Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.mft
File: VvAaHpnqXU85lNMzCdCUMS3IVCc.mft (raw, json)
Hash identifier: sUJiKTbs+TUpy6xcy3Q7u1yXe8WP2T9yQzU+huUyHqY=
Subject key identifier: 71:C3:ED:B5:FF:B1:99:8B:1C:93:ED:E9:EA:B7:5A:D4:29:66:14:5F
Authority key identifier: 56:F0:1A:1E:99:EA:5D:4F:39:94:D3:33:09:D0:94:31:2D:C8:54:27
Certificate issuer: /CN=56f01a1e99ea5d4f3994d33309d094312dc85427
Certificate serial: 0198D583422690E272922F05068E85C16DAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VvAaHpnqXU85lNMzCdCUMS3IVCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.mft
Manifest number: 02DC
Signing time: Sat 23 Aug 2025 06:00:05 +0000
Manifest this update: Sat 23 Aug 2025 06:00:05 +0000
Manifest next update: Sun 24 Aug 2025 06:00:05 +0000
Files and hashes: 1: VvAaHpnqXU85lNMzCdCUMS3IVCc.crl (hash: Krn0wsAVWl9Y8PRKLZczJxINeX/ykITVRPOQvIPOCJk=)
2: v_KzQYlvsCBO_i8yYO8HLxZWeDc.roa (hash: +uoQdMzOaHRMGuVFuouzf8EBLpuGaYxtN4+0W2dukzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VvAaHpnqXU85lNMzCdCUMS3IVCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:42:26:90:e2:72:92:2f:05:06:8e:85:c1:6d:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56f01a1e99ea5d4f3994d33309d094312dc85427
Validity
Not Before: Aug 23 06:00:05 2025 GMT
Not After : Aug 24 06:00:05 2025 GMT
Subject: CN=71c3edb5ffb1998b1c93ede9eab75ad42966145f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:50:07:c8:34:95:50:d0:5c:8c:66:3b:66:d1:
d5:62:8b:32:c9:0c:36:ee:c1:7f:f2:02:b0:9e:77:
29:e0:18:7a:5b:51:87:ab:a5:ce:b5:e9:01:bf:29:
87:bb:41:a3:17:be:a8:bf:73:bb:ed:fe:02:0d:28:
ff:dc:00:79:f0:86:30:66:a6:8d:bd:0e:d9:4d:92:
e1:0f:b1:d9:db:6c:c2:12:bf:24:b8:06:80:41:6b:
67:4f:07:fd:42:15:bb:e2:29:fa:a5:e3:dc:81:22:
ea:a1:01:1e:7e:b2:7e:cf:10:d4:40:c2:ae:d6:87:
a5:47:c6:1e:f8:13:62:c2:90:ce:60:d0:fa:c4:73:
2c:32:3a:68:b4:81:6d:86:14:c6:17:75:f5:93:80:
6e:1e:3a:ef:68:21:57:b6:e0:b1:8f:66:15:42:a1:
f6:4f:05:9a:bd:a3:a5:33:31:df:b0:dc:a2:8c:19:
dd:22:e1:e4:66:70:43:32:65:8a:a5:08:cc:a2:9c:
15:25:88:59:2d:a9:cc:bf:40:e2:5f:70:3e:ad:4c:
8d:1a:c7:d3:07:21:51:f4:40:9c:8e:4f:9f:bd:1b:
e3:b2:66:bc:5d:4b:e4:c8:f4:b4:6d:29:b2:65:0c:
14:8b:67:02:17:48:c2:63:03:02:09:6b:aa:da:24:
e8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C3:ED:B5:FF:B1:99:8B:1C:93:ED:E9:EA:B7:5A:D4:29:66:14:5F
X509v3 Authority Key Identifier:
keyid:56:F0:1A:1E:99:EA:5D:4F:39:94:D3:33:09:D0:94:31:2D:C8:54:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VvAaHpnqXU85lNMzCdCUMS3IVCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:32:50:49:f7:d0:2a:56:22:37:b2:d6:99:f8:94:5b:49:f9:
9a:29:38:3f:b2:76:75:27:ba:9b:69:41:3f:15:0e:54:ab:97:
c5:80:36:f2:1d:c1:79:4f:ac:47:8a:f5:8c:ec:35:a6:f8:82:
24:dc:2d:8a:21:3d:7d:87:a1:60:5f:28:b6:bd:33:12:c7:eb:
bc:0c:50:07:b0:b9:07:9a:5c:06:65:c4:de:05:3c:ef:f9:f7:
ae:43:e7:07:ab:c6:77:e6:c3:32:24:18:81:d2:0b:a0:fa:b2:
23:c3:59:7c:7b:5d:ec:8a:53:af:01:3f:11:a8:b4:2e:25:b0:
03:02:e7:29:42:7f:56:ef:cb:63:b9:b1:f4:04:a1:31:aa:74:
e8:48:01:a7:d4:25:50:f3:0c:bd:b1:8d:aa:9a:15:e0:a0:16:
18:42:27:a2:98:54:00:54:eb:1e:22:1b:0b:97:7c:0e:09:9d:
81:4b:6b:56:18:b5:12:6a:13:d0:5a:ab:e7:ae:c6:fe:75:f1:
ec:1b:8a:be:df:b5:d7:de:d7:2b:b5:16:6e:8f:2b:67:bd:a1:
0e:a4:7d:34:ac:e0:cc:f8:ac:20:c0:fb:7b:73:1d:02:cc:c3:
5b:9b:3e:47:11:7a:05:7a:12:ed:69:df:db:76:98:0c:cc:34:
b0:78:fc:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:16:52 2025 by rpki-client