Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/22bf9f-c0c8-4750-b1bf-1998665bd793/1/VW7RG7bV4tam6roZ2vY3tT92ftU.mft
File: VW7RG7bV4tam6roZ2vY3tT92ftU.mft (raw, json)
Hash identifier: 18rA/98DOu7oJ7xNTwhdG18yka8yEzwcDoNk+dL7bgs=
Subject key identifier: 8A:CD:00:5F:64:DD:8D:9B:95:48:78:38:A7:0D:49:90:E4:0F:4D:9D
Authority key identifier: 55:6E:D1:1B:B6:D5:E2:D6:A6:EA:BA:19:DA:F6:37:B5:3F:76:7E:D5
Certificate issuer: /CN=556ed11bb6d5e2d6a6eaba19daf637b53f767ed5
Certificate serial: 0199FD34063E12D9D5789159ABE745FE32C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VW7RG7bV4tam6roZ2vY3tT92ftU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/22bf9f-c0c8-4750-b1bf-1998665bd793/1/VW7RG7bV4tam6roZ2vY3tT92ftU.mft
Manifest number: 0568
Signing time: Sun 19 Oct 2025 16:01:09 +0000
Manifest this update: Sun 19 Oct 2025 16:01:09 +0000
Manifest next update: Mon 20 Oct 2025 16:01:09 +0000
Files and hashes: 1: OTrg-ZEc2BLcvUJfh8jjFvLHsBc.roa (hash: LhGZ4Fn8zvdKFROkrhPv5B9fTX3FdgJSPFLUgkfRUhE=)
2: VW7RG7bV4tam6roZ2vY3tT92ftU.crl (hash: B2pYO65XPgzdp+OfRGM5g/OlpayFVL4ux9UQPOQJSQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/22bf9f-c0c8-4750-b1bf-1998665bd793/1/VW7RG7bV4tam6roZ2vY3tT92ftU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/22bf9f-c0c8-4750-b1bf-1998665bd793/1/VW7RG7bV4tam6roZ2vY3tT92ftU.mft
rsync://rpki.ripe.net/repository/DEFAULT/VW7RG7bV4tam6roZ2vY3tT92ftU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:06:3e:12:d9:d5:78:91:59:ab:e7:45:fe:32:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=556ed11bb6d5e2d6a6eaba19daf637b53f767ed5
Validity
Not Before: Oct 19 16:01:09 2025 GMT
Not After : Oct 20 16:01:09 2025 GMT
Subject: CN=8acd005f64dd8d9b95487838a70d4990e40f4d9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:cb:43:f4:12:d2:44:90:5f:e8:da:9a:5a:cd:
74:31:2c:7a:3a:39:bf:c4:ee:17:58:d4:6f:9b:9f:
2c:98:92:ef:f9:b9:bc:6e:10:2c:ff:dc:b6:f2:de:
a9:e9:23:a7:1e:bb:8e:20:14:cb:5a:3e:67:db:85:
a9:de:6b:24:e7:3b:bb:e0:1b:6b:a3:b7:d4:a7:37:
0d:cf:a1:61:ff:80:52:20:e3:7c:c1:82:39:1e:f9:
10:06:d8:fe:de:2e:ca:1a:46:ac:9f:32:ce:b3:7c:
c7:0e:1e:98:30:c3:25:88:83:0b:77:97:d7:f5:66:
d6:89:70:19:57:3d:a9:f2:52:ef:b0:ef:d5:61:e6:
4c:eb:d8:d1:4d:e6:69:dd:7d:fa:ea:e6:e0:76:9c:
aa:92:a5:7f:34:46:5a:c8:07:92:8f:3f:8c:28:27:
08:05:98:c4:fd:63:f4:c2:1f:ba:2e:cd:82:bf:14:
ee:bb:73:f4:14:65:a9:12:69:66:0c:3e:75:77:38:
90:eb:b8:b1:2a:45:86:3e:81:15:bf:aa:47:83:31:
7e:f7:d8:78:7a:f6:f6:58:54:87:05:37:bb:af:e5:
37:74:f3:93:0d:41:68:27:a1:e5:b5:51:4a:36:0f:
bc:03:d9:6a:87:6c:bd:86:e7:59:fc:12:58:b1:2b:
ea:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:CD:00:5F:64:DD:8D:9B:95:48:78:38:A7:0D:49:90:E4:0F:4D:9D
X509v3 Authority Key Identifier:
keyid:55:6E:D1:1B:B6:D5:E2:D6:A6:EA:BA:19:DA:F6:37:B5:3F:76:7E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VW7RG7bV4tam6roZ2vY3tT92ftU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/22bf9f-c0c8-4750-b1bf-1998665bd793/1/VW7RG7bV4tam6roZ2vY3tT92ftU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/22bf9f-c0c8-4750-b1bf-1998665bd793/1/VW7RG7bV4tam6roZ2vY3tT92ftU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:28:2e:42:81:92:42:88:f3:85:97:f7:3b:b5:0c:f1:4b:56:
bb:68:30:c0:ea:4b:32:c9:59:d4:5e:91:cc:a1:84:f1:6a:22:
08:59:9c:52:97:b6:cb:2a:6e:ae:4f:92:b7:43:aa:93:ae:fc:
4f:fb:0c:81:7d:19:99:c5:0e:ac:02:0f:fc:b2:e1:6f:75:0c:
9d:c5:32:68:93:05:02:fc:1b:b2:39:f8:9f:67:e1:a1:b4:ff:
54:31:fd:7a:ea:b6:72:b2:5a:d2:b5:77:8a:ef:3c:1c:be:a2:
f2:68:06:35:68:ad:4d:02:9d:63:7c:1a:de:d9:09:76:b6:bb:
b4:32:b1:9d:c7:e9:11:4f:f8:43:a8:ff:80:62:b4:98:23:48:
aa:5f:1f:f5:2f:35:c7:41:c7:cc:42:ad:46:b6:3b:f4:e4:f5:
1a:6a:85:b2:d6:e9:e6:87:f9:7d:d7:41:80:38:9c:53:e4:f1:
7f:1a:61:7b:48:18:1c:cd:05:3b:77:16:69:81:a5:f0:e1:1c:
d9:fa:cd:1f:06:d6:35:6e:e0:03:2c:34:82:10:f0:f0:5e:8d:
1e:4a:64:bf:77:ed:ba:c4:5d:1f:23:37:e9:2e:4d:2e:c6:21:
c6:d6:92:5f:5e:c6:ce:64:a8:71:61:32:6a:41:0b:7b:d6:c4:
e0:77:ee:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:59 2025 by rpki-client