Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft
File: VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft (raw, json)
Hash identifier: 4xH4CtQ8GXJArNtDnl/wwz6EaXSO2kWFzDufJX2Zf1Q=
Subject key identifier: 33:95:DB:21:D3:87:7E:C7:CD:B6:C4:BC:C3:20:04:CD:64:31:D1:62
Authority key identifier: 54:3E:20:BF:5F:25:2B:1B:DB:D2:1D:C9:9D:94:CD:97:EA:7F:0F:E6
Certificate issuer: /CN=543e20bf5f252b1bdbd21dc99d94cd97ea7f0fe6
Certificate serial: 0198D5836E89CC54FEAE0C5E4648E5C594A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft
Manifest number: 1127
Signing time: Sat 23 Aug 2025 06:00:17 +0000
Manifest this update: Sat 23 Aug 2025 06:00:17 +0000
Manifest next update: Sun 24 Aug 2025 06:00:17 +0000
Files and hashes: 1: 8ywt7YsrRBMREchgHLgyKhwPgx4.roa (hash: aCuMcxrQC+7OXrTGuhaVav/hwtQSKlgeWzdcYZWQMpw=)
2: VD4gv18lKxvb0h3JnZTNl-p_D-Y.crl (hash: FkONwynj6G6d/U3YY12VDPRE2RjVdv7V+MrIX6KMnWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:6e:89:cc:54:fe:ae:0c:5e:46:48:e5:c5:94:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543e20bf5f252b1bdbd21dc99d94cd97ea7f0fe6
Validity
Not Before: Aug 23 06:00:17 2025 GMT
Not After : Aug 24 06:00:17 2025 GMT
Subject: CN=3395db21d3877ec7cdb6c4bcc32004cd6431d162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2d:e1:93:2d:5e:d2:61:a0:08:e3:eb:04:cd:
5f:84:8d:61:c1:b6:5b:93:41:50:f8:82:bf:a8:b1:
ca:6a:2e:37:32:77:fb:58:df:15:63:8e:de:ee:7a:
b7:e7:59:c9:ee:ae:c8:14:05:22:6a:17:4d:f2:e9:
a0:b4:80:4f:b5:d2:e5:b3:73:33:b4:b1:1b:3f:d6:
45:96:66:3e:33:d3:95:c2:1f:38:aa:7f:b5:32:3f:
6e:38:5b:9a:9d:53:a0:29:82:95:8e:63:bb:b8:5e:
dd:57:41:f6:03:e4:53:43:42:2b:6b:a8:1f:c9:84:
36:45:d3:e2:7e:5b:e1:a8:50:be:f7:57:e3:9b:40:
86:c3:25:85:1d:83:a6:98:b0:1d:e3:6e:bd:20:e9:
44:8d:a1:46:00:38:f1:b1:72:50:1d:0c:c6:12:78:
e3:97:f3:2c:d9:78:29:de:c6:d0:c9:22:7d:68:58:
92:2d:76:83:bd:b0:30:38:86:cf:3b:a7:2e:78:09:
40:7b:06:11:7e:b7:63:97:0b:54:6a:d4:c7:0f:83:
2f:ff:61:e7:cd:e6:50:34:f5:d5:8a:73:d0:bc:76:
54:cb:c8:8f:8c:d1:a9:6d:52:f4:5a:d6:53:c8:86:
3b:0c:4e:f0:cf:72:78:37:cb:f7:e5:63:35:cf:61:
f4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:95:DB:21:D3:87:7E:C7:CD:B6:C4:BC:C3:20:04:CD:64:31:D1:62
X509v3 Authority Key Identifier:
keyid:54:3E:20:BF:5F:25:2B:1B:DB:D2:1D:C9:9D:94:CD:97:EA:7F:0F:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:f6:f0:6e:6c:79:14:e3:39:a5:68:04:d2:d0:f3:76:d5:e8:
18:ba:af:82:4c:ca:1b:d8:92:af:60:6a:28:cd:5a:d1:80:e9:
98:04:02:25:fb:48:82:bf:5d:89:19:b4:ba:03:a6:d9:01:c4:
f7:f1:c1:92:c6:cf:60:ca:7b:75:15:93:c3:55:69:30:2e:1c:
8f:f7:0f:6c:79:2b:2b:d4:37:96:e3:ea:6e:3d:2b:02:74:8c:
11:19:4b:32:0a:50:f3:32:b5:a7:53:db:11:8a:ce:7b:7f:5a:
85:cf:5b:e1:95:8c:35:d4:37:e7:3a:cb:6d:d9:18:87:a8:05:
31:f9:15:60:09:31:4a:b7:09:36:8d:4c:01:6a:90:9b:e8:1a:
5f:14:8b:1a:84:b7:5d:38:5c:d2:cb:5e:96:80:70:82:f4:36:
5a:bc:da:4e:5c:64:91:43:a2:83:11:ed:55:59:83:01:8c:46:
33:31:f1:67:7f:53:7e:aa:9d:14:83:9c:6e:fb:95:1a:17:be:
c8:95:6e:d1:6e:c8:da:f7:78:cb:00:83:94:b0:c0:6e:ef:d4:
db:f7:9b:c5:2d:35:c9:08:9a:80:31:2b:a2:1e:ac:f8:f8:83:
8c:b7:b5:4b:12:cc:5f:cb:56:87:1d:5a:2a:57:b7:55:08:5d:
0d:e5:73:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:39:05 2025 by rpki-client