:33:13:98:d1:3c:f0:74:
b3:47:32:21:c4:13:b6:06:9b:e6:01:01:0b:07:e2:09:be:94:
8a:47:61:75:19:2a:71:cc:68:74:05:1a:4f:04:64:cb:ec:71:
a5:74:f2:5a:09:f9:93:22:c3:3e:08:f0:25:26:03:61:1a:de:
94:86:34:69:68:ff:48:e1:dc:ba:a2:ec:45:df:2e:d4:72:30:
94:87:3d:08:b5:2a:17:87:da:b0:db:33:9b:ef:6b:52:05:e8:
43:4d:df:58:af:1d:ff:83:91:0e:ed:ce:aa:89:ae:83:69:f8:
9a:e5:58:65:99:b7:54:3d:0f:d2:57:54:0e:3f:cc:bf:6a:60:
e6:4f:f6:89:63:61:f3:09:81:67:3f:34:71:96:18:f3:31:4e:
66:96:32:2c:8a:26:b7:4b:aa:bc:9b:17:0d:0a:c0:76:19:24:
39:5f:f0:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:28:56 2025 by rpki-client