Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/53d0f5-7c16-400f-8e2e-52018b45fad1/1/1-VrEskcnSM6ye_jFQ-Ftt7s2lYY.mft
File: 1-VrEskcnSM6ye_jFQ-Ftt7s2lYY.mft (raw, json)
Hash identifier: d/B1Zuc1lr44XbtGXOQhfiGKb7g/kRDcRQfHvnmFTkg=
Subject key identifier: BE:43:9B:D1:4B:55:A8:B2:AC:B1:5A:B1:16:39:0A:9A:11:9B:E8:3C
Authority key identifier: F9:5A:C4:B2:47:27:48:CE:B2:7B:F8:C5:43:E1:6D:B7:BB:36:95:86
Certificate issuer: /CN=f95ac4b2472748ceb27bf8c543e16db7bb369586
Certificate serial: 0198D65F129BD0BF26DCDA4423ACA6CE821A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-VrEskcnSM6ye_jFQ-Ftt7s2lYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/53d0f5-7c16-400f-8e2e-52018b45fad1/1/1-VrEskcnSM6ye_jFQ-Ftt7s2lYY.mft
Manifest number: 0624
Signing time: Sat 23 Aug 2025 10:00:11 +0000
Manifest this update: Sat 23 Aug 2025 10:00:11 +0000
Manifest next update: Sun 24 Aug 2025 10:00:11 +0000
Files and hashes: 1: 0_5G3WRzshlLEZ0xV-9i-mzzvJU.roa (hash: lKrDP0bITSxhK9qROQpQt1df+rqNUNqNFLiSE61PZ7c=)
2: 1-VrEskcnSM6ye_jFQ-Ftt7s2lYY.crl (hash: tmP3rB0C2xSl7UYUtqTXfu/jONxuH/kv0V4VCJWi22E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/53d0f5-7c16-400f-8e2e-52018b45fad1/1/1-VrEskcnSM6ye_jFQ-Ftt7s2lYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/53d0f5-7c16-400f-8e2e-52018b45fad1/1/1-VrEskcnSM6ye_jFQ-Ftt7s2lYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-VrEskcnSM6ye_jFQ-Ftt7s2lYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:12:9b:d0:bf:26:dc:da:44:23:ac:a6:ce:82:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f95ac4b2472748ceb27bf8c543e16db7bb369586
Validity
Not Before: Aug 23 10:00:11 2025 GMT
Not After : Aug 24 10:00:11 2025 GMT
Subject: CN=be439bd14b55a8b2acb15ab116390a9a119be83c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c6:7e:55:c3:c0:3e:22:8a:89:7a:49:59:5c:
87:fe:ab:b0:94:0b:58:67:25:e2:5b:3b:ff:56:d7:
56:a4:e8:c5:d2:d0:40:c0:09:6f:f5:9c:ab:fa:09:
2d:5b:c4:fa:98:05:d4:aa:c1:94:66:f3:47:31:e8:
04:37:16:a9:a6:5b:55:26:e3:15:98:c4:99:c1:db:
be:85:16:e7:bf:fc:11:61:0f:d4:69:dd:c7:fa:1c:
34:3a:18:cb:31:32:af:b3:bd:6c:2b:ae:a3:0e:4d:
52:a0:07:30:f5:17:11:a5:42:88:c7:ff:6b:7f:de:
28:b2:1d:6d:48:90:0a:3c:e6:11:fa:32:6f:d1:79:
a8:9a:7c:4f:98:c4:ef:46:35:27:1c:f0:7f:de:18:
2d:94:e6:b4:a6:2d:79:1e:9c:8c:16:39:24:7f:ee:
4d:87:c7:59:d7:e8:b5:19:19:a4:bf:66:35:d8:dc:
b6:f5:c6:bb:8e:12:82:ef:dd:4a:46:9c:d7:dd:2b:
f3:6d:27:8e:bc:34:17:8f:6a:c2:25:80:86:27:a3:
23:0f:71:e6:be:49:f1:a2:8f:ef:c3:d3:e5:54:30:
5d:11:54:9b:8a:2d:46:e7:52:3f:8c:9c:0c:cf:a6:
ff:8b:97:f7:02:f6:80:ef:f4:43:02:2d:97:0b:5b:
b7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:43:9B:D1:4B:55:A8:B2:AC:B1:5A:B1:16:39:0A:9A:11:9B:E8:3C
X509v3 Authority Key Identifier:
keyid:F9:5A:C4:B2:47:27:48:CE:B2:7B:F8:C5:43:E1:6D:B7:BB:36:95:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-VrEskcnSM6ye_jFQ-Ftt7s2lYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/53d0f5-7c16-400f-8e2e-52018b45fad1/1/1-VrEskcnSM6ye_jFQ-Ftt7s2lYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/53d0f5-7c16-400f-8e2e-52018b45fad1/1/1-VrEskcnSM6ye_jFQ-Ftt7s2lYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:5c:f8:45:7a:93:a9:f3:7a:4b:fc:9f:a3:06:10:fc:73:41:
ac:7c:91:7e:e8:59:98:10:e7:25:76:9d:21:a2:e5:20:5c:fc:
a3:e6:4f:cd:c7:dd:b1:9d:2b:3d:8d:e0:bc:e7:9b:96:4f:11:
b7:46:ea:81:c2:20:43:09:fa:09:26:5b:35:03:e0:fb:82:29:
96:d9:be:1c:62:05:48:f1:f1:d7:3e:2a:01:e9:3e:52:47:fc:
87:68:e4:48:e6:58:9a:4d:c2:21:ef:a1:f2:9d:31:26:da:5b:
51:5c:36:9e:0e:23:fe:05:fd:17:e6:c4:da:2a:d0:e8:a8:13:
f5:ce:00:aa:eb:77:bf:6b:ab:97:09:43:b3:3b:24:81:48:49:
c1:61:c9:bc:ca:ec:eb:0b:9f:ed:a7:4f:74:d2:da:65:8e:fd:
f3:8f:13:aa:00:d4:2d:a0:62:9e:4f:ad:65:d4:7e:32:76:4e:
96:0f:8c:74:85:c5:66:02:a4:b0:0f:16:b1:d5:03:3a:6b:0a:
60:da:a3:9d:17:dd:21:5b:98:47:55:77:84:e6:78:7a:6b:e7:
b6:7e:76:4a:e8:07:4f:9a:bd:d7:77:25:57:40:56:9c:06:7b:
1f:8a:fd:4a:0f:f4:04:d5:32:6e:0a:ee:0a:4d:ef:9d:48:09:
aa:2a:ed:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:34:38 2025 by rpki-client