Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.mft
File: VxRWZJaS5gVm3gCOEmu90dLr7UU.mft (raw, json)
Hash identifier: 5qaIQIZAiQf5BT3K8NSd/dxNK2n8aDHwCb9zni7Xdxs=
Subject key identifier: 8F:FE:31:E3:6F:91:58:63:6B:C2:6E:44:3E:AA:37:52:2B:3D:08:C0
Authority key identifier: 57:14:56:64:96:92:E6:05:66:DE:00:8E:12:6B:BD:D1:D2:EB:ED:45
Certificate issuer: /CN=571456649692e60566de008e126bbdd1d2ebed45
Certificate serial: 0197B6A144F681C2FBCFB058454854141D23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxRWZJaS5gVm3gCOEmu90dLr7UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.mft
Manifest number: 0E30
Signing time: Sat 28 Jun 2025 13:01:51 +0000
Manifest this update: Sat 28 Jun 2025 13:01:51 +0000
Manifest next update: Sun 29 Jun 2025 13:01:51 +0000
Files and hashes: 1: VxRWZJaS5gVm3gCOEmu90dLr7UU.crl (hash: MeGv5nK4TwhjqTUrMdqD7KzSc4XltjSPDH3l5G7yAL0=)
2: t0KxoFR4-v-aF7ApZp5a51UCPdE.roa (hash: wDmBNX7FNw1Byb+j/pduuukElypr1eZvZiRjB9AwIB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.mft
rsync://rpki.ripe.net/repository/DEFAULT/VxRWZJaS5gVm3gCOEmu90dLr7UU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:44:f6:81:c2:fb:cf:b0:58:45:48:54:14:1d:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=571456649692e60566de008e126bbdd1d2ebed45
Validity
Not Before: Jun 28 13:01:51 2025 GMT
Not After : Jun 29 13:01:51 2025 GMT
Subject: CN=8ffe31e36f9158636bc26e443eaa37522b3d08c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9e:2b:44:9e:44:9b:89:a2:39:5e:9e:8c:b9:
57:a0:74:06:e9:cd:05:8d:9c:86:39:17:a6:92:59:
0f:a6:67:3d:96:3e:24:71:33:74:18:2f:6b:a2:8b:
a5:88:f3:a8:1f:0f:d9:6f:ef:2a:64:06:94:fb:ed:
f6:aa:ff:32:f4:df:a1:43:f7:a6:59:c0:d6:eb:c5:
d6:46:6b:5b:e1:32:ee:04:e0:7a:ff:36:e4:3e:4b:
f5:c9:9a:ba:51:e0:61:4b:b6:d6:03:08:82:ad:3a:
dc:1f:63:fb:5c:1d:37:4c:5b:42:a4:1f:f2:9f:b5:
3a:18:00:12:4c:ed:67:bb:f3:ec:e9:28:13:fe:76:
c2:85:bb:62:4e:fe:cd:64:10:8a:c7:00:02:f8:3a:
b7:28:e2:31:bb:9e:51:d2:eb:b7:20:62:d6:41:ae:
ee:37:79:41:9b:cb:cb:58:b0:b3:09:aa:1c:69:3f:
2c:19:bc:f7:3b:c2:65:98:85:74:0a:ff:29:d8:30:
b5:62:9f:39:f5:25:a5:f6:b9:01:4b:b3:b0:c0:d9:
df:d8:7b:b8:ac:a9:89:c4:9e:83:7d:c8:43:cd:38:
83:da:02:55:64:c6:7a:2f:b9:86:33:c3:05:ad:6a:
3d:45:76:90:9b:5c:c4:35:e2:9c:f5:f2:c0:95:c0:
d3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:FE:31:E3:6F:91:58:63:6B:C2:6E:44:3E:AA:37:52:2B:3D:08:C0
X509v3 Authority Key Identifier:
keyid:57:14:56:64:96:92:E6:05:66:DE:00:8E:12:6B:BD:D1:D2:EB:ED:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxRWZJaS5gVm3gCOEmu90dLr7UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:fd:cb:51:d8:82:d1:89:08:cd:75:0e:cb:71:8e:62:36:19:
1f:bf:0a:a5:3d:11:4d:d9:eb:53:8e:0a:b4:d6:e4:2e:99:26:
7a:cd:1c:80:39:06:5f:50:1c:d2:07:79:33:48:94:1d:e0:81:
8b:6e:90:03:0c:5b:fd:fa:13:9f:77:a1:28:9b:d2:51:ca:d3:
e8:6d:45:48:93:b2:59:cf:c0:08:c0:fc:ed:25:ca:84:9c:d7:
df:c5:55:c6:90:29:bb:6a:8e:e9:85:0c:31:82:2e:63:e5:0e:
d6:3b:17:39:a5:a5:54:99:fc:92:f5:98:33:db:79:41:56:47:
d0:d7:2e:ef:78:6f:a0:21:f7:ef:fa:34:a2:32:05:4d:9b:38:
72:30:b8:0a:b9:02:27:36:b5:3e:b1:6f:e5:fa:19:00:7e:59:
df:9d:e3:7e:75:55:90:b8:5e:c1:2d:57:20:83:20:03:6b:48:
8c:0a:8c:de:08:eb:3b:f8:83:fa:0f:73:89:d9:e7:bf:78:46:
7f:2a:26:a2:51:e8:15:9d:6d:53:56:f9:e5:49:04:1d:1b:80:
91:7e:b7:5c:0e:bd:42:d2:38:f3:65:de:5e:d5:b0:5d:a1:b1:
ce:b1:17:f7:5e:64:2c:c0:6e:bb:22:5e:a9:f0:8e:8a:ed:21:
7e:2d:74:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:55:46 2025 by rpki-client