Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/be1c97-418f-4e46-bc1c-ee03f3de44aa/1/VmRpui7FavQFn4UHViCEec4VW3o.mft
File: VmRpui7FavQFn4UHViCEec4VW3o.mft (raw, json)
Hash identifier: EjaxJeVJkjCViZr6/x7ImylBL9W02Yt8RdffTj8+4xE=
Subject key identifier: FF:75:48:FC:C0:44:46:D2:63:AC:E7:9D:5D:E4:AA:1A:A9:C3:2C:E8
Authority key identifier: 56:64:69:BA:2E:C5:6A:F4:05:9F:85:07:56:20:84:79:CE:15:5B:7A
Certificate issuer: /CN=566469ba2ec56af4059f850756208479ce155b7a
Certificate serial: 0198D773C94E40CE950978780F83029B4156
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VmRpui7FavQFn4UHViCEec4VW3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/be1c97-418f-4e46-bc1c-ee03f3de44aa/1/VmRpui7FavQFn4UHViCEec4VW3o.mft
Manifest number: 0583
Signing time: Sat 23 Aug 2025 15:02:26 +0000
Manifest this update: Sat 23 Aug 2025 15:02:26 +0000
Manifest next update: Sun 24 Aug 2025 15:02:26 +0000
Files and hashes: 1: VmRpui7FavQFn4UHViCEec4VW3o.crl (hash: R11raxXZV8Qf6T3MUtKTLQl2cnR69avl4/Dz2TlDs7M=)
2: kniutbSU_-qRAK95UI_8HV0omH8.roa (hash: O5mP5p6KZHlt5DYxryJnWdH3oyg1kqV5mUt5tDGEri0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/be1c97-418f-4e46-bc1c-ee03f3de44aa/1/VmRpui7FavQFn4UHViCEec4VW3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/be1c97-418f-4e46-bc1c-ee03f3de44aa/1/VmRpui7FavQFn4UHViCEec4VW3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/VmRpui7FavQFn4UHViCEec4VW3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:c9:4e:40:ce:95:09:78:78:0f:83:02:9b:41:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=566469ba2ec56af4059f850756208479ce155b7a
Validity
Not Before: Aug 23 15:02:26 2025 GMT
Not After : Aug 24 15:02:26 2025 GMT
Subject: CN=ff7548fcc04446d263ace79d5de4aa1aa9c32ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e2:fb:e1:87:09:0d:6e:d8:49:54:65:11:bd:
b3:0a:e5:5e:6d:ed:13:6c:5d:72:1b:e4:de:00:68:
c8:47:8a:dd:73:0f:df:63:d6:45:c3:c8:3e:62:fb:
69:0a:d3:89:a8:25:38:a9:73:c3:aa:ff:40:84:7b:
70:b7:fa:43:04:3e:95:71:80:a7:33:cc:2c:7c:96:
2a:0f:e8:0d:8b:eb:f1:f5:ce:e0:58:80:9a:9a:b0:
ff:9d:ae:29:48:b9:33:53:21:82:36:1f:8a:b4:8a:
d4:40:be:b7:fc:35:ed:3c:ca:41:29:1c:81:74:c4:
d0:b0:8f:4d:28:20:62:0f:a9:be:97:a3:24:f8:d9:
95:6b:b7:f5:51:8d:52:38:76:40:cd:c7:f8:c9:a8:
e1:d1:14:59:1f:f8:e2:75:d4:e0:85:b6:b0:97:d5:
47:bc:2e:7b:18:6c:ff:e5:d5:db:28:c3:df:95:c2:
35:10:53:35:3a:c8:81:50:f6:14:62:74:b2:81:38:
6a:6e:e1:6c:e3:35:59:63:84:19:41:db:43:ac:ad:
71:b2:ec:c7:e5:67:7f:fb:e7:64:cd:5d:d8:32:65:
dd:82:26:27:ec:fe:50:99:87:1f:51:f9:d9:4a:2b:
e0:88:03:e4:77:eb:e3:b2:17:d0:8c:99:eb:16:86:
50:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:75:48:FC:C0:44:46:D2:63:AC:E7:9D:5D:E4:AA:1A:A9:C3:2C:E8
X509v3 Authority Key Identifier:
keyid:56:64:69:BA:2E:C5:6A:F4:05:9F:85:07:56:20:84:79:CE:15:5B:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VmRpui7FavQFn4UHViCEec4VW3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/be1c97-418f-4e46-bc1c-ee03f3de44aa/1/VmRpui7FavQFn4UHViCEec4VW3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/be1c97-418f-4e46-bc1c-ee03f3de44aa/1/VmRpui7FavQFn4UHViCEec4VW3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:49:ea:14:59:78:76:e7:bf:2a:2d:01:b0:d6:43:cb:bf:25:
2a:24:5d:ba:b5:bc:19:eb:8a:10:dc:db:a7:43:c9:30:67:5a:
f6:0d:00:28:b6:e7:d4:b1:eb:0b:6d:1c:14:02:c3:f0:02:88:
5d:18:d0:e0:f4:8b:07:cb:92:46:e5:ea:fd:01:5f:44:e1:68:
3f:13:90:9c:a1:57:6e:26:e2:47:8b:f2:c3:73:ca:e5:9e:82:
3a:f2:3c:5d:36:e8:b0:d0:83:51:10:5a:44:8f:11:a7:98:a5:
fc:81:9e:51:06:13:18:13:3a:c0:e4:b6:79:af:10:9b:be:93:
35:a6:68:b8:c4:dc:6c:6b:31:3c:5a:15:5f:96:c7:99:1e:9d:
c6:31:98:66:06:a1:20:1b:f9:91:0b:79:ee:85:84:34:e7:4e:
1e:4b:6f:c3:a9:d3:d3:8c:20:76:fa:d9:1b:4d:05:ca:69:90:
ee:2a:eb:80:64:35:cd:08:a1:b8:23:ac:5d:b7:da:5f:29:4e:
86:7e:f9:58:ac:fb:90:a1:fe:17:51:4f:87:6c:b0:83:3f:20:
40:ea:e9:d3:6e:7d:2c:2f:5b:6d:35:cb:f4:24:ac:85:6b:38:
a7:7c:e1:0c:49:06:d0:03:53:86:8a:f0:99:c4:0c:54:d1:45:
fb:e6:3f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:44:51 2025 by rpki-client