Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.mft
File: VuhSHoDy8HGjE4W837wxpiHGj5Q.mft (raw, json)
Hash identifier: 30OOE2XRs122ZmsI/pDfLF9XvXYRT/BR+N0wcVAvLwU=
Subject key identifier: A8:41:EC:48:84:08:7B:88:31:35:0B:96:BD:8F:CC:0C:A3:28:27:42
Authority key identifier: 56:E8:52:1E:80:F2:F0:71:A3:13:85:BC:DF:BC:31:A6:21:C6:8F:94
Certificate issuer: /CN=56e8521e80f2f071a31385bcdfbc31a621c68f94
Certificate serial: 0198D54E6825F5DC36E7234F893DDE30A6A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VuhSHoDy8HGjE4W837wxpiHGj5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.mft
Manifest number: 0263
Signing time: Sat 23 Aug 2025 05:02:22 +0000
Manifest this update: Sat 23 Aug 2025 05:02:22 +0000
Manifest next update: Sun 24 Aug 2025 05:02:22 +0000
Files and hashes: 1: VuhSHoDy8HGjE4W837wxpiHGj5Q.crl (hash: Bc3NNRDE/IabHhwAXKUPr+NHFPNRHMcUptYBeHDe6Jo=)
2: gz5Fn0iYS2J-2PWlXPOubZS66_c.roa (hash: 3ZNULpIUwqK52p1xdQUbvRyZUixjUvhEv6tYcx6J92Y=)
3: zfYBzyR4XCbBgM1ilkxfdwCQIbQ.roa (hash: ZQ37lZflawjbgxhO2eI1Uv+5KVEl1Uecz8BJ0COt2xk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VuhSHoDy8HGjE4W837wxpiHGj5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:68:25:f5:dc:36:e7:23:4f:89:3d:de:30:a6:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56e8521e80f2f071a31385bcdfbc31a621c68f94
Validity
Not Before: Aug 23 05:02:22 2025 GMT
Not After : Aug 24 05:02:22 2025 GMT
Subject: CN=a841ec4884087b8831350b96bd8fcc0ca3282742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d5:31:e0:85:b0:72:f2:9d:91:8f:b2:43:15:
13:61:15:c6:27:a4:75:a2:8b:da:0c:07:15:79:c0:
ed:16:24:14:b7:25:8a:ee:77:9b:2e:a1:46:c7:b5:
52:5f:ce:d0:13:c0:25:a1:85:21:88:f7:9a:5e:69:
cc:af:87:50:49:94:6a:1a:a1:1c:f7:38:2f:da:fe:
03:cf:a4:8d:ba:f2:d7:9e:d1:b4:4e:ae:cc:40:e7:
37:1b:e1:41:63:b5:95:e3:87:37:bc:6e:6b:8d:e5:
82:c1:47:15:99:9c:2e:6e:e0:93:35:f6:28:2e:03:
4b:61:1b:57:ad:46:da:e3:0f:cd:95:87:c5:41:96:
9c:dd:c6:d2:7b:ff:4b:78:e1:f0:f8:e2:b5:d8:5e:
79:20:1f:f6:c6:b4:a8:de:bf:e1:29:ee:c6:73:dd:
6f:12:1c:6b:8f:f4:68:48:50:71:ec:ce:14:be:7b:
5c:5d:7c:4a:39:fb:4a:37:78:76:60:1a:ee:28:20:
8f:7e:21:50:f3:38:14:af:ca:31:af:6c:02:cd:7f:
91:e9:13:84:91:bd:61:76:3e:8b:af:9d:89:dd:5d:
62:f7:15:92:3b:fe:e9:e2:bf:10:b7:43:a5:56:4f:
55:ad:e5:2a:ce:22:38:20:9a:dd:dc:16:60:0b:0c:
ca:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:41:EC:48:84:08:7B:88:31:35:0B:96:BD:8F:CC:0C:A3:28:27:42
X509v3 Authority Key Identifier:
keyid:56:E8:52:1E:80:F2:F0:71:A3:13:85:BC:DF:BC:31:A6:21:C6:8F:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VuhSHoDy8HGjE4W837wxpiHGj5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:3b:49:0a:67:6e:ef:fe:f4:c9:d9:1a:27:4c:50:9d:a6:32:
bd:5c:0e:e6:8b:05:14:45:8d:24:38:cd:56:a4:17:8e:80:79:
83:92:96:fc:33:59:07:b7:b6:c9:87:5e:75:85:5f:7a:5c:b7:
0a:f5:23:09:12:b7:82:b9:ac:9e:44:f3:c5:e5:76:b4:42:5e:
52:6f:75:92:ee:2d:2b:8e:42:c2:17:88:f4:4f:68:13:34:c2:
c3:cf:e1:01:31:2e:cf:02:d6:6b:0e:31:e3:5e:73:48:c1:f3:
40:bf:e7:d6:61:00:c7:6c:bf:67:76:db:67:a2:62:5d:8c:11:
8f:d9:49:b0:0b:02:ac:f0:ba:82:d4:8e:b8:8d:e4:89:32:d4:
ed:e7:75:29:00:bb:84:c3:55:ff:b1:c8:90:a1:ba:95:cd:0d:
b9:20:85:71:af:98:b5:44:1d:a8:b3:64:1a:ce:02:ca:10:f3:
8c:cc:b2:49:a6:c9:75:c1:99:3d:5f:43:b7:78:90:eb:f7:40:
2d:f8:1d:c2:65:eb:4e:80:7f:40:85:1b:b0:27:46:12:e6:91:
d8:4f:5c:b6:90:07:de:3a:9b:95:68:41:ef:91:06:17:85:1f:
62:fa:4b:44:9a:bb:c3:c6:6c:35:48:2b:d7:ac:50:07:fd:cc:
29:8f:b3:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:41:17 2025 by rpki-client