Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.mft
File: VKwN3sMOJORX4W5lB9IZcoMQiT0.mft (raw, json)
Hash identifier: bdUPey+x4nYDZQuQP6fmh7anqqmRei3ez2Y+XDcVx+Q=
Subject key identifier: 3F:4E:9F:F7:21:F4:1B:A4:F9:B7:84:94:04:68:0D:ED:5E:85:AC:D1
Authority key identifier: 54:AC:0D:DE:C3:0E:24:E4:57:E1:6E:65:07:D2:19:72:83:10:89:3D
Certificate issuer: /CN=54ac0ddec30e24e457e16e6507d219728310893d
Certificate serial: 01987D8B6D32526FDFE77CE52E29E4C8171D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKwN3sMOJORX4W5lB9IZcoMQiT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.mft
Manifest number: 0184
Signing time: Wed 06 Aug 2025 04:02:26 +0000
Manifest this update: Wed 06 Aug 2025 04:02:26 +0000
Manifest next update: Thu 07 Aug 2025 04:02:26 +0000
Files and hashes: 1: 3gl-l3qU8MpI3MVFIGvCINJyADE.roa (hash: utYF7PoXBqNr3o1w6VDP9HkMKeBzXvpa+DHx3iRNsmk=)
2: VKwN3sMOJORX4W5lB9IZcoMQiT0.crl (hash: jPNyJ4oMA+cjAdiPNG0+1nE6+0EXGuHrHTPyrO7+abc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKwN3sMOJORX4W5lB9IZcoMQiT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8b:6d:32:52:6f:df:e7:7c:e5:2e:29:e4:c8:17:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54ac0ddec30e24e457e16e6507d219728310893d
Validity
Not Before: Aug 6 04:02:26 2025 GMT
Not After : Aug 7 04:02:26 2025 GMT
Subject: CN=3f4e9ff721f41ba4f9b7849404680ded5e85acd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ea:51:0d:2e:e6:f1:af:2a:ce:9a:d5:c6:4f:
07:be:0b:3a:d5:87:09:76:37:d9:64:5c:c0:41:d0:
ed:f5:c9:ff:84:47:5d:55:63:4d:c5:0b:37:de:ee:
d9:bb:1d:18:8a:00:63:b1:b0:62:ed:36:cd:e0:61:
ff:93:6e:10:f0:a1:d6:9b:50:7e:7f:37:18:61:8b:
91:ac:c0:c6:a4:b2:fd:b7:80:38:55:45:0f:30:f2:
ca:a8:dc:c9:fb:61:e8:fa:d6:de:06:ea:0c:2a:ae:
fa:67:d8:24:17:4a:05:c1:64:d5:12:9c:4a:cb:56:
ff:9c:51:0b:59:19:3f:92:68:c8:4d:0f:90:53:a4:
5c:bc:6a:c7:a2:28:ca:95:95:71:e3:32:27:d9:99:
81:b0:d0:0c:93:38:a6:d1:e8:dc:e2:98:0c:33:97:
86:88:8f:65:d2:cc:92:ab:0c:30:93:a9:a3:c3:e3:
4b:e6:a1:a1:5d:be:9c:aa:44:2c:1e:c1:1d:86:44:
05:9d:ee:98:15:23:48:f0:c1:f9:3e:c1:92:48:67:
75:59:f4:ed:e0:7f:80:e5:fb:c8:f8:0e:16:fa:e8:
90:4e:85:9b:44:a2:ec:cd:4c:15:36:27:31:c7:24:
71:a5:58:79:db:6c:3e:7c:aa:f4:57:68:15:72:5c:
6e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:4E:9F:F7:21:F4:1B:A4:F9:B7:84:94:04:68:0D:ED:5E:85:AC:D1
X509v3 Authority Key Identifier:
keyid:54:AC:0D:DE:C3:0E:24:E4:57:E1:6E:65:07:D2:19:72:83:10:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKwN3sMOJORX4W5lB9IZcoMQiT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:66:70:46:3d:e6:56:00:43:c5:3b:a6:06:a0:90:21:bf:2c:
e7:8b:91:12:d9:ac:8e:4c:f1:27:38:f9:c9:ce:6a:f8:ef:b3:
ba:10:ce:72:f6:fb:c2:c0:a3:42:81:ad:4f:b8:28:34:a2:ce:
58:4d:93:97:71:0e:1a:9f:1b:6d:85:12:f1:66:f2:61:f8:20:
9c:6e:12:3e:4f:84:76:f0:e3:1e:8e:2a:92:3c:50:84:57:9f:
7f:c3:7c:18:17:ef:94:a3:8f:1e:15:37:56:5d:eb:95:53:69:
b0:9d:3f:c7:a8:69:21:99:08:8f:d6:d6:ce:97:b6:ef:23:48:
65:5a:99:4e:a8:15:bf:87:d6:ad:78:5c:75:bd:1e:0c:9c:7b:
16:1c:93:d5:51:d4:aa:bd:e7:d0:05:a0:3f:1f:56:40:1b:27:
51:14:61:1f:09:fc:86:bc:d5:9f:6a:5d:ea:6e:89:9f:60:89:
84:e4:dd:aa:06:1d:62:dd:e9:5e:bb:83:48:b8:2b:6a:89:69:
c1:48:0d:6d:5a:cd:73:1e:9f:68:ed:f6:64:24:30:a2:b9:a5:
f3:06:32:ce:da:eb:c8:3c:09:91:00:6a:ad:2d:2f:10:82:7f:
ca:b1:6c:ee:19:28:1c:20:35:32:18:29:b2:db:dc:82:1e:64:
ca:ab:13:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:06:10 2025 by rpki-client