Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/13fc59-3b4f-452c-81d4-141528664d0b/1/VZWbC9oKD1kfloQIU58zGBC7JTQ.mft
File: VZWbC9oKD1kfloQIU58zGBC7JTQ.mft (raw, json)
Hash identifier: ZnNq+9eJ6+Sia5I3hvma+76TgXdOkzfwN/2bSOTD3Dk=
Subject key identifier: 52:88:02:C8:D3:EC:11:F2:41:26:80:BD:3E:B6:33:35:55:24:5C:C2
Authority key identifier: 55:95:9B:0B:DA:0A:0F:59:1F:96:84:08:53:9F:33:18:10:BB:25:34
Certificate issuer: /CN=55959b0bda0a0f591f968408539f331810bb2534
Certificate serial: 0198D515BFFE7011AC59DE0FFE024EC7B810
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZWbC9oKD1kfloQIU58zGBC7JTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/13fc59-3b4f-452c-81d4-141528664d0b/1/VZWbC9oKD1kfloQIU58zGBC7JTQ.mft
Manifest number: 0617
Signing time: Sat 23 Aug 2025 04:00:29 +0000
Manifest this update: Sat 23 Aug 2025 04:00:29 +0000
Manifest next update: Sun 24 Aug 2025 04:00:29 +0000
Files and hashes: 1: D8q3zZybrkkTxQ66z-bvyVnna6E.roa (hash: LTQ6bdwzOLtEATCcAV7gj7XVypFsof5F2Jlq1M3S9uM=)
2: VZWbC9oKD1kfloQIU58zGBC7JTQ.crl (hash: csUWNOZm7cr7rozJO5ksyvC+vnDTeXdOrLu0U0hR/Ek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/13fc59-3b4f-452c-81d4-141528664d0b/1/VZWbC9oKD1kfloQIU58zGBC7JTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/13fc59-3b4f-452c-81d4-141528664d0b/1/VZWbC9oKD1kfloQIU58zGBC7JTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VZWbC9oKD1kfloQIU58zGBC7JTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:bf:fe:70:11:ac:59:de:0f:fe:02:4e:c7:b8:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55959b0bda0a0f591f968408539f331810bb2534
Validity
Not Before: Aug 23 04:00:29 2025 GMT
Not After : Aug 24 04:00:29 2025 GMT
Subject: CN=528802c8d3ec11f2412680bd3eb6333555245cc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:93:d3:00:43:aa:c1:16:a9:ae:a7:86:ec:6d:
7a:50:f9:02:af:23:9d:a5:5d:d1:88:04:1b:15:aa:
b2:89:76:55:1a:ea:58:66:a7:e9:35:28:1f:4e:41:
ed:17:18:67:50:96:60:ee:7a:84:6a:78:31:1c:2f:
54:5b:11:5c:1e:4f:df:99:c5:51:d2:82:22:b1:b6:
1f:e0:67:c9:d5:a2:e2:5f:5f:ec:37:8d:b6:3a:2e:
02:4c:3f:c8:c1:45:a4:f9:14:d5:c7:c0:6d:67:f5:
2e:2c:af:47:2c:fa:9a:54:a8:6a:c1:1c:44:ed:03:
ed:ba:d5:0f:03:c8:29:7e:08:aa:dc:2d:76:60:b3:
82:9b:7a:b7:26:5a:7e:d6:0d:ac:b7:6e:71:84:aa:
2f:41:55:6a:a2:ba:21:5b:91:08:d4:cd:5b:61:a0:
67:52:6f:7f:fa:2c:8c:f1:2b:91:6b:fd:36:31:38:
7c:02:c5:73:5c:82:38:b8:cf:57:69:e3:21:f4:a4:
b4:20:78:f8:a8:d4:ac:54:b4:81:a1:34:1f:43:57:
a9:96:37:1f:6c:8a:ef:4d:c8:5f:50:36:a5:77:a2:
b7:db:71:55:0a:56:1e:c7:f4:a0:41:34:77:b5:39:
e3:2d:d8:ad:a0:e6:4d:f8:ab:37:8d:5b:b5:63:cc:
50:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:88:02:C8:D3:EC:11:F2:41:26:80:BD:3E:B6:33:35:55:24:5C:C2
X509v3 Authority Key Identifier:
keyid:55:95:9B:0B:DA:0A:0F:59:1F:96:84:08:53:9F:33:18:10:BB:25:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZWbC9oKD1kfloQIU58zGBC7JTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/13fc59-3b4f-452c-81d4-141528664d0b/1/VZWbC9oKD1kfloQIU58zGBC7JTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/13fc59-3b4f-452c-81d4-141528664d0b/1/VZWbC9oKD1kfloQIU58zGBC7JTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:40:78:64:a0:0f:68:88:09:2f:e0:e6:2f:5a:a6:6d:67:9a:
e9:e1:4b:af:fd:74:27:2b:ac:5b:0c:1b:17:e0:b9:f7:ee:d8:
0e:bc:c2:56:be:7e:c9:bc:05:7f:ef:d8:1d:62:c7:bb:ea:43:
62:8e:c1:a9:4f:27:36:91:96:eb:b6:c8:a8:3a:ca:8e:4f:b7:
a2:b1:45:b0:da:2e:71:2a:2c:08:59:bd:23:e9:e2:0c:9a:8c:
3e:11:ff:5b:0d:fe:33:26:d6:67:97:c4:c1:a7:1b:9c:9f:6c:
0a:ac:c3:97:94:e9:85:49:47:81:8c:78:df:5f:10:36:ac:d5:
28:92:e5:76:1f:c3:2b:08:bd:83:5c:e8:bc:8e:c4:80:b0:1a:
ae:0c:56:c0:bd:ca:e8:31:ca:09:e2:ac:4e:3c:88:b7:4e:2f:
08:2c:f4:bc:4f:45:73:dd:0c:ef:ab:50:db:ab:14:bb:52:d3:
05:5d:93:3f:08:33:6b:bd:bb:74:1f:f4:a2:e7:fd:d2:80:3e:
43:37:ec:f9:7e:9e:ee:47:e5:4d:9e:78:a7:66:ef:72:dd:a9:
0c:2e:8b:27:e0:be:72:46:9f:f7:be:fe:e9:04:91:ff:5b:6c:
0f:4e:71:4b:ea:c6:e2:7b:47:a8:c8:ba:98:b0:ef:9b:41:54:
97:f4:44:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:52 2025 by rpki-client