Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.mft
File: VRNzP1CmpEqRS5-Pjr941_pOqaA.mft (raw, json)
Hash identifier: 1z++gfdEaffewVfcOo9Q2sr+CYlbgx7J75djWHIKGxk=
Subject key identifier: BE:1A:82:BE:60:32:E7:58:8B:4A:D9:1E:DF:78:1B:1F:4D:70:8E:AF
Authority key identifier: 55:13:73:3F:50:A6:A4:4A:91:4B:9F:8F:8E:BF:78:D7:FA:4E:A9:A0
Certificate issuer: /CN=5513733f50a6a44a914b9f8f8ebf78d7fa4ea9a0
Certificate serial: 0197B6A0FCB974018D8EEE19F667C69F3987
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRNzP1CmpEqRS5-Pjr941_pOqaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.mft
Manifest number: 12E0
Signing time: Sat 28 Jun 2025 13:01:33 +0000
Manifest this update: Sat 28 Jun 2025 13:01:33 +0000
Manifest next update: Sun 29 Jun 2025 13:01:33 +0000
Files and hashes: 1: 0T5ioKjx83-tTr3Mt9le068JcTQ.roa (hash: W8RCmNZUMfFbxdN1LMLcVYrh7MEw9Ur5XcdnTWf1Txo=)
2: VRNzP1CmpEqRS5-Pjr941_pOqaA.crl (hash: YEq4qzodyJcU+TSPX6O5GfSg4+F4eJF73lbxNX3Vwn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VRNzP1CmpEqRS5-Pjr941_pOqaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:fc:b9:74:01:8d:8e:ee:19:f6:67:c6:9f:39:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5513733f50a6a44a914b9f8f8ebf78d7fa4ea9a0
Validity
Not Before: Jun 28 13:01:33 2025 GMT
Not After : Jun 29 13:01:33 2025 GMT
Subject: CN=be1a82be6032e7588b4ad91edf781b1f4d708eaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a0:8e:4a:86:a0:43:bc:23:0b:3e:f7:11:3f:
e1:0c:d5:f4:64:54:46:0f:92:69:a2:22:5e:05:1a:
52:9d:d2:9a:9e:76:84:90:a7:48:4c:39:7f:fc:92:
30:bb:fa:a8:a5:3c:b9:29:45:66:db:9c:b6:f7:5f:
fb:39:da:4c:14:64:51:f4:3a:48:8c:64:76:7f:a6:
0f:3a:8d:51:c6:39:23:79:aa:67:9a:36:c1:62:be:
4d:8d:7d:ef:01:1f:54:17:b2:9f:3b:ba:59:bd:d5:
42:c0:98:9b:a1:82:d6:1e:a3:ca:9f:c7:9f:f6:2c:
e3:ae:35:7a:5e:6b:52:87:bc:19:8d:d5:08:27:49:
99:b7:12:19:87:9b:a7:9b:f7:00:c9:1d:80:96:9f:
e5:03:e1:87:81:17:e2:45:e5:da:a7:fe:3a:5e:e7:
2d:9d:46:89:77:9a:10:7d:29:dc:2a:7f:f0:c5:45:
c7:94:38:07:ce:00:35:63:d8:82:a6:cd:1c:f0:7d:
63:11:87:82:4f:fe:3a:cc:23:ce:5a:b0:57:2b:64:
e6:c6:0c:fa:b1:42:a9:29:a8:93:2f:d6:fc:0d:53:
fd:ed:c1:78:cf:b0:6e:62:54:53:77:7a:21:c1:b0:
fe:63:ed:00:b8:5c:92:38:a0:01:69:6b:8e:0b:19:
a4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:1A:82:BE:60:32:E7:58:8B:4A:D9:1E:DF:78:1B:1F:4D:70:8E:AF
X509v3 Authority Key Identifier:
keyid:55:13:73:3F:50:A6:A4:4A:91:4B:9F:8F:8E:BF:78:D7:FA:4E:A9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRNzP1CmpEqRS5-Pjr941_pOqaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:3a:40:e9:b4:00:43:75:82:f9:f5:b1:f3:57:81:f0:bc:4a:
22:ef:ae:dc:01:4f:cd:09:5e:02:ae:e5:6d:1d:fe:7b:c4:08:
f1:4f:0f:12:be:e5:42:2d:97:4b:8e:73:d5:87:89:15:99:d5:
b0:bf:c3:8c:21:35:b9:be:48:d9:7e:aa:37:18:54:23:bc:85:
0a:d2:ef:69:bf:10:fb:80:ac:45:f9:fa:8c:f6:5d:b3:9d:d9:
43:47:32:e2:8d:30:c8:cb:d2:7a:8e:69:fe:98:c1:de:9a:24:
c0:4c:47:d7:f1:c0:85:15:29:91:54:c2:25:4d:82:8b:a9:e0:
f8:bf:e8:13:d9:85:6e:d9:60:eb:d8:b7:59:5d:cd:c7:40:b9:
9d:b0:14:2b:74:6f:e5:14:4c:49:ac:29:06:0b:19:45:dc:79:
30:fd:a7:fc:3b:b4:4c:86:dc:c1:77:59:89:6e:64:1d:fd:74:
a5:49:9f:10:36:6c:c0:12:3d:23:a4:d7:a6:59:6e:49:bb:13:
ad:0d:ae:da:7d:dd:08:ed:1a:0b:9f:e0:fb:d4:40:1f:d0:e4:
80:31:0b:3f:c9:db:aa:45:16:cc:69:9f:a9:c6:ee:1b:b0:0e:
b0:cf:0e:9e:c3:2a:ca:91:0c:76:1d:54:4c:74:57:0f:cd:43:
a6:0f:9e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:11:36 2025 by rpki-client