Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.mft
File: VbU-iTBDTHKlgHoFUIK5hZmycH8.mft (raw, json)
Hash identifier: Udx/WIFAbuscS4//bC6Q8Gvjop9BRdSE7A/DRAubEDA=
Subject key identifier: 81:45:25:EF:56:76:48:79:AB:01:8A:D9:34:E7:B1:91:CD:73:34:6E
Authority key identifier: 55:B5:3E:89:30:43:4C:72:A5:80:7A:05:50:82:B9:85:99:B2:70:7F
Certificate issuer: /CN=55b53e8930434c72a5807a055082b98599b2707f
Certificate serial: 01987A1B52E12C89EA650F3871A744B536AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbU-iTBDTHKlgHoFUIK5hZmycH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.mft
Manifest number: 019B
Signing time: Tue 05 Aug 2025 12:01:07 +0000
Manifest this update: Tue 05 Aug 2025 12:01:07 +0000
Manifest next update: Wed 06 Aug 2025 12:01:07 +0000
Files and hashes: 1: UfsWVLXlKS-YeedBQ6KLEcHVpj4.roa (hash: boZrSX+IxVlQdGAIp3Em+CvprqHqmfbsNvAMqDk06S4=)
2: VbU-iTBDTHKlgHoFUIK5hZmycH8.crl (hash: 5PAVDYrD726GT/EJ8z+VFtZS8OTYJzQuqLd/BAq1gBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbU-iTBDTHKlgHoFUIK5hZmycH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 12:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:1b:52:e1:2c:89:ea:65:0f:38:71:a7:44:b5:36:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55b53e8930434c72a5807a055082b98599b2707f
Validity
Not Before: Aug 5 12:01:07 2025 GMT
Not After : Aug 6 12:01:07 2025 GMT
Subject: CN=814525ef56764879ab018ad934e7b191cd73346e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fd:18:21:bb:92:6d:4f:d9:ba:0c:7d:1f:27:
04:28:14:5d:0b:d6:bc:b1:58:3b:96:f3:4b:4e:2f:
95:e1:92:a8:e2:3a:3b:34:4e:e6:cc:50:42:93:27:
d2:81:b0:d3:6a:92:de:6f:96:68:c7:e2:46:c2:ec:
0d:94:31:86:a6:0b:61:16:72:df:6b:8a:e5:6c:aa:
b8:67:78:89:8e:1f:0c:08:c6:5c:a4:e6:9c:de:d5:
38:89:e8:55:56:6d:e5:1a:e0:29:fc:a4:c3:d9:ca:
3a:84:86:12:aa:49:ed:d7:9a:fe:78:62:c6:c7:04:
2a:6f:a3:fc:5d:c4:c3:13:9c:ce:38:e3:7c:7b:49:
d1:0e:f6:8b:66:ef:f6:4e:c7:72:5a:fe:6c:7d:59:
da:ef:e2:60:6b:a1:a8:a7:a1:9d:a6:7b:02:4a:f5:
23:7e:01:b3:c7:66:40:62:7a:4c:70:70:ad:b8:1c:
4c:fd:18:45:11:42:9f:71:0d:29:07:62:c3:a3:87:
c7:18:1d:e7:c8:49:9e:a1:76:a3:98:d0:07:40:87:
ea:ff:29:1e:46:d0:fa:d3:2f:73:2f:36:50:cd:81:
b9:e0:08:b0:17:3c:4e:74:f3:ca:bd:ed:b2:21:8a:
5c:c8:b8:c6:cc:5f:ac:bb:b5:5a:ee:41:6f:79:ce:
65:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:45:25:EF:56:76:48:79:AB:01:8A:D9:34:E7:B1:91:CD:73:34:6E
X509v3 Authority Key Identifier:
keyid:55:B5:3E:89:30:43:4C:72:A5:80:7A:05:50:82:B9:85:99:B2:70:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbU-iTBDTHKlgHoFUIK5hZmycH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:b9:7b:03:ae:cd:05:df:c6:c0:cc:a1:c5:1a:27:05:23:67:
53:44:09:25:7b:7b:1b:1f:c3:63:48:33:2b:5f:b2:a1:be:54:
9c:5e:b4:df:05:72:8a:26:ad:67:2d:0b:50:a4:a6:a5:15:b5:
54:4a:37:1c:7d:77:09:fc:e9:be:19:72:ff:61:81:e9:5f:08:
ca:73:ad:26:4e:0d:4c:dd:94:bb:21:a8:63:2e:6d:92:07:21:
ed:6a:25:9f:4e:47:62:27:06:84:da:2f:28:80:9a:89:47:96:
5e:65:69:02:0e:bb:a7:0a:bd:b2:94:2f:ef:ac:e7:e2:51:76:
7a:36:a6:c3:f3:ba:a2:2c:7d:2c:83:e3:3e:1c:c9:75:67:85:
34:da:96:0d:2e:51:4a:42:02:60:f8:11:6c:de:b2:a7:92:68:
0f:c1:00:d8:3f:21:df:9d:34:c5:7b:f5:e4:59:ed:40:c2:d5:
8d:f2:c1:ce:bf:50:03:b8:90:b3:47:92:c1:49:55:c0:ab:1e:
c0:3c:dc:38:01:52:e3:1d:60:f3:a2:03:a4:4a:2e:b3:4c:6b:
df:ef:6b:f1:3b:30:ad:6f:3c:0a:60:31:57:ef:9c:bd:0d:53:
07:5b:40:57:b5:ea:39:3d:df:be:52:50:5f:07:6d:62:9e:4b:
65:c0:0c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:16:53 2025 by rpki-client