Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.mft
File: VxRWZJaS5gVm3gCOEmu90dLr7UU.mft (raw, json)
Hash identifier: gwLtnrEn6Ps6N7xl3XztDufI0M5qkm0mr5R8NDo7bYQ=
Subject key identifier: 1B:C8:DE:C3:BB:FD:05:7D:7D:58:C0:1B:8F:25:73:9F:B8:AF:C1:A8
Authority key identifier: 57:14:56:64:96:92:E6:05:66:DE:00:8E:12:6B:BD:D1:D2:EB:ED:45
Certificate issuer: /CN=571456649692e60566de008e126bbdd1d2ebed45
Certificate serial: 0198D472BCA375FA4CBCAE7B7080AD5D1B83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxRWZJaS5gVm3gCOEmu90dLr7UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.mft
Manifest number: 0EC4
Signing time: Sat 23 Aug 2025 01:02:25 +0000
Manifest this update: Sat 23 Aug 2025 01:02:25 +0000
Manifest next update: Sun 24 Aug 2025 01:02:25 +0000
Files and hashes: 1: VxRWZJaS5gVm3gCOEmu90dLr7UU.crl (hash: soQUOFoNEYJzVQjHRrZYIwQ81ijV+FCZngn+1gm5X6o=)
2: t0KxoFR4-v-aF7ApZp5a51UCPdE.roa (hash: wDmBNX7FNw1Byb+j/pduuukElypr1eZvZiRjB9AwIB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.mft
rsync://rpki.ripe.net/repository/DEFAULT/VxRWZJaS5gVm3gCOEmu90dLr7UU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:bc:a3:75:fa:4c:bc:ae:7b:70:80:ad:5d:1b:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=571456649692e60566de008e126bbdd1d2ebed45
Validity
Not Before: Aug 23 01:02:25 2025 GMT
Not After : Aug 24 01:02:25 2025 GMT
Subject: CN=1bc8dec3bbfd057d7d58c01b8f25739fb8afc1a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8f:fc:4e:e9:68:41:32:76:7b:fc:ab:d3:47:
69:51:5e:67:c3:50:7d:a7:bd:ea:dd:02:3d:9d:45:
73:31:97:3f:ac:da:49:e6:ea:f3:3a:13:7f:7b:72:
d9:b8:97:b2:28:de:59:d6:8d:c5:ae:25:60:35:0d:
ea:72:92:f2:97:cb:5f:f2:9d:19:5f:d4:a6:80:8f:
b0:8f:50:09:19:ff:84:5e:81:29:52:75:40:98:0a:
75:63:fa:9c:65:04:fe:5b:3b:c7:7c:e4:a0:ba:cc:
68:30:28:c6:ad:a3:e9:d6:50:96:0a:e5:a1:4c:89:
2e:07:be:0c:71:19:3d:37:de:2b:9f:bf:b6:47:5a:
60:f0:16:c4:0c:8a:07:fd:3b:83:1d:9d:63:e7:3c:
38:80:2c:dc:19:17:dd:1d:fa:44:ba:8e:46:20:43:
e4:7d:82:b4:05:30:0a:d6:cb:0d:9e:b2:b1:53:a6:
34:4a:9b:67:22:51:b0:e5:1f:5e:e4:1a:8e:b0:18:
0c:d2:94:8f:ba:b0:ec:4e:49:00:e7:db:be:ec:2d:
dd:b1:bb:e1:83:5f:49:9b:be:63:5f:b0:5a:bd:09:
7c:58:2b:c3:72:7d:76:a1:51:18:a1:9f:6b:f0:9d:
a7:f4:24:ff:54:5a:63:50:32:52:43:ea:61:63:ec:
9f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C8:DE:C3:BB:FD:05:7D:7D:58:C0:1B:8F:25:73:9F:B8:AF:C1:A8
X509v3 Authority Key Identifier:
keyid:57:14:56:64:96:92:E6:05:66:DE:00:8E:12:6B:BD:D1:D2:EB:ED:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxRWZJaS5gVm3gCOEmu90dLr7UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:ee:c3:83:d7:d0:d2:ec:23:d8:12:e4:26:5c:fb:0e:03:bd:
8c:15:d4:1f:d8:17:66:8e:be:b9:e0:93:a3:dc:d8:a3:60:46:
7c:92:93:be:39:2d:85:17:10:75:17:f8:0a:0d:d2:83:b3:65:
c9:29:5c:12:8d:cd:59:d6:08:3e:98:d2:4d:39:93:0a:66:66:
64:8c:e9:09:38:a0:53:54:17:06:ff:38:77:4a:77:76:a0:76:
bc:b7:1d:a2:6f:4f:bf:35:9f:f8:b5:2e:4b:f3:1c:2e:eb:05:
da:4f:35:1c:9c:00:ad:c8:a7:22:23:26:c4:11:3c:c6:41:d6:
b6:3a:59:f2:a2:5d:e2:9d:d3:7c:e7:fa:43:35:bf:4a:42:af:
64:a7:17:4c:e0:25:ce:75:df:67:ce:72:ee:da:8c:29:b8:14:
36:03:4c:a1:c4:79:a2:fd:98:d4:62:89:7a:b6:c0:6b:8b:94:
77:35:ff:46:f1:44:58:6d:a8:88:28:65:d7:96:d3:96:17:41:
51:f6:ad:99:03:85:36:9b:1e:81:d9:37:15:41:1f:c0:a5:c0:
e5:51:44:78:32:6a:62:99:6f:3e:df:bd:b5:ba:43:c1:5d:2c:
d7:3c:22:c1:be:ee:8a:e6:a2:14:8b:42:c8:06:e2:78:58:6f:
90:a9:b8:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:14:57 2025 by rpki-client