Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/e23338-1f3f-4acd-a88c-2eccfce112dd/1/VfrLmru0yp4IZiqT0ucy5wsGwvI.mft
File: VfrLmru0yp4IZiqT0ucy5wsGwvI.mft (raw, json)
Hash identifier: U94ZAZ/OcJ+OTaeBVdZ7FPUkfeABM7rQqDEhWlMMRmU=
Subject key identifier: D8:4C:D2:34:5C:0C:77:E9:2A:A0:75:E9:6A:B2:EF:18:4D:59:25:BD
Authority key identifier: 55:FA:CB:9A:BB:B4:CA:9E:08:66:2A:93:D2:E7:32:E7:0B:06:C2:F2
Certificate issuer: /CN=55facb9abbb4ca9e08662a93d2e732e70b06c2f2
Certificate serial: 0198D66036DEA53031A5DE261D41BF821447
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VfrLmru0yp4IZiqT0ucy5wsGwvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/e23338-1f3f-4acd-a88c-2eccfce112dd/1/VfrLmru0yp4IZiqT0ucy5wsGwvI.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 10:01:26 +0000
Manifest this update: Sat 23 Aug 2025 10:01:26 +0000
Manifest next update: Sun 24 Aug 2025 10:01:26 +0000
Files and hashes: 1: VfrLmru0yp4IZiqT0ucy5wsGwvI.crl (hash: EKx5Jxa6gnCxXGLAfYtkgBBCD2CgGLWSP+Lorc4gRSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/e23338-1f3f-4acd-a88c-2eccfce112dd/1/VfrLmru0yp4IZiqT0ucy5wsGwvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/e23338-1f3f-4acd-a88c-2eccfce112dd/1/VfrLmru0yp4IZiqT0ucy5wsGwvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/VfrLmru0yp4IZiqT0ucy5wsGwvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:36:de:a5:30:31:a5:de:26:1d:41:bf:82:14:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55facb9abbb4ca9e08662a93d2e732e70b06c2f2
Validity
Not Before: Aug 23 10:01:26 2025 GMT
Not After : Aug 24 10:01:26 2025 GMT
Subject: CN=d84cd2345c0c77e92aa075e96ab2ef184d5925bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e9:5b:0d:53:82:36:4f:fe:34:98:e0:fd:5d:
ca:a2:1f:49:13:75:3a:4d:9a:4d:08:94:1e:6c:28:
0f:54:c9:4e:4a:51:9a:32:b2:85:1d:30:bf:e6:f5:
0b:4d:cc:f5:59:d5:74:f1:d1:ca:32:a4:72:ef:2b:
ea:fd:e5:0b:4a:48:b0:eb:5c:8c:2a:fc:6f:c5:61:
41:5b:9b:b1:75:bf:6a:35:f5:b0:f9:7c:76:b1:04:
ec:4a:14:1c:29:10:f2:65:c8:66:5d:1d:25:82:47:
ca:35:b5:c6:3d:c8:d8:c5:1c:ad:86:59:76:e8:c1:
3f:d8:25:59:5d:57:89:74:5c:8f:df:79:27:0a:0b:
16:c2:f5:e3:45:c3:1d:98:42:c8:97:d0:71:b5:56:
d0:72:7d:70:cd:a0:5c:a4:a2:fe:74:a3:4b:4d:a8:
42:d7:0f:16:2b:41:64:8d:b3:6b:f6:6f:aa:b6:b8:
e0:d9:8c:1e:6c:31:07:25:23:d3:13:9f:68:63:1b:
76:e9:78:3e:92:ed:5e:5f:dc:e6:e8:c3:82:55:71:
a7:45:d4:e6:5e:01:1c:0d:28:1b:43:f2:8f:63:0e:
5f:81:cb:cf:a9:5e:72:fe:8e:38:42:ee:6a:ac:4e:
97:e8:81:37:7d:fb:a6:5b:ed:99:bf:bc:dc:52:dc:
3b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:4C:D2:34:5C:0C:77:E9:2A:A0:75:E9:6A:B2:EF:18:4D:59:25:BD
X509v3 Authority Key Identifier:
keyid:55:FA:CB:9A:BB:B4:CA:9E:08:66:2A:93:D2:E7:32:E7:0B:06:C2:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VfrLmru0yp4IZiqT0ucy5wsGwvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e23338-1f3f-4acd-a88c-2eccfce112dd/1/VfrLmru0yp4IZiqT0ucy5wsGwvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e23338-1f3f-4acd-a88c-2eccfce112dd/1/VfrLmru0yp4IZiqT0ucy5wsGwvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:ff:44:00:1c:f4:2d:14:00:6a:41:c4:fd:92:9f:32:ff:bf:
fc:e8:08:67:f1:b8:41:9e:04:ea:37:db:26:cf:a9:39:44:35:
e9:3e:00:96:5d:30:51:ca:3e:1c:31:7d:76:fa:ae:78:a8:8a:
56:51:d9:a4:00:95:09:2d:36:7f:3d:2f:1c:d5:14:21:9e:7d:
c1:be:b4:27:fc:e4:2a:60:58:33:a6:bc:50:f3:d1:93:04:cf:
5f:6c:ae:f1:c3:01:37:48:f2:43:48:62:d4:33:7c:ef:7c:3d:
bc:81:74:4d:52:89:9c:e4:a8:46:2d:a2:5b:56:c6:e2:46:1d:
42:74:91:8c:df:6f:a6:84:44:e1:3f:8a:e4:23:4f:c1:4b:9e:
6f:1a:72:0b:25:51:a3:b8:b6:f0:2a:c4:34:d0:22:f5:b2:45:
61:e1:10:0e:e5:ee:e3:16:8e:ce:a7:d9:f4:80:3b:f9:37:7a:
91:1a:da:b1:29:3b:95:97:5b:c1:90:d4:f0:38:1f:72:43:a6:
cd:33:6b:10:8b:48:91:58:84:56:47:4f:71:06:4e:71:a3:b0:
8c:2c:1a:bc:24:a2:e8:c9:fb:ac:60:55:8a:f4:22:76:ff:d7:
60:0e:f6:5c:de:56:a1:a8:05:ec:22:06:c7:4f:75:1b:47:e8:
5b:32:fd:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:13:24 2025 by rpki-client