Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/22bf9f-c0c8-4750-b1bf-1998665bd793/1/VW7RG7bV4tam6roZ2vY3tT92ftU.mft
File: VW7RG7bV4tam6roZ2vY3tT92ftU.mft (raw, json)
Hash identifier: +lcB3pRui9vSbu0mlXvIGYe8Kc/lRsSgjRwVJUIu7g8=
Subject key identifier: 6B:62:33:24:67:1C:D6:F4:6E:B4:7E:D1:D5:F6:7B:26:8A:23:48:21
Authority key identifier: 55:6E:D1:1B:B6:D5:E2:D6:A6:EA:BA:19:DA:F6:37:B5:3F:76:7E:D5
Certificate issuer: /CN=556ed11bb6d5e2d6a6eaba19daf637b53f767ed5
Certificate serial: 0198D5BB9863B20095DF3B34F08AC5465020
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VW7RG7bV4tam6roZ2vY3tT92ftU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/22bf9f-c0c8-4750-b1bf-1998665bd793/1/VW7RG7bV4tam6roZ2vY3tT92ftU.mft
Manifest number: 04CF
Signing time: Sat 23 Aug 2025 07:01:37 +0000
Manifest this update: Sat 23 Aug 2025 07:01:37 +0000
Manifest next update: Sun 24 Aug 2025 07:01:37 +0000
Files and hashes: 1: OTrg-ZEc2BLcvUJfh8jjFvLHsBc.roa (hash: LhGZ4Fn8zvdKFROkrhPv5B9fTX3FdgJSPFLUgkfRUhE=)
2: VW7RG7bV4tam6roZ2vY3tT92ftU.crl (hash: ePtJt34aaAaLXMqiVJABy+sdnHHnXmffvjqTYsV4Csw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/22bf9f-c0c8-4750-b1bf-1998665bd793/1/VW7RG7bV4tam6roZ2vY3tT92ftU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/22bf9f-c0c8-4750-b1bf-1998665bd793/1/VW7RG7bV4tam6roZ2vY3tT92ftU.mft
rsync://rpki.ripe.net/repository/DEFAULT/VW7RG7bV4tam6roZ2vY3tT92ftU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:98:63:b2:00:95:df:3b:34:f0:8a:c5:46:50:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=556ed11bb6d5e2d6a6eaba19daf637b53f767ed5
Validity
Not Before: Aug 23 07:01:37 2025 GMT
Not After : Aug 24 07:01:37 2025 GMT
Subject: CN=6b623324671cd6f46eb47ed1d5f67b268a234821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:64:d5:7f:26:d2:0b:69:7c:ca:08:68:05:d1:
7b:e7:a5:64:09:68:f3:9a:23:97:83:9b:a5:79:94:
5a:45:72:b4:ec:15:4e:61:d3:a5:e9:f2:cf:76:b0:
61:ae:4c:6c:5f:bb:ee:71:85:a6:be:a8:c8:93:49:
5e:88:b0:a9:91:5e:cb:25:49:dc:2a:e0:55:89:25:
30:c0:b0:15:d1:5b:e0:11:b2:7f:33:e5:37:e1:01:
9f:0f:33:04:a0:43:c5:f8:5c:3f:79:5b:a3:b7:c9:
f3:ca:f5:35:83:0c:91:ce:da:66:8f:dd:a8:43:10:
ff:80:ba:cd:33:0a:b8:a7:c7:b2:4e:35:5e:6b:b4:
65:ad:64:cc:d1:30:1b:af:7f:08:4e:3b:89:93:28:
39:7d:bb:f9:a7:4b:82:a7:46:8c:0b:a3:05:28:38:
1d:0d:a8:05:b4:58:be:87:29:b3:f7:67:ed:f3:c6:
34:0c:f1:0e:1a:10:63:91:ee:88:9d:0a:00:8c:50:
b2:a3:48:0a:72:0e:19:3b:ca:85:d7:86:5d:ef:f3:
4d:13:ce:52:3f:62:9c:71:78:dd:7e:f9:56:1f:e8:
20:22:a7:8c:a4:a2:01:d8:52:49:44:c4:f5:d3:ff:
1f:7b:79:0d:f2:c3:4a:49:5b:de:78:47:4c:47:c8:
c3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:62:33:24:67:1C:D6:F4:6E:B4:7E:D1:D5:F6:7B:26:8A:23:48:21
X509v3 Authority Key Identifier:
keyid:55:6E:D1:1B:B6:D5:E2:D6:A6:EA:BA:19:DA:F6:37:B5:3F:76:7E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VW7RG7bV4tam6roZ2vY3tT92ftU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/22bf9f-c0c8-4750-b1bf-1998665bd793/1/VW7RG7bV4tam6roZ2vY3tT92ftU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/22bf9f-c0c8-4750-b1bf-1998665bd793/1/VW7RG7bV4tam6roZ2vY3tT92ftU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:05:5f:28:8b:14:e9:9f:99:3f:3e:af:ba:de:1f:db:8c:87:
7e:5f:e7:85:4c:00:9b:66:fa:f7:6c:6e:de:f5:ac:73:ac:61:
b1:e1:9a:d0:9c:13:74:e9:0d:d0:8e:72:0b:5e:6b:11:50:13:
57:c1:a8:ba:ea:17:50:02:d9:9b:c0:15:85:ce:f7:7b:9b:7d:
57:2e:18:08:10:d5:8b:44:93:48:85:32:b3:ae:4e:19:89:42:
37:1d:94:e2:c6:e7:14:42:fb:e4:1a:ac:aa:10:84:f8:9c:99:
e2:15:f0:6f:33:83:49:81:72:d8:3f:00:e1:75:ad:53:99:c5:
44:fb:f0:e0:3d:38:da:eb:00:aa:a7:25:af:a8:13:a9:1b:9b:
f6:6a:f3:83:d6:53:f4:b2:1a:0c:5b:c4:d6:22:2a:1b:f6:cf:
6e:f4:f4:c9:9e:c2:f9:14:fd:54:12:c2:57:59:9c:52:b4:22:
50:01:f8:e8:3a:e6:c9:5b:82:c7:a0:49:ad:61:d1:1d:27:f6:
d5:8c:30:0f:d3:af:b5:39:d3:18:76:9a:ca:97:6f:31:8d:2c:
7c:7d:e6:a0:74:9d:75:1d:4d:99:18:4c:e8:db:55:9d:db:17:
6c:75:de:5b:0d:b5:31:d6:cd:1e:19:1e:d3:28:40:f6:8c:7e:
a7:b0:f1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:24 2025 by rpki-client