Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3623e5-342e-4c9f-9183-0d3ad36eb161/1/VGWtK05zj1QvoOaBOPNiZkQeKaA.mft
File: VGWtK05zj1QvoOaBOPNiZkQeKaA.mft (raw, json)
Hash identifier: G+qtqhCf0zN0oLRpm6z0yt2TbLEHuK+cob+xHq5NrPs=
Subject key identifier: F7:D7:35:3C:EE:AF:50:0A:4D:89:1E:BE:85:50:41:86:F1:BB:9D:C6
Authority key identifier: 54:65:AD:2B:4E:73:8F:54:2F:A0:E6:81:38:F3:62:66:44:1E:29:A0
Certificate issuer: /CN=5465ad2b4e738f542fa0e68138f36266441e29a0
Certificate serial: 019892CA25216C63509D249B0841F164C59D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGWtK05zj1QvoOaBOPNiZkQeKaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3623e5-342e-4c9f-9183-0d3ad36eb161/1/VGWtK05zj1QvoOaBOPNiZkQeKaA.mft
Manifest number: 0CD4
Signing time: Sun 10 Aug 2025 07:02:57 +0000
Manifest this update: Sun 10 Aug 2025 07:02:57 +0000
Manifest next update: Mon 11 Aug 2025 07:02:57 +0000
Files and hashes: 1: 7lJVxJeG2kQzily5Ys3pzO4Cx3c.roa (hash: 2p7G908u5hNgOkOPybVcD1KwXNRQ1cpOLTMbKHUwi8k=)
2: VGWtK05zj1QvoOaBOPNiZkQeKaA.crl (hash: RfTFiBsS75OZ/rNaffeXsJfwBjIDToDmFheG4UnTubE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3623e5-342e-4c9f-9183-0d3ad36eb161/1/VGWtK05zj1QvoOaBOPNiZkQeKaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/3623e5-342e-4c9f-9183-0d3ad36eb161/1/VGWtK05zj1QvoOaBOPNiZkQeKaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGWtK05zj1QvoOaBOPNiZkQeKaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:02:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:ca:25:21:6c:63:50:9d:24:9b:08:41:f1:64:c5:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5465ad2b4e738f542fa0e68138f36266441e29a0
Validity
Not Before: Aug 10 07:02:57 2025 GMT
Not After : Aug 11 07:02:57 2025 GMT
Subject: CN=f7d7353ceeaf500a4d891ebe85504186f1bb9dc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:14:0e:43:14:db:ef:80:a4:31:55:59:f6:f4:
a7:ea:6a:c0:30:a9:df:92:ac:86:e3:2b:09:3e:0e:
cc:cf:e5:9e:2d:bc:9e:f9:42:29:d3:b1:bd:5b:9e:
ff:2b:e4:34:86:5c:1d:67:24:0c:77:04:66:c0:79:
c8:b0:7a:ea:ac:27:0f:37:64:10:f2:5e:32:b6:96:
aa:a3:d7:c8:93:ce:6f:31:76:de:85:7f:82:e7:8d:
1d:f8:17:24:b3:48:74:68:63:a4:4a:c9:25:95:da:
92:0c:28:84:90:57:4b:cf:da:7e:b4:e0:9b:dc:2c:
24:07:0e:f9:4c:45:3c:9f:83:5f:0d:52:a4:09:69:
f4:70:b3:41:4b:a1:de:c7:16:c7:fb:80:3b:27:2f:
2e:18:59:79:3c:a1:8c:4d:f2:00:63:af:f0:83:fa:
97:63:05:eb:98:5c:33:a5:3d:d3:98:1c:b4:01:d2:
14:8c:84:8d:59:64:3d:de:25:b5:4f:f8:d9:3d:93:
73:d0:1d:2d:80:a2:4b:81:78:8a:e5:c5:8b:6b:fa:
7b:55:3f:a8:f7:2a:97:02:a6:63:20:9b:ae:2b:7e:
cc:7d:86:b6:9c:99:5d:44:89:4f:18:bc:d1:d6:66:
b2:c6:36:48:a6:4c:6b:e4:cf:98:aa:b6:66:32:d2:
39:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:D7:35:3C:EE:AF:50:0A:4D:89:1E:BE:85:50:41:86:F1:BB:9D:C6
X509v3 Authority Key Identifier:
keyid:54:65:AD:2B:4E:73:8F:54:2F:A0:E6:81:38:F3:62:66:44:1E:29:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGWtK05zj1QvoOaBOPNiZkQeKaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3623e5-342e-4c9f-9183-0d3ad36eb161/1/VGWtK05zj1QvoOaBOPNiZkQeKaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3623e5-342e-4c9f-9183-0d3ad36eb161/1/VGWtK05zj1QvoOaBOPNiZkQeKaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:a7:3b:80:71:bc:8f:c2:45:d0:1b:2e:a1:02:6e:7f:1f:bc:
cb:4a:3c:58:ae:78:ba:5c:05:1c:4f:8b:1c:a2:dd:6c:a7:f2:
26:54:6a:0d:0c:80:b8:84:bd:81:83:79:50:97:0f:ad:c9:c8:
87:46:52:40:8b:a2:32:c1:57:d9:b4:7c:1d:0d:f5:c0:08:72:
b0:71:17:3e:ba:7b:e4:8d:16:86:22:be:9c:a7:9c:7e:1f:32:
36:4e:55:1c:c0:12:40:a6:5e:3b:a2:f4:23:d3:cc:f9:8e:03:
b3:ad:89:7b:b9:02:8a:e8:9a:25:f0:58:86:50:9f:a6:80:bf:
8f:4f:5c:21:c6:53:7f:19:fa:46:b4:7e:74:d3:33:36:52:63:
ef:f8:46:5e:6c:94:8d:74:ce:92:9d:07:6e:2a:86:32:fa:a2:
d9:e3:dd:4d:20:84:1d:74:af:40:d2:28:62:2a:d9:80:9a:60:
b4:ae:7e:e0:e2:a2:8a:a7:82:ea:82:43:ba:53:18:a8:1b:29:
64:a7:ce:8b:d0:bf:2f:71:0f:e5:55:7e:71:13:91:c3:b5:03:
41:45:2f:cd:00:23:b5:37:00:e5:1d:8a:62:ca:53:be:d1:34:
47:50:3c:c6:bb:a4:52:7e:8d:7b:0e:53:98:5e:e1:6d:55:62:
57:09:ef:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:43:51 2025 by rpki-client