Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
File: VmHZZN9KhtuP-5mqiVgtpoowkIw.mft (raw, json)
Hash identifier: MZKbuJYvyvHYK2HTBvrAB/X2cJVngVvjWcjhmVGXUWY=
Subject key identifier: 13:50:21:7C:0F:00:79:F7:73:CB:AA:B8:A5:D1:B1:BC:A1:87:D8:10
Authority key identifier: 56:61:D9:64:DF:4A:86:DB:8F:FB:99:AA:89:58:2D:A6:8A:30:90:8C
Certificate issuer: /CN=5661d964df4a86db8ffb99aa89582da68a30908c
Certificate serial: 0198D583FF23C522AA6D8EDFA6F4D028B5C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
Manifest number: 01DF
Signing time: Sat 23 Aug 2025 06:00:54 +0000
Manifest this update: Sat 23 Aug 2025 06:00:54 +0000
Manifest next update: Sun 24 Aug 2025 06:00:54 +0000
Files and hashes: 1: VmHZZN9KhtuP-5mqiVgtpoowkIw.crl (hash: NOR5MmZWhF+Bkm+KBK2W+Ytbw0IN/2Hfdp8E/yhDT7w=)
2: xMdRmutHFokxkkQckhp-estBVrY.roa (hash: B+GeVyXFQ8LdKQlX7fXVWpcWBfpc+XAscpHvCnfEhnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 06:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:ff:23:c5:22:aa:6d:8e:df:a6:f4:d0:28:b5:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5661d964df4a86db8ffb99aa89582da68a30908c
Validity
Not Before: Aug 23 06:00:54 2025 GMT
Not After : Aug 24 06:00:54 2025 GMT
Subject: CN=1350217c0f0079f773cbaab8a5d1b1bca187d810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b5:50:5e:1b:ec:4b:eb:51:8c:0a:70:ef:e2:
d5:a6:4f:90:02:6d:9d:d2:2a:ab:50:ae:69:74:31:
8a:0d:f5:9d:db:17:c8:e6:cf:80:66:59:e0:5b:11:
35:a4:5f:0f:dc:05:f4:e6:72:e6:a8:97:fe:64:05:
94:b4:31:33:c0:07:bd:cd:67:c6:56:02:9f:4f:5e:
dc:b2:7e:b6:d1:25:03:f5:1d:8c:58:ae:06:84:77:
ff:9a:b2:ae:bc:b5:c1:7d:e9:4a:83:10:a9:d2:86:
04:ae:7e:6b:f6:93:35:f1:88:13:25:08:af:64:2c:
24:6a:8d:7a:b6:50:85:48:0e:34:1f:14:07:57:81:
93:20:78:c1:15:95:f7:eb:e2:6f:07:b4:c6:15:fc:
08:dc:46:3e:8a:ef:31:fb:74:07:02:06:1b:0a:22:
c6:ef:88:63:17:d9:52:fb:c5:21:d9:59:ee:94:28:
52:42:1c:30:85:2d:92:4e:5d:1f:fd:24:2d:44:d0:
ae:64:6c:45:97:c3:d7:68:b9:a1:5f:ed:b2:b4:53:
63:c1:98:f0:07:4c:e4:f5:dc:c3:b3:bc:d1:a4:62:
21:a2:1a:6e:69:9e:eb:38:d4:14:d7:29:3d:7b:39:
a7:24:92:2e:7a:20:8b:6a:61:98:82:4e:06:81:0c:
9b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:50:21:7C:0F:00:79:F7:73:CB:AA:B8:A5:D1:B1:BC:A1:87:D8:10
X509v3 Authority Key Identifier:
keyid:56:61:D9:64:DF:4A:86:DB:8F:FB:99:AA:89:58:2D:A6:8A:30:90:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:2c:01:b6:15:94:31:62:f5:65:8b:14:17:70:de:9a:54:df:
30:b2:ae:0f:a7:09:a9:a2:f9:66:a1:5b:49:65:8c:72:60:d6:
43:1a:7b:b4:f7:fc:92:cf:1c:82:33:43:07:e4:9f:4a:ab:35:
f6:ed:b0:e6:8b:22:06:7d:40:b2:e1:b3:68:4b:f4:e0:91:20:
6d:c8:f3:da:ec:71:aa:da:2c:15:cd:27:5d:39:ce:c2:6c:08:
22:e8:f8:ca:ea:41:ed:45:e3:c3:8f:55:17:bc:a3:48:10:91:
19:76:bc:ea:25:b6:64:9b:3e:77:53:64:e7:5e:cd:79:d1:ea:
92:c5:e3:2e:ff:e4:ee:a8:9c:c3:32:44:09:33:df:f6:17:25:
1b:6b:20:e8:cd:ae:a6:68:f8:e1:58:93:0e:58:df:5b:02:75:
a0:3d:87:36:a8:0a:c3:15:81:60:23:6e:c5:6b:d7:41:3c:9c:
37:0f:5b:39:ea:d2:68:0d:83:e8:d4:0c:5f:b8:4c:11:28:37:
09:21:43:6a:71:a6:e6:d5:11:2b:5d:ba:41:3a:94:0e:33:1a:
6e:01:f8:89:6a:e8:6f:02:fd:db:31:33:6d:e0:29:9e:90:a2:
84:9e:41:27:80:ce:0e:71:2b:bb:66:8d:c4:ae:e2:fd:27:ec:
58:6b:ea:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:07:19 2025 by rpki-client