Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.mft
File: VRTyx8ZG7DGgSV4FHWpN4avwx04.mft (raw, json)
Hash identifier: oZ2WY8jXwQhXNWtnwOZ2H8hKRUJPycvJH2GCeFWzkxE=
Subject key identifier: CD:3C:41:F0:25:D9:75:A5:1D:5F:CD:73:B6:84:12:43:EF:EF:9F:01
Authority key identifier: 55:14:F2:C7:C6:46:EC:31:A0:49:5E:05:1D:6A:4D:E1:AB:F0:C7:4E
Certificate issuer: /CN=5514f2c7c646ec31a0495e051d6a4de1abf0c74e
Certificate serial: 0198D472FBDCB155AF89BB8B2831F33CB005
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRTyx8ZG7DGgSV4FHWpN4avwx04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.mft
Manifest number: 1171
Signing time: Sat 23 Aug 2025 01:02:42 +0000
Manifest this update: Sat 23 Aug 2025 01:02:42 +0000
Manifest next update: Sun 24 Aug 2025 01:02:42 +0000
Files and hashes: 1: VRTyx8ZG7DGgSV4FHWpN4avwx04.crl (hash: tmNHYZMIPXB+2KU5+bLO9amep8qlP7pKA+s0qqGtsK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.mft
rsync://rpki.ripe.net/repository/DEFAULT/VRTyx8ZG7DGgSV4FHWpN4avwx04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:fb:dc:b1:55:af:89:bb:8b:28:31:f3:3c:b0:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5514f2c7c646ec31a0495e051d6a4de1abf0c74e
Validity
Not Before: Aug 23 01:02:42 2025 GMT
Not After : Aug 24 01:02:42 2025 GMT
Subject: CN=cd3c41f025d975a51d5fcd73b6841243efef9f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f2:4c:93:fd:3b:89:50:5d:3f:93:a5:96:90:
99:b8:0e:cb:cd:c4:aa:25:3a:56:fc:d1:1a:fd:a6:
2f:07:b6:9d:29:bf:34:0b:16:b1:25:a8:a5:a4:fb:
3c:d6:f9:6e:b3:06:37:48:7c:41:ea:05:bd:f4:b6:
27:e8:06:42:f7:97:13:53:f3:8e:81:8c:98:79:0d:
75:70:18:20:76:5b:f4:a3:d8:00:fc:4d:e4:09:43:
18:37:c9:bd:cf:a2:ac:a5:e1:f3:9e:25:af:37:47:
7d:38:ee:78:fd:35:36:13:c9:5c:4a:74:90:a5:c1:
36:32:38:75:37:e0:6b:8b:a2:3c:3e:02:d6:4d:3c:
37:49:8a:15:c0:2d:6c:13:92:12:11:e4:a8:47:c1:
1e:92:31:4f:ed:de:7e:a0:ec:01:4f:91:ec:51:d7:
d6:47:77:f0:cd:fc:06:42:79:b2:70:c5:bd:fa:ff:
95:1e:c0:1d:ca:af:e8:b2:5e:1c:85:35:41:8c:1d:
a0:07:3b:e2:40:be:f1:1e:c8:3b:54:9d:90:be:6a:
59:8c:3a:eb:5b:91:12:70:75:1b:7b:21:5a:47:56:
60:bf:52:07:1c:57:0d:ed:d6:c2:a4:74:d1:5e:e5:
73:b0:64:ba:ea:b1:66:39:06:e3:50:db:75:1c:77:
63:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:3C:41:F0:25:D9:75:A5:1D:5F:CD:73:B6:84:12:43:EF:EF:9F:01
X509v3 Authority Key Identifier:
keyid:55:14:F2:C7:C6:46:EC:31:A0:49:5E:05:1D:6A:4D:E1:AB:F0:C7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRTyx8ZG7DGgSV4FHWpN4avwx04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:47:16:89:2b:f2:22:ae:4f:71:d9:b4:ae:b4:ba:85:ac:f9:
56:db:b1:da:e6:04:47:b2:5e:1e:3e:ba:b3:07:d7:57:1b:cc:
49:2e:17:89:67:26:f6:cc:0c:e1:88:5f:d8:6a:e7:8f:b5:75:
7a:96:ae:7a:4c:68:5f:c5:a9:14:b0:ac:7f:18:76:f7:fa:bf:
02:9e:f4:4e:e5:31:de:ef:12:c4:77:96:16:fb:7b:dc:db:1c:
97:cb:f6:5b:d9:9d:44:36:36:cd:6c:a3:38:62:69:37:96:13:
a4:6f:90:4b:90:4f:65:d7:e6:8c:4a:70:85:a8:cd:21:e0:fc:
13:5d:48:31:20:81:a7:2b:d3:49:b9:5f:da:f0:49:38:16:d4:
bf:da:47:b2:09:6f:42:3e:dd:a9:04:45:2e:df:c7:e2:ed:10:
fd:22:44:92:81:98:df:8b:af:89:2d:88:3d:1d:44:29:41:c4:
3e:d5:cc:5d:e5:05:13:94:68:1e:ef:d1:db:b3:c2:d6:d1:06:
54:d3:08:b4:37:62:76:ae:29:c6:69:24:2d:f0:cd:39:99:90:
18:48:cb:5f:e5:72:23:fd:9d:1b:9f:ef:d9:94:99:ae:0a:f2:
12:a7:f2:45:ff:e3:9d:94:57:69:15:b7:81:29:5e:23:c5:33:
2d:63:6d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:36 2025 by rpki-client