Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.mft
File: VvciqIWr65qv-zLadk7wkbWyA0A.mft (raw, json)
Hash identifier: xrfXx9F8VEn61Yv/0GwqkKN7ewjkUjsgiHaYMyfGk40=
Subject key identifier: D3:51:8A:44:85:97:D2:3F:C7:CC:D0:40:E0:64:6B:C3:8C:3D:4B:B9
Authority key identifier: 56:F7:22:A8:85:AB:EB:9A:AF:FB:32:DA:76:4E:F0:91:B5:B2:03:40
Certificate issuer: /CN=56f722a885abeb9aaffb32da764ef091b5b20340
Certificate serial: 0198D5162F5781FFB0C66428DCFFF2B70D80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VvciqIWr65qv-zLadk7wkbWyA0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.mft
Manifest number: 096B
Signing time: Sat 23 Aug 2025 04:00:57 +0000
Manifest this update: Sat 23 Aug 2025 04:00:57 +0000
Manifest next update: Sun 24 Aug 2025 04:00:57 +0000
Files and hashes: 1: VvciqIWr65qv-zLadk7wkbWyA0A.crl (hash: CfRW18EpwjGKF8YY5cCyVs7qYz3pWIq13ZDDHhQClco=)
2: vpimmj50rM3b693dSW6yAkLWvvA.roa (hash: 5VKPzqmzdczcoLOJtvbaVQfmAQ+1p8lObAjIuI3KfsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/VvciqIWr65qv-zLadk7wkbWyA0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:2f:57:81:ff:b0:c6:64:28:dc:ff:f2:b7:0d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56f722a885abeb9aaffb32da764ef091b5b20340
Validity
Not Before: Aug 23 04:00:57 2025 GMT
Not After : Aug 24 04:00:57 2025 GMT
Subject: CN=d3518a448597d23fc7ccd040e0646bc38c3d4bb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1b:5b:b5:8c:f3:f5:5e:37:f8:06:9f:46:9f:
f2:a1:7e:c4:23:c1:34:fd:1b:eb:4b:99:3e:d6:6b:
73:0c:7f:4b:17:72:09:ca:a9:54:47:c9:f1:cf:80:
52:07:c2:14:3b:eb:9b:cd:30:ae:79:20:99:27:7a:
52:6c:82:6c:db:d4:35:4a:0c:2b:fc:c0:47:16:f5:
42:a6:aa:70:36:5b:d3:01:65:09:1a:fd:ae:74:98:
d0:d5:d4:50:a2:b6:1c:69:59:06:b9:69:38:4b:fc:
8e:60:2b:a9:c5:20:4c:76:cd:60:33:fa:85:ab:c8:
db:e6:19:3c:11:2c:b1:07:1b:b6:36:4c:b6:90:8f:
6d:f8:1d:af:f7:46:c4:01:74:4d:26:79:ac:df:01:
50:db:bf:8e:b4:90:d6:93:d3:04:a1:e3:a5:3a:f8:
ed:d6:5d:40:e7:f9:54:38:a6:26:a3:06:6d:51:22:
cd:ef:e4:82:6b:83:0b:cc:a5:14:92:8f:7f:ca:85:
f5:36:46:8a:50:82:36:30:0c:94:b0:9f:59:22:ff:
43:ea:ff:0a:e9:b6:82:f9:77:f7:f0:f0:db:b4:a5:
1b:58:06:cd:82:4c:85:94:67:25:88:7b:1c:be:68:
20:a3:a8:51:b4:1c:01:79:c9:2f:74:a7:8d:b5:35:
42:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:51:8A:44:85:97:D2:3F:C7:CC:D0:40:E0:64:6B:C3:8C:3D:4B:B9
X509v3 Authority Key Identifier:
keyid:56:F7:22:A8:85:AB:EB:9A:AF:FB:32:DA:76:4E:F0:91:B5:B2:03:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VvciqIWr65qv-zLadk7wkbWyA0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:67:7e:7a:e9:3c:53:a7:2d:6a:98:d6:6c:d9:30:39:b6:20:
56:e4:b2:84:9e:00:22:54:07:af:2a:9b:37:2c:f5:62:77:a5:
c2:6c:9f:07:2f:6a:69:53:f4:83:11:f7:11:49:12:e3:54:e3:
35:34:4a:8f:23:ba:6b:97:a8:a7:62:07:75:98:5c:35:d8:13:
78:1d:84:4e:99:91:b0:f0:80:19:05:7c:db:ff:75:59:3a:89:
7a:3b:d9:9d:6e:08:5d:4e:26:c4:06:e3:78:f2:53:3e:6f:08:
79:bd:c1:4a:4b:21:a7:10:67:ae:01:a4:d9:65:49:83:d6:1b:
89:b9:9a:e5:51:72:65:bc:4f:96:2a:46:79:82:34:a9:cc:7f:
46:a5:f3:5e:0c:58:70:e0:28:74:40:46:72:e0:56:ce:5f:d0:
99:a1:85:6f:c1:95:60:19:3d:bc:1a:d6:9c:42:91:4b:4c:38:
85:39:a8:c0:59:e4:93:f3:30:46:50:63:3e:0d:59:c6:76:b3:
91:9b:d1:04:b2:bc:ed:c4:d8:a4:ce:16:aa:4b:9b:92:9c:44:
07:52:03:4e:c3:a3:16:73:19:18:1b:07:b2:ef:5a:2f:b3:20:
20:9f:ff:30:c2:85:74:00:06:d2:85:81:e9:48:db:c2:62:1a:
0c:5c:3e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:41:02 2025 by rpki-client