Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft
File: VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft (raw, json)
Hash identifier: Mup4TXuP9jPf0E7pG0ANfOrG2apWLLFjwgQD3d1kpBw=
Subject key identifier: A1:74:ED:E4:C8:5C:8A:82:16:1C:3F:B7:AC:98:D0:8F:23:36:78:B5
Authority key identifier: 54:3E:20:BF:5F:25:2B:1B:DB:D2:1D:C9:9D:94:CD:97:EA:7F:0F:E6
Certificate issuer: /CN=543e20bf5f252b1bdbd21dc99d94cd97ea7f0fe6
Certificate serial: 0197CEDFF8A110DCF6488C32792B2D64A9F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft
Manifest number: 109F
Signing time: Thu 03 Jul 2025 06:01:14 +0000
Manifest this update: Thu 03 Jul 2025 06:01:14 +0000
Manifest next update: Fri 04 Jul 2025 06:01:14 +0000
Files and hashes: 1: 8ywt7YsrRBMREchgHLgyKhwPgx4.roa (hash: aCuMcxrQC+7OXrTGuhaVav/hwtQSKlgeWzdcYZWQMpw=)
2: VD4gv18lKxvb0h3JnZTNl-p_D-Y.crl (hash: xBqOYbYpqEJCITne4jJLBP9mAyBZwntJ+25qC+sfiTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ce:df:f8:a1:10:dc:f6:48:8c:32:79:2b:2d:64:a9:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543e20bf5f252b1bdbd21dc99d94cd97ea7f0fe6
Validity
Not Before: Jul 3 06:01:14 2025 GMT
Not After : Jul 4 06:01:14 2025 GMT
Subject: CN=a174ede4c85c8a82161c3fb7ac98d08f233678b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7a:1f:cf:26:fb:2c:2d:bd:cf:b0:1a:4f:58:
70:d8:7a:d0:95:d5:8c:3b:16:5f:6d:41:12:4b:59:
cb:de:35:bb:a1:c3:c3:04:5d:07:7a:7c:b1:1d:cd:
c5:25:42:b9:76:9e:e4:23:73:59:a1:19:c6:23:d6:
90:c7:37:27:ee:e1:45:b9:7d:89:9f:7e:d8:9c:fa:
34:61:8b:bb:3c:83:ec:41:ba:16:6b:3e:57:75:34:
9e:9f:a8:19:92:f6:c4:d7:07:1e:b2:85:fe:a6:a5:
89:09:95:57:73:11:68:d2:cb:e8:8c:cb:1b:07:66:
c8:b3:1a:ff:db:80:4d:cf:97:54:56:eb:3e:13:a0:
ef:db:a3:93:37:39:80:07:12:56:8a:61:9d:d8:99:
8c:f2:3c:96:a8:22:6d:e1:6b:39:b5:5a:df:ad:1c:
e5:5c:4a:d7:e9:9c:fa:83:64:c9:55:07:63:74:e8:
5f:ef:38:5c:ca:9d:e2:3c:84:ec:cf:6d:2f:57:97:
d1:25:a5:60:2d:2b:f2:12:c5:16:81:dc:9a:55:37:
78:b0:05:6f:35:58:61:56:8e:b3:d2:86:90:2b:1a:
d8:a7:82:59:5f:82:70:a8:29:da:c2:64:9e:9c:42:
6d:34:ff:c0:89:8c:6b:1f:e4:e7:62:2b:71:a4:23:
a7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:74:ED:E4:C8:5C:8A:82:16:1C:3F:B7:AC:98:D0:8F:23:36:78:B5
X509v3 Authority Key Identifier:
keyid:54:3E:20:BF:5F:25:2B:1B:DB:D2:1D:C9:9D:94:CD:97:EA:7F:0F:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:98:8f:93:f2:a0:17:96:72:76:5b:04:0e:85:f7:2b:f5:df:
ad:57:1a:e4:90:f9:c9:01:b0:f0:26:99:fd:57:d8:49:91:2a:
d0:84:d6:b5:07:a0:82:74:2a:f5:39:c1:5c:5e:7d:17:fd:7a:
67:3b:db:3b:9c:90:76:9a:d9:03:a8:42:3e:36:f9:8d:97:15:
79:5e:75:b6:48:34:da:27:6e:84:34:c2:19:96:f8:39:ea:6f:
01:cb:ab:07:12:83:47:fd:0a:e0:eb:7f:e3:c1:41:6f:bf:c0:
9c:3c:40:c3:1c:11:5d:68:1a:49:a7:a4:34:4e:4e:89:97:a8:
31:07:e4:3f:e7:74:31:45:84:da:5c:ba:e3:a7:bb:1f:56:bf:
c1:0e:18:f7:01:1b:af:4d:84:5f:b6:48:cc:64:3d:04:46:76:
8a:d1:40:7b:46:10:3e:51:4d:7f:b2:7c:a0:7a:ce:0c:61:e6:
87:20:02:55:f9:86:e1:88:45:e6:e0:61:1e:19:dd:1f:cd:10:
f5:e1:b4:33:43:6e:0b:53:7d:74:48:d1:df:49:a1:7a:77:b2:
96:27:78:07:e9:1f:1a:3e:d8:fd:92:03:49:e8:f9:5b:75:8b:
73:dd:23:61:d7:db:53:44:b7:ab:3a:9a:10:97:08:7e:4d:3c:
5e:55:47:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 13:39:44 2025 by rpki-client