Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.mft
File: VFmECNI871JWD36q1OHbDIYgYsM.mft (raw, json)
Hash identifier: ahRX6nRGiuaMJU+AOhzucOTbjEaxlWBXmAVL7arOCVg=
Subject key identifier: 75:D2:E5:F3:57:10:5D:36:13:C4:01:E5:A4:65:89:26:6B:4E:AC:41
Authority key identifier: 54:59:84:08:D2:3C:EF:52:56:0F:7E:AA:D4:E1:DB:0C:86:20:62:C3
Certificate issuer: /CN=54598408d23cef52560f7eaad4e1db0c862062c3
Certificate serial: 0198D7A97894CCFE6EDB8B8DB6748F4D85A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VFmECNI871JWD36q1OHbDIYgYsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 16:01:04 +0000
Manifest this update: Sat 23 Aug 2025 16:01:04 +0000
Manifest next update: Sun 24 Aug 2025 16:01:04 +0000
Files and hashes: 1: 9dTJ-nYACxpnRY5rhOVsQaAIp6o.roa (hash: IImECG5Z8yt26nxcW9N1eIdxFCugxBSzO203A94ADp0=)
2: VFmECNI871JWD36q1OHbDIYgYsM.crl (hash: wyjfhlHFi0Jrdo3asdS8uRdZhmSCM7bvHvtL9gfaOww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VFmECNI871JWD36q1OHbDIYgYsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:78:94:cc:fe:6e:db:8b:8d:b6:74:8f:4d:85:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54598408d23cef52560f7eaad4e1db0c862062c3
Validity
Not Before: Aug 23 16:01:04 2025 GMT
Not After : Aug 24 16:01:04 2025 GMT
Subject: CN=75d2e5f357105d3613c401e5a46589266b4eac41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b0:e3:1b:c3:14:77:da:4b:83:cc:f5:45:6b:
dd:a1:39:4b:f6:6d:42:82:38:b3:b4:f0:f1:27:9e:
ff:21:70:d8:af:10:09:0d:13:6d:f8:53:5f:ac:4e:
07:81:24:a0:ef:c5:4c:af:34:89:5b:77:a0:dc:e5:
8f:d6:cf:d1:eb:e4:b6:c7:31:c6:fe:7b:66:20:59:
e5:bf:7e:5a:53:31:9c:a7:c9:30:fc:78:4c:48:e1:
2b:4a:7e:a4:d3:4a:7b:ec:61:7c:61:b1:61:32:cb:
a8:ba:09:80:40:94:e4:3a:52:ae:fd:9c:bd:64:20:
82:2f:c7:70:28:96:f0:33:d8:f1:bf:7d:39:58:5f:
6e:c7:bb:65:33:fb:08:f1:54:9a:e7:6b:60:b5:0a:
98:3d:5c:ba:df:1e:e8:d8:8d:18:5c:ba:d1:95:b9:
d2:88:78:87:b2:1b:57:80:5f:39:d6:6a:08:3d:70:
07:aa:4a:a3:f7:34:e5:6f:43:0e:eb:d9:d6:9d:63:
33:aa:77:3f:50:aa:66:2e:df:5b:70:2b:c1:a0:1a:
af:2a:af:ca:4e:2c:90:cb:28:d1:51:3b:5d:71:d1:
56:b6:d7:51:ed:18:bd:03:bf:f1:39:7f:b1:f6:1c:
6e:bf:b2:74:8d:c9:3e:03:8f:a5:de:1d:be:1f:5e:
68:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:D2:E5:F3:57:10:5D:36:13:C4:01:E5:A4:65:89:26:6B:4E:AC:41
X509v3 Authority Key Identifier:
keyid:54:59:84:08:D2:3C:EF:52:56:0F:7E:AA:D4:E1:DB:0C:86:20:62:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VFmECNI871JWD36q1OHbDIYgYsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:40:ed:3e:01:3a:33:d5:53:1d:44:ef:24:d8:39:e4:e3:d4:
b4:30:f0:34:0a:80:17:34:ee:40:42:66:0a:8d:53:c9:49:56:
db:f6:5e:47:6c:0d:8c:e8:25:44:7c:3f:57:49:29:ca:5a:c3:
fc:57:f9:e6:ac:2d:15:af:bf:36:c4:e9:24:d4:3c:8b:ba:ba:
c7:48:6a:fc:28:be:06:db:a2:13:5f:e3:15:3f:e1:9d:c2:15:
c8:d1:38:79:42:7d:93:78:74:0e:04:83:63:82:6b:de:6c:49:
a1:54:52:4a:79:f7:bc:c1:ae:77:7e:c3:64:37:6d:75:1e:de:
4c:12:94:ae:18:55:f9:b9:e9:a9:e8:0b:b9:54:47:ad:de:eb:
49:a7:ee:0c:17:9e:74:34:57:d9:aa:58:47:d2:4d:cc:92:00:
f8:9a:c3:65:70:4b:30:3a:84:8a:4e:67:d7:94:40:9e:61:9a:
e8:f3:f6:63:7a:4d:e3:dd:96:97:ac:44:7b:72:fb:a6:18:e0:
57:12:69:29:6c:fd:99:10:b6:42:a4:0a:43:08:09:60:1d:3a:
ee:e8:69:f4:b2:7a:2a:b9:bb:b2:0b:4d:66:0d:3e:65:ed:cd:
23:a5:0a:69:12:71:ed:d9:e2:e1:96:96:aa:5b:a6:42:11:04:
73:43:94:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:20:35 2025 by rpki-client