Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.mft
File: VW22ld3zHiiYRm757fukiA2OGfs.mft (raw, json)
Hash identifier: 4hwlKILyDqVUVbR8kUfl6YcZvPhTeGy3+SOpMV5x47E=
Subject key identifier: 40:D0:D9:76:9F:B7:75:DF:B8:16:4A:52:70:D5:A6:D0:CC:3A:06:97
Authority key identifier: 55:6D:B6:95:DD:F3:1E:28:98:46:6E:F9:ED:FB:A4:88:0D:8E:19:FB
Certificate issuer: /CN=556db695ddf31e2898466ef9edfba4880d8e19fb
Certificate serial: 0198D4E05BBB5C0EE739750C6780FE3E6592
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VW22ld3zHiiYRm757fukiA2OGfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.mft
Manifest number: 0143
Signing time: Sat 23 Aug 2025 03:02:09 +0000
Manifest this update: Sat 23 Aug 2025 03:02:09 +0000
Manifest next update: Sun 24 Aug 2025 03:02:09 +0000
Files and hashes: 1: EslCT3gxkxtf5DQ7QkwYmLYeFlo.roa (hash: Uhm0SZdyDhhQLcGTvxZ7EAQVgtjflrvk9JNzMwkUJ7I=)
2: VW22ld3zHiiYRm757fukiA2OGfs.crl (hash: VCItaDjKoUThARAfY1FiaktvxR8S4f1F0W5KQzs4HsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/VW22ld3zHiiYRm757fukiA2OGfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:5b:bb:5c:0e:e7:39:75:0c:67:80:fe:3e:65:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=556db695ddf31e2898466ef9edfba4880d8e19fb
Validity
Not Before: Aug 23 03:02:09 2025 GMT
Not After : Aug 24 03:02:09 2025 GMT
Subject: CN=40d0d9769fb775dfb8164a5270d5a6d0cc3a0697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:11:f7:4d:ea:0f:a0:47:fc:00:3f:82:6e:ce:
cc:7e:52:99:09:4a:9c:14:33:12:64:61:bf:eb:1c:
34:b9:62:97:31:3f:72:7a:aa:71:63:0b:66:c8:9c:
a6:87:00:2a:0e:88:75:d8:ec:a4:d8:d4:ba:ce:fc:
c6:3d:77:90:60:b8:bc:71:da:99:c1:62:1f:f8:3c:
07:2f:a7:79:f1:54:11:cf:34:58:94:b7:8c:1c:a7:
06:09:47:1d:f6:62:09:16:6c:96:17:5f:40:24:ed:
35:91:7c:c0:e1:1e:f5:29:fb:14:a5:cb:7a:8a:a9:
e7:a8:b2:b8:fd:ef:df:a7:70:a2:95:46:82:26:fe:
27:85:a6:e1:90:74:56:68:6b:6e:e5:e8:c4:fb:f2:
03:21:7d:3e:fd:9b:a4:bc:a7:b4:f7:7b:58:e8:eb:
17:3b:0f:4c:c0:ed:af:9b:df:9b:f4:01:ab:53:af:
e7:0b:35:71:4f:77:9b:ad:ef:8e:eb:38:49:19:a7:
bd:59:28:04:92:38:26:c9:86:9e:0c:ec:91:50:cc:
31:a8:05:f7:85:a6:c9:b3:c7:04:aa:f1:b8:6d:e5:
ed:cc:2c:2b:f8:cb:e8:7b:77:18:c2:31:46:25:2d:
b3:19:76:df:a9:21:16:b0:ba:b9:38:0d:5d:e7:d9:
a9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D0:D9:76:9F:B7:75:DF:B8:16:4A:52:70:D5:A6:D0:CC:3A:06:97
X509v3 Authority Key Identifier:
keyid:55:6D:B6:95:DD:F3:1E:28:98:46:6E:F9:ED:FB:A4:88:0D:8E:19:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VW22ld3zHiiYRm757fukiA2OGfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:ba:5c:52:da:91:a1:4d:91:5c:bb:66:ce:ff:cc:21:b9:97:
14:e3:67:e2:50:1d:34:62:8a:06:3a:ea:e0:95:3f:3f:ed:ac:
87:d9:e9:53:6a:23:e9:6b:f1:4c:a5:64:12:ff:7e:77:94:54:
d7:60:8f:c4:9a:b3:d7:0e:57:9e:c6:59:eb:99:2d:bc:73:b5:
91:3f:a4:a3:34:ac:98:2c:42:49:05:1e:fd:a4:a9:d7:ac:02:
0c:09:5c:00:7f:1c:22:b3:44:23:32:03:37:6d:e5:f4:38:52:
09:19:9a:93:79:fc:4e:e2:4c:b5:b0:97:b6:5f:45:48:4d:a8:
19:24:67:9f:0d:36:a8:df:68:a4:5c:3e:23:b9:bc:49:0e:d1:
da:f3:37:0d:ae:9d:3c:93:e2:24:7b:f8:44:3a:9e:a3:e6:34:
bf:8d:36:eb:e7:f7:cd:00:94:e7:75:d0:83:c5:07:30:5f:a7:
a0:5d:f7:f8:3b:71:28:dc:81:d6:87:18:ed:d5:09:3b:cb:04:
0e:c3:0a:49:b7:26:9f:80:a1:a3:b2:16:4c:42:ae:46:4a:aa:
1d:e3:b0:fc:32:f6:f9:0a:db:23:f7:d2:f2:dd:cd:22:e2:1a:
68:c5:aa:3b:47:7e:1d:25:b7:aa:40:27:99:b1:a7:48:fe:be:
e8:f9:c9:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:23 2025 by rpki-client