Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/VwFSjCouLEaRPAsoyjVw84gPGlY.mft
File: VwFSjCouLEaRPAsoyjVw84gPGlY.mft (raw, json)
Hash identifier: m08Cf5VWgEeoERHA7UQeojb9BopXSZkZq5OZHvx84hc=
Subject key identifier: 2C:9C:90:18:05:58:1C:F3:34:27:57:51:92:BF:E2:A1:BC:03:05:EE
Authority key identifier: 57:01:52:8C:2A:2E:2C:46:91:3C:0B:28:CA:35:70:F3:88:0F:1A:56
Certificate issuer: /CN=5701528c2a2e2c46913c0b28ca3570f3880f1a56
Certificate serial: 0197B7EA99FCA35F8927F68BE18ADBAA499D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VwFSjCouLEaRPAsoyjVw84gPGlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/VwFSjCouLEaRPAsoyjVw84gPGlY.mft
Manifest number: 09C3
Signing time: Sat 28 Jun 2025 19:01:34 +0000
Manifest this update: Sat 28 Jun 2025 19:01:34 +0000
Manifest next update: Sun 29 Jun 2025 19:01:34 +0000
Files and hashes: 1: 466YAs6d9cdjAoG1VqV9G_HtvQg.roa (hash: wVtqE+qIa2JsmDebXlhf45xn2AahdoB1no9v6MIhuuw=)
2: VwFSjCouLEaRPAsoyjVw84gPGlY.crl (hash: 6C23I5K9wMBAb+3nY/WLykxNHvuFWKbTrZfpS2j2PM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/VwFSjCouLEaRPAsoyjVw84gPGlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/VwFSjCouLEaRPAsoyjVw84gPGlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VwFSjCouLEaRPAsoyjVw84gPGlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:99:fc:a3:5f:89:27:f6:8b:e1:8a:db:aa:49:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5701528c2a2e2c46913c0b28ca3570f3880f1a56
Validity
Not Before: Jun 28 19:01:34 2025 GMT
Not After : Jun 29 19:01:34 2025 GMT
Subject: CN=2c9c901805581cf33427575192bfe2a1bc0305ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fc:9c:41:dd:c9:62:2b:e0:13:0d:f3:b9:59:
cd:38:ad:c1:01:18:db:e0:b6:72:06:cf:71:22:30:
d8:5b:fc:7b:5a:03:73:fb:15:15:f2:b7:e4:1e:7c:
2c:c7:ce:7c:ed:e6:dc:b6:3b:44:25:7d:34:39:a6:
2e:f3:cb:c0:6c:48:92:39:3a:f7:5a:e9:e0:71:84:
b2:6c:09:f1:7f:57:4a:70:9b:34:6b:22:05:44:12:
0f:e0:2b:41:74:4a:fa:91:db:3d:5e:0d:5d:24:03:
1d:b0:92:89:45:4a:c5:64:e1:c2:e4:97:dc:c2:63:
12:2a:8a:02:17:8b:c8:b4:ee:1e:fe:0c:53:91:1f:
a6:c7:53:50:9c:f4:34:2f:97:e9:7a:50:2b:24:17:
bf:e7:24:da:52:2f:2f:a3:a8:a6:c0:fe:16:b9:da:
aa:b3:7d:8c:b3:8c:dc:8c:53:c2:3c:79:bc:8d:74:
48:79:ae:f6:2a:69:b3:db:5d:72:5b:46:8b:aa:1c:
a8:ed:b2:ed:02:3d:95:1f:08:4e:c7:d3:75:04:fb:
82:62:d9:39:79:6b:16:3d:d6:de:f7:cc:22:88:11:
23:26:3b:a9:40:56:a2:34:3e:11:be:b3:fe:d7:89:
aa:61:9b:f2:d7:ec:fb:c2:66:99:98:d9:26:53:87:
2e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:9C:90:18:05:58:1C:F3:34:27:57:51:92:BF:E2:A1:BC:03:05:EE
X509v3 Authority Key Identifier:
keyid:57:01:52:8C:2A:2E:2C:46:91:3C:0B:28:CA:35:70:F3:88:0F:1A:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwFSjCouLEaRPAsoyjVw84gPGlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/VwFSjCouLEaRPAsoyjVw84gPGlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/VwFSjCouLEaRPAsoyjVw84gPGlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:9a:28:a1:d3:29:cf:d2:45:da:9a:b0:15:b4:4a:7d:0b:90:
a7:cc:53:47:da:f8:82:6b:11:59:74:bc:b3:34:fc:9d:35:e6:
a7:46:01:c2:40:d7:8a:14:1b:d1:b2:c1:d6:ab:6b:53:f1:47:
c1:d6:67:3b:b4:28:94:e9:ca:45:d9:63:a5:b8:3d:db:68:45:
3a:72:28:55:57:d0:ff:56:93:50:6d:f4:75:51:30:2c:64:b1:
68:6c:46:44:f8:9d:55:c0:6a:72:87:03:9d:a3:56:36:16:34:
26:94:ba:76:a1:73:0f:90:64:3c:0c:c5:71:4b:55:ca:34:2d:
0a:bd:30:82:31:65:7a:db:a3:0d:c5:f2:13:b6:cd:ca:39:d6:
9a:15:52:4a:e6:28:67:ba:10:69:45:06:4e:f7:e6:9d:f2:c0:
74:de:42:72:22:4d:98:fd:35:11:34:ed:55:56:00:df:8f:a2:
6d:39:98:cb:1d:97:80:6b:e1:af:b7:4a:0b:5f:c5:5d:62:92:
c3:79:f8:2f:09:c9:9e:c4:96:b5:9f:7d:29:62:09:8e:91:aa:
49:3e:6e:09:14:ac:7c:58:81:12:09:2a:22:2f:ba:c9:7f:90:
ad:48:c3:f0:74:bd:f0:f9:64:92:f5:48:ed:92:86:00:e6:8c:
9e:e2:9d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:54:19 2025 by rpki-client