Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.mft
File: VRNzP1CmpEqRS5-Pjr941_pOqaA.mft (raw, json)
Hash identifier: fDoISCC2GqOFeMnebNhIR0UYUmoNxW2j+YwFtKuwiOY=
Subject key identifier: 40:B4:22:F2:E2:6D:E6:1F:5D:72:79:7D:C8:6F:17:0C:E7:61:83:82
Authority key identifier: 55:13:73:3F:50:A6:A4:4A:91:4B:9F:8F:8E:BF:78:D7:FA:4E:A9:A0
Certificate issuer: /CN=5513733f50a6a44a914b9f8f8ebf78d7fa4ea9a0
Certificate serial: 0198D473ECECB1B8A1EB97A76CAF532B7FE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRNzP1CmpEqRS5-Pjr941_pOqaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.mft
Manifest number: 1374
Signing time: Sat 23 Aug 2025 01:03:43 +0000
Manifest this update: Sat 23 Aug 2025 01:03:43 +0000
Manifest next update: Sun 24 Aug 2025 01:03:43 +0000
Files and hashes: 1: 0T5ioKjx83-tTr3Mt9le068JcTQ.roa (hash: W8RCmNZUMfFbxdN1LMLcVYrh7MEw9Ur5XcdnTWf1Txo=)
2: VRNzP1CmpEqRS5-Pjr941_pOqaA.crl (hash: 9WxnThwRKpAfxE16p9L1oBPC8LzAlmXMWnWITxx5Oj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VRNzP1CmpEqRS5-Pjr941_pOqaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:ec:ec:b1:b8:a1:eb:97:a7:6c:af:53:2b:7f:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5513733f50a6a44a914b9f8f8ebf78d7fa4ea9a0
Validity
Not Before: Aug 23 01:03:43 2025 GMT
Not After : Aug 24 01:03:43 2025 GMT
Subject: CN=40b422f2e26de61f5d72797dc86f170ce7618382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7a:85:5b:c2:bc:08:80:f3:6f:46:32:ee:f9:
9f:4e:73:b1:51:92:64:ca:9a:26:3d:40:55:bb:89:
80:ad:f4:55:f7:92:e5:ed:53:ee:0c:e8:b4:e9:b2:
0c:03:f0:45:78:33:14:d6:4f:4e:d7:8c:20:e1:06:
53:1b:e6:7e:00:e4:3c:7f:e6:5c:7f:44:b1:03:97:
12:75:eb:71:87:46:6c:8b:db:0e:4c:65:ba:a5:92:
81:d3:3c:fd:39:b4:f7:a6:b7:69:e1:36:2a:26:eb:
ef:de:d2:94:c6:57:26:11:b6:91:71:4b:ed:51:c4:
c3:17:4b:88:ab:10:1f:e5:34:b3:eb:ac:87:d6:57:
24:c7:79:50:67:18:2a:7a:0a:c8:dd:99:20:ae:24:
e7:90:c7:ae:c8:4d:a7:63:38:8b:c6:a7:8f:28:0a:
1a:85:59:32:e7:00:30:b2:a1:cc:1f:44:fb:03:5f:
d7:3c:ae:1f:ab:91:6f:ee:84:9b:6d:e2:1c:57:58:
75:7f:7a:44:fb:d6:5e:b5:99:a7:df:29:e4:d2:4f:
cc:5f:19:bf:60:2a:44:db:e3:c6:96:08:f7:b2:fa:
ac:92:8e:f0:de:c5:01:b9:2e:9d:41:be:0f:d1:9c:
c0:df:e4:8f:02:36:11:95:3b:56:52:6d:cb:44:e1:
68:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B4:22:F2:E2:6D:E6:1F:5D:72:79:7D:C8:6F:17:0C:E7:61:83:82
X509v3 Authority Key Identifier:
keyid:55:13:73:3F:50:A6:A4:4A:91:4B:9F:8F:8E:BF:78:D7:FA:4E:A9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRNzP1CmpEqRS5-Pjr941_pOqaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:54:b8:ee:ff:7d:e1:46:71:61:7d:77:d4:a2:8e:96:67:e2:
d1:4b:9a:bd:61:b9:51:6d:b9:11:01:fb:e6:ad:41:f5:4f:d7:
f2:e4:d3:0b:6e:d9:74:13:1b:b3:b6:c7:4b:8f:19:df:d8:ec:
9e:b5:37:68:f5:3a:89:95:ab:f4:9f:44:26:20:de:ea:11:29:
4a:02:4a:94:b0:5b:d3:79:57:22:c7:d5:a8:15:5b:fa:21:fe:
3f:ec:2d:14:81:ca:1a:3c:7f:00:d7:60:d1:2f:8a:06:30:58:
00:e7:04:18:90:49:45:df:6c:25:e1:b4:40:8a:91:0d:20:aa:
d2:f6:ae:58:b4:e6:1e:b2:d9:db:3c:1b:f0:3f:a5:70:b3:42:
ad:7c:58:44:9e:05:65:49:89:7d:b5:f5:73:0d:56:3f:dc:70:
15:44:38:a9:f8:ef:4d:28:0e:9d:58:00:bd:06:0a:41:93:84:
10:91:a6:01:a3:05:55:73:fd:d7:d8:ae:ac:15:d0:82:74:4e:
71:da:65:cc:9a:8a:ca:ea:e6:be:cf:ca:b2:6b:3a:9c:1f:8c:
d4:0c:5e:0b:41:04:46:0d:59:19:89:a7:05:d7:8e:b3:6d:54:
fb:88:0e:05:62:15:59:36:54:14:43:33:e1:2d:7f:5a:8a:94:
93:aa:d8:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:57 2025 by rpki-client