Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.mft
File: VrVQVQ1WQYCx333rW1jTprES5-M.mft (raw, json)
Hash identifier: hojgcG6Q7gkZSGK9ImAvaJnpELBrOy7cpZD4Vrus45c=
Subject key identifier: 47:3C:FD:42:58:CE:BC:23:A0:66:E7:85:D6:7C:93:39:B4:3D:E6:CA
Authority key identifier: 56:B5:50:55:0D:56:41:80:B1:DF:7D:EB:5B:58:D3:A6:B1:12:E7:E3
Certificate issuer: /CN=56b550550d564180b1df7deb5b58d3a6b112e7e3
Certificate serial: 01988F59CD0B8DDCFAF9937B31B8FDC30B51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrVQVQ1WQYCx333rW1jTprES5-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.mft
Manifest number: 0BBA
Signing time: Sat 09 Aug 2025 15:01:23 +0000
Manifest this update: Sat 09 Aug 2025 15:01:23 +0000
Manifest next update: Sun 10 Aug 2025 15:01:23 +0000
Files and hashes: 1: VrVQVQ1WQYCx333rW1jTprES5-M.crl (hash: yiD6u6TT9p4e+xAr9BqqE6RVDMoOeG5DufGiR1BXWpE=)
2: zpnOf9kFG2Xz2U_yV2ggZbtDJtc.roa (hash: iw1XdbLWPraJP46xAmdMKYSNoE+Pua69gMhun7cgX1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrVQVQ1WQYCx333rW1jTprES5-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:59:cd:0b:8d:dc:fa:f9:93:7b:31:b8:fd:c3:0b:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b550550d564180b1df7deb5b58d3a6b112e7e3
Validity
Not Before: Aug 9 15:01:23 2025 GMT
Not After : Aug 10 15:01:23 2025 GMT
Subject: CN=473cfd4258cebc23a066e785d67c9339b43de6ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:26:50:e7:4e:50:c3:ec:24:d4:54:75:56:07:
44:e2:4a:2f:93:a4:22:56:00:dd:40:f9:16:6c:9e:
66:a5:8f:ed:f7:5c:8d:64:0d:ce:75:e9:80:4d:13:
a7:69:b9:cd:c8:37:ca:20:7c:70:27:1d:b9:13:47:
5b:8c:2f:ff:a2:a7:d4:4a:eb:8e:74:fb:cd:a2:f1:
41:9d:cc:6e:9b:90:61:da:e9:c0:2a:e3:bc:ab:b1:
b4:9b:b6:cf:c7:94:fb:7a:e5:c0:e9:d8:95:68:a3:
14:f8:5d:49:a0:d0:ae:1c:28:ae:ba:61:be:38:23:
e1:dd:c7:78:a4:80:a3:f9:94:8a:24:f2:eb:17:a2:
14:fb:e0:cf:6e:15:a1:bc:88:f7:8e:99:16:33:90:
a0:df:ae:3b:e2:62:73:5e:8b:c3:38:59:8c:1c:6b:
23:31:3d:a3:27:39:a2:f6:ea:9c:95:8a:25:8d:f6:
10:89:8a:d5:68:fd:cc:6d:79:76:e1:a5:c5:fc:f4:
d0:aa:fd:d2:db:71:76:74:fe:c0:1b:3e:e9:13:83:
8c:52:2f:a8:c6:16:eb:90:37:48:8c:52:d1:d5:88:
fb:cd:7d:4d:44:d9:87:c4:f3:98:b8:3b:b1:b2:14:
a5:29:eb:63:cc:29:c8:a2:c7:06:55:fc:69:26:61:
02:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:3C:FD:42:58:CE:BC:23:A0:66:E7:85:D6:7C:93:39:B4:3D:E6:CA
X509v3 Authority Key Identifier:
keyid:56:B5:50:55:0D:56:41:80:B1:DF:7D:EB:5B:58:D3:A6:B1:12:E7:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrVQVQ1WQYCx333rW1jTprES5-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:89:9c:7e:89:39:04:d0:f5:bd:43:fc:ee:9f:b2:34:70:60:
1c:c4:85:2e:db:87:00:ba:f9:f9:64:8e:fb:67:0d:34:c4:41:
7b:1c:52:60:8c:7b:ea:b5:a3:38:d1:80:1e:99:be:fa:11:69:
2b:49:97:0f:7b:4f:9a:47:2d:9d:f6:1b:3a:c4:b1:d0:12:80:
31:0a:bd:34:c0:1a:2b:db:6c:a7:53:59:ad:d4:ad:16:61:f1:
c9:b0:98:7d:1d:54:ac:13:c7:95:f0:16:96:86:8f:16:8b:5f:
a0:19:f3:c5:9b:d9:23:88:d7:34:5c:6b:e5:1f:bc:4f:41:12:
85:03:76:9b:dc:d9:0f:d0:ea:03:10:d1:1a:ca:c0:9d:07:0f:
c3:fe:36:5e:90:d3:18:37:90:26:22:bb:15:b0:6f:a4:dd:66:
b4:10:7c:e3:8c:0d:97:f4:5a:0f:ce:9c:91:43:40:82:51:ed:
ae:b6:61:8f:f1:25:b8:2c:fa:6f:9a:1e:af:57:b4:ef:46:f3:
00:ab:ad:3e:c2:b5:97:33:ed:46:7f:d9:32:9a:50:c1:91:4a:
c1:d9:69:45:d5:36:6c:dd:fb:4c:3c:97:6f:5e:97:d4:73:6d:
ae:6a:32:31:56:c2:ac:bc:01:9d:60:1c:f1:d1:2d:1b:ca:bf:
3c:08:60:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:40:40 2025 by rpki-client