Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft
File: VRGWi3l6ylfWEYAak6hcuGTkPnI.mft (raw, json)
Hash identifier: sVqm42F3MkFKqvp9I8s62XTu/DjqQ6CF0brPbrm2y/I=
Subject key identifier: 65:D1:1A:94:56:10:CF:BC:49:71:5F:FA:1F:2E:47:53:D9:4E:74:2A
Authority key identifier: 55:11:96:8B:79:7A:CA:57:D6:11:80:1A:93:A8:5C:B8:64:E4:3E:72
Certificate issuer: /CN=5511968b797aca57d611801a93a85cb864e43e72
Certificate serial: 0197B77C5303AB7D235FE82E3B64CA87A337
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRGWi3l6ylfWEYAak6hcuGTkPnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft
Manifest number: 0E8C
Signing time: Sat 28 Jun 2025 17:01:07 +0000
Manifest this update: Sat 28 Jun 2025 17:01:07 +0000
Manifest next update: Sun 29 Jun 2025 17:01:07 +0000
Files and hashes: 1: FkEK24gMOi9MxsRr642Srdl8lHQ.roa (hash: DtYbP2drcIzf0g2tEEsCLYpdXSaGIQ0MZgdI48xnP+Q=)
2: VRGWi3l6ylfWEYAak6hcuGTkPnI.crl (hash: dwKLotMOqlI2PVVT8kTu2mpfzCNSccCq1YNk23yNSMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/VRGWi3l6ylfWEYAak6hcuGTkPnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:53:03:ab:7d:23:5f:e8:2e:3b:64:ca:87:a3:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5511968b797aca57d611801a93a85cb864e43e72
Validity
Not Before: Jun 28 17:01:07 2025 GMT
Not After : Jun 29 17:01:07 2025 GMT
Subject: CN=65d11a945610cfbc49715ffa1f2e4753d94e742a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:13:d3:5b:81:93:f7:4e:c9:70:61:39:9e:31:
27:f9:4e:09:a1:7c:8e:f7:43:90:c3:e6:24:74:22:
03:d5:27:67:5d:99:33:ca:73:01:17:74:20:86:64:
b0:50:01:a9:05:3e:9b:c1:c5:3e:80:4e:be:36:ea:
ed:28:81:ca:d1:b7:f8:c0:0a:09:55:b0:20:f5:4d:
d8:3e:79:a6:02:e7:0f:94:a6:a8:51:dc:02:74:42:
f3:57:f0:5a:4a:ec:1d:f3:de:19:22:21:18:4e:94:
55:62:22:ae:d9:40:b5:35:38:26:4b:66:75:78:14:
56:44:5f:43:35:de:b0:a7:06:7a:4a:62:e5:42:8c:
e8:e9:67:a2:2b:4c:2a:c6:7d:3b:c5:3d:df:09:08:
d7:87:7a:39:b1:90:50:c6:a5:53:9d:a0:79:29:db:
a2:7c:ef:f9:95:f4:cb:26:32:e3:c5:5b:06:89:b6:
12:79:a3:30:65:6b:50:ac:cb:11:72:7d:de:15:33:
1c:07:d1:b1:07:bb:a3:13:0f:67:ce:1a:0a:95:0f:
39:7b:04:2b:3a:bf:33:7e:ac:d0:4c:94:d6:6c:d2:
1d:5e:46:ba:84:79:67:a3:2d:ae:88:00:24:5a:c1:
44:c8:c8:08:01:a2:2a:64:57:9f:b8:67:bd:47:75:
40:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D1:1A:94:56:10:CF:BC:49:71:5F:FA:1F:2E:47:53:D9:4E:74:2A
X509v3 Authority Key Identifier:
keyid:55:11:96:8B:79:7A:CA:57:D6:11:80:1A:93:A8:5C:B8:64:E4:3E:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRGWi3l6ylfWEYAak6hcuGTkPnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:68:d5:5d:8b:1b:24:82:2e:f1:40:d0:f2:36:be:3b:ec:56:
a8:4b:71:93:b5:88:92:5e:6d:7e:49:dc:dc:8b:5a:3f:bd:e6:
9c:ad:f4:18:5a:62:9d:a6:27:04:9b:bf:b9:36:38:c5:fe:72:
91:d0:7a:72:42:d2:fd:0b:38:ed:0c:db:4a:e5:0d:45:4c:91:
60:3e:4a:f9:6d:99:78:0f:ac:fd:9e:25:cb:68:0c:9e:03:e8:
ae:d7:e9:7a:06:09:f7:4b:2a:e3:d9:b9:c0:ab:c5:0f:63:f6:
97:b6:c0:c7:34:d4:bb:5d:0d:b3:30:e0:a1:d5:f7:23:32:0f:
60:c9:a3:f0:d1:a2:35:46:af:7b:76:c4:f7:82:80:16:c9:f0:
dd:4d:16:af:97:ab:89:c8:5e:4f:34:15:22:28:e3:a0:1a:b7:
49:7d:9b:cc:41:d3:db:f1:07:c9:65:1a:bd:73:8f:02:e9:d9:
30:ba:ce:28:08:c8:7b:d8:de:ef:8b:65:0e:ce:67:d2:1c:42:
b9:9a:8b:48:4f:78:c1:57:16:33:d7:8f:a2:f7:bb:b5:e2:b8:
fc:09:e2:e0:80:4c:f5:46:25:68:6a:40:e6:11:7c:8d:a2:f8:
ed:b4:6b:4e:92:f8:7c:9b:cb:47:2a:04:f6:2f:d6:bf:d9:46:
00:2e:e1:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:13:39 2025 by rpki-client