Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/22bf9f-c0c8-4750-b1bf-1998665bd793/1/VW7RG7bV4tam6roZ2vY3tT92ftU.mft
File: VW7RG7bV4tam6roZ2vY3tT92ftU.mft (raw, json)
Hash identifier: 4woRIoXpVa7iUSD+vGEGq/kxMnSbc/3/ZqK4iogFVYM=
Subject key identifier: EB:28:DC:4A:39:9D:7E:BA:6F:BA:A4:51:A2:EB:F8:15:0F:CF:8D:8D
Authority key identifier: 55:6E:D1:1B:B6:D5:E2:D6:A6:EA:BA:19:DA:F6:37:B5:3F:76:7E:D5
Certificate issuer: /CN=556ed11bb6d5e2d6a6eaba19daf637b53f767ed5
Certificate serial: 0197B745404BBA8ABB72006D86E41F70EC4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VW7RG7bV4tam6roZ2vY3tT92ftU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/22bf9f-c0c8-4750-b1bf-1998665bd793/1/VW7RG7bV4tam6roZ2vY3tT92ftU.mft
Manifest number: 043A
Signing time: Sat 28 Jun 2025 16:00:58 +0000
Manifest this update: Sat 28 Jun 2025 16:00:58 +0000
Manifest next update: Sun 29 Jun 2025 16:00:58 +0000
Files and hashes: 1: RlHwhR54JFo3eiYjQ0HNmngGq1c.roa (hash: Zd+He0y/cu8f6yOcHa/4lo5/3/FYNL3U25I+7MQxDIs=)
2: VW7RG7bV4tam6roZ2vY3tT92ftU.crl (hash: UWlLTCkHCk11MH7I5sMbIC9AjWBkEd1xAqXtTUbXJcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/22bf9f-c0c8-4750-b1bf-1998665bd793/1/VW7RG7bV4tam6roZ2vY3tT92ftU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/22bf9f-c0c8-4750-b1bf-1998665bd793/1/VW7RG7bV4tam6roZ2vY3tT92ftU.mft
rsync://rpki.ripe.net/repository/DEFAULT/VW7RG7bV4tam6roZ2vY3tT92ftU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:40:4b:ba:8a:bb:72:00:6d:86:e4:1f:70:ec:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=556ed11bb6d5e2d6a6eaba19daf637b53f767ed5
Validity
Not Before: Jun 28 16:00:58 2025 GMT
Not After : Jun 29 16:00:58 2025 GMT
Subject: CN=eb28dc4a399d7eba6fbaa451a2ebf8150fcf8d8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:45:fb:7a:06:15:6b:45:79:6b:92:b9:f3:c1:
e9:ce:91:75:48:b9:a8:b3:07:16:d3:75:98:60:0b:
00:0c:38:f8:8d:f6:c9:9d:55:4b:7f:c6:b3:1b:58:
77:0d:79:c5:b7:0f:6c:a9:38:b3:8f:20:20:6d:89:
5c:4d:c6:6a:0b:1f:fc:70:94:cf:91:61:60:8b:85:
36:3f:c6:06:e6:6a:c6:b7:f5:6a:16:af:5f:4f:00:
af:12:12:9c:c6:db:e0:ff:ab:2c:9d:3e:2a:cf:ad:
e5:7e:83:4e:7a:f6:dd:b4:2d:73:c4:53:31:26:cd:
be:68:cd:85:f8:0e:d2:e6:63:02:4f:63:c2:b8:05:
5a:c5:c8:83:e1:da:14:db:a0:cc:8d:7b:f0:73:d7:
bf:93:ba:bb:64:ab:a9:7b:8e:72:a0:c0:92:b2:93:
8d:2d:1e:f2:23:03:2e:44:77:04:fd:8e:83:cd:06:
0c:ac:d4:ea:d1:41:4d:49:32:ff:4f:b3:22:13:96:
96:b1:32:75:74:bf:e0:42:7a:3b:a1:4f:df:b3:1b:
14:05:5b:1d:da:7b:09:61:ae:56:82:34:6b:ae:05:
e6:3d:f4:26:9b:cf:bc:de:95:04:1b:bf:c4:f9:d5:
ef:3d:fc:51:80:9f:2d:ad:c8:63:46:d6:5a:21:f4:
f7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:28:DC:4A:39:9D:7E:BA:6F:BA:A4:51:A2:EB:F8:15:0F:CF:8D:8D
X509v3 Authority Key Identifier:
keyid:55:6E:D1:1B:B6:D5:E2:D6:A6:EA:BA:19:DA:F6:37:B5:3F:76:7E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VW7RG7bV4tam6roZ2vY3tT92ftU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/22bf9f-c0c8-4750-b1bf-1998665bd793/1/VW7RG7bV4tam6roZ2vY3tT92ftU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/22bf9f-c0c8-4750-b1bf-1998665bd793/1/VW7RG7bV4tam6roZ2vY3tT92ftU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:f5:02:10:7a:31:44:14:e0:a3:9e:8e:34:d1:e1:73:96:91:
d5:97:95:2e:34:07:8e:4f:58:a1:ed:fb:74:03:24:76:6e:bf:
19:6e:52:79:af:96:c7:0d:08:45:5a:74:b8:d8:58:b5:0b:ca:
08:ec:52:d6:e5:3f:f5:0b:a0:5e:c8:d7:ec:3c:62:75:b3:b6:
be:0a:72:e6:c3:47:69:20:c1:be:3a:63:54:46:1d:9f:57:ff:
6b:19:36:ea:e5:82:c4:9b:33:00:1e:c5:b8:96:ec:da:ce:03:
9e:95:62:db:f2:86:22:76:cf:14:ba:51:7c:a6:61:27:2b:0c:
34:27:a2:6b:a6:7c:11:ea:72:dc:9d:07:4c:4f:d1:99:67:84:
8a:f1:26:0b:76:4a:5b:7a:18:a0:5f:85:1c:16:34:75:5c:6f:
99:85:e6:38:0e:a0:89:79:5c:86:ab:53:5b:e8:14:df:5c:ed:
16:56:d7:58:a2:16:e9:b6:b0:74:70:6d:e9:99:59:63:76:83:
47:05:df:74:2b:fd:91:0c:24:0d:f9:31:c8:40:ff:d8:b3:b2:
de:e9:94:9c:de:2c:fe:de:65:6b:6e:59:a0:7e:66:bc:4e:ab:
ae:ad:7c:b3:3e:4f:ae:bd:50:b5:9f:d2:bb:b8:0e:b4:a6:d7:
64:7b:ee:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:46:24 2025 by rpki-client