Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/VOZgtIyPBMmjLc3qHP7uUYBEa9k.mft
File: VOZgtIyPBMmjLc3qHP7uUYBEa9k.mft (raw, json)
Hash identifier: 4wfuZ+KHquGK45kwmm4IO84bAF3m+VjX4ZoddJDzBp4=
Subject key identifier: 47:53:EA:76:04:64:03:45:6B:8B:43:0F:9B:F6:BB:DE:F7:7E:4F:97
Authority key identifier: 54:E6:60:B4:8C:8F:04:C9:A3:2D:CD:EA:1C:FE:EE:51:80:44:6B:D9
Certificate issuer: /CN=54e660b48c8f04c9a32dcdea1cfeee5180446bd9
Certificate serial: 0197B70F12BADEFD147AC04A2C96B0EF4D9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VOZgtIyPBMmjLc3qHP7uUYBEa9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/VOZgtIyPBMmjLc3qHP7uUYBEa9k.mft
Manifest number: 1249
Signing time: Sat 28 Jun 2025 15:01:47 +0000
Manifest this update: Sat 28 Jun 2025 15:01:47 +0000
Manifest next update: Sun 29 Jun 2025 15:01:47 +0000
Files and hashes: 1: OUuP-6YCe14zgkfTQMdJLc2r9MQ.roa (hash: Aex7iaImK8VF1F7ddVhsOVcjsTFE1aBCNKfli39IJNE=)
2: VOZgtIyPBMmjLc3qHP7uUYBEa9k.crl (hash: sGIfGAnMNMOEoeU+xGFuxk0caybpuoonbmeB4lvretI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/VOZgtIyPBMmjLc3qHP7uUYBEa9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/VOZgtIyPBMmjLc3qHP7uUYBEa9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/VOZgtIyPBMmjLc3qHP7uUYBEa9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:12:ba:de:fd:14:7a:c0:4a:2c:96:b0:ef:4d:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54e660b48c8f04c9a32dcdea1cfeee5180446bd9
Validity
Not Before: Jun 28 15:01:47 2025 GMT
Not After : Jun 29 15:01:47 2025 GMT
Subject: CN=4753ea76046403456b8b430f9bf6bbdef77e4f97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:81:32:9a:4d:0c:b8:6c:92:d4:7b:3c:1e:23:
bc:87:53:91:12:06:ae:9a:77:7c:b9:98:fa:96:1c:
4f:75:f7:c1:68:6c:1a:76:c4:a0:66:73:50:0e:bc:
c3:f5:cf:55:b4:88:a1:c6:26:7b:e9:6c:56:76:ed:
74:15:3d:3f:29:43:cb:8c:5b:c3:a4:da:09:1e:71:
a8:03:52:83:82:e1:89:6f:15:76:a7:0f:cf:6e:ad:
79:be:78:79:d5:1b:80:8f:3d:2c:19:cc:35:1e:21:
e4:85:f1:67:35:45:3a:e4:fc:97:b7:24:02:a0:98:
57:0a:13:51:ab:82:93:64:0d:2a:62:79:13:25:9b:
e6:a4:02:89:ed:2b:c1:8a:f0:82:c7:e0:25:84:7d:
d5:c6:e3:d7:66:32:6b:a1:3e:48:d4:37:fd:90:52:
d6:ce:2d:4c:7e:a9:92:88:d5:13:92:28:8e:54:81:
d2:b9:76:33:7a:74:e0:95:c7:0b:a2:f9:04:1f:ee:
ae:a4:df:a5:4d:c3:f3:18:5c:e6:9e:20:c9:93:6b:
92:28:6c:18:8d:66:f3:18:2c:99:11:36:de:43:91:
a3:c7:b6:b1:31:98:37:a0:2a:bd:b4:c5:08:8f:28:
2f:88:bb:50:fc:1a:f5:ff:31:45:70:5e:87:59:5f:
91:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:53:EA:76:04:64:03:45:6B:8B:43:0F:9B:F6:BB:DE:F7:7E:4F:97
X509v3 Authority Key Identifier:
keyid:54:E6:60:B4:8C:8F:04:C9:A3:2D:CD:EA:1C:FE:EE:51:80:44:6B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VOZgtIyPBMmjLc3qHP7uUYBEa9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/VOZgtIyPBMmjLc3qHP7uUYBEa9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/VOZgtIyPBMmjLc3qHP7uUYBEa9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:fb:f3:37:89:dc:23:e8:b1:fe:d0:25:19:36:36:f8:f1:16:
68:a6:47:b6:1e:41:4c:80:bf:b2:e1:b0:59:95:0c:fe:89:90:
43:d5:e8:d2:98:66:78:89:6e:01:16:1c:1e:ed:7c:cf:6f:fe:
a2:08:3c:87:e4:96:68:b7:2d:13:31:83:d6:6d:b7:03:f7:93:
3f:45:b2:5c:22:e8:5b:23:e7:52:f6:b1:a2:a9:5d:1e:34:37:
2f:16:06:70:d0:80:c5:9c:7f:a6:c1:00:79:b0:b7:51:7d:9f:
d1:65:73:6c:85:57:fb:72:88:b4:0c:c5:f5:40:7b:1d:3b:1c:
ca:72:f2:37:ed:d9:a1:22:c3:35:78:af:9b:8b:64:cb:53:20:
23:0d:50:15:12:a4:b9:a1:1b:9e:ee:99:fa:b9:5c:3b:35:3d:
77:d4:2c:91:f2:90:6e:68:79:5f:e8:92:ab:a4:97:b3:33:17:
25:cd:ec:2e:16:3c:91:32:26:d5:55:ac:84:50:96:50:8c:f4:
ed:38:ba:35:98:03:31:cc:25:05:ed:53:26:08:ed:9f:a0:b1:
1c:2d:fb:ab:f6:cc:46:74:c4:6a:c3:16:4f:fc:2e:c2:9f:92:
07:da:34:cb:61:df:93:0a:be:76:e4:bd:36:ef:bd:88:21:b4:
76:3e:ab:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:46:36 2025 by rpki-client