Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/4781ea-0a32-43f9-9890-de97bcd40368/1/VFjdpvrZNtqJUgABqigr-syLguM.mft
File: VFjdpvrZNtqJUgABqigr-syLguM.mft (raw, json)
Hash identifier: TDS90RR2+HS1gvLkLp/f+NN/6VyGQ4nE4Im0WBSXEfQ=
Subject key identifier: 5F:1B:DB:DD:A5:A9:0C:D2:29:91:58:93:CC:CB:8C:9F:5B:4E:F6:F9
Authority key identifier: 54:58:DD:A6:FA:D9:36:DA:89:52:00:01:AA:28:2B:FA:CC:8B:82:E3
Certificate issuer: /CN=5458dda6fad936da89520001aa282bfacc8b82e3
Certificate serial: 019873E261B7B900EB56306BA922F186AE4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VFjdpvrZNtqJUgABqigr-syLguM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/4781ea-0a32-43f9-9890-de97bcd40368/1/VFjdpvrZNtqJUgABqigr-syLguM.mft
Manifest number: 10FE
Signing time: Mon 04 Aug 2025 07:01:12 +0000
Manifest this update: Mon 04 Aug 2025 07:01:12 +0000
Manifest next update: Tue 05 Aug 2025 07:01:12 +0000
Files and hashes: 1: VFjdpvrZNtqJUgABqigr-syLguM.crl (hash: 2IIKMFo4tww9uS0SGS94KV0PBe8t2P4ME22iO36nLkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/4781ea-0a32-43f9-9890-de97bcd40368/1/VFjdpvrZNtqJUgABqigr-syLguM.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/4781ea-0a32-43f9-9890-de97bcd40368/1/VFjdpvrZNtqJUgABqigr-syLguM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VFjdpvrZNtqJUgABqigr-syLguM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:61:b7:b9:00:eb:56:30:6b:a9:22:f1:86:ae:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5458dda6fad936da89520001aa282bfacc8b82e3
Validity
Not Before: Aug 4 07:01:12 2025 GMT
Not After : Aug 5 07:01:12 2025 GMT
Subject: CN=5f1bdbdda5a90cd229915893cccb8c9f5b4ef6f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:35:17:50:91:da:59:90:70:d7:6f:9c:03:2c:
21:76:ed:1f:6e:c9:3e:34:05:c6:da:ae:00:48:11:
a0:84:e3:ca:4a:f5:2c:9f:33:ba:44:5c:68:4d:6d:
96:c8:bc:c1:6c:8d:7e:10:ae:6c:30:59:76:8d:17:
8d:9b:42:9f:eb:dc:24:de:8f:e4:6e:36:ab:a9:1c:
4d:cd:88:2a:79:06:c8:4c:f0:ab:5d:dd:09:d8:19:
da:41:96:80:df:73:bf:b1:84:81:6b:3b:db:7e:f7:
bd:ea:f4:4d:af:b9:0e:89:0b:bc:ac:b1:45:11:97:
9c:8f:80:f1:90:5c:c0:ad:65:57:78:3f:d9:d5:83:
ed:d9:a9:63:cb:8f:5c:ef:0b:eb:b4:bf:04:52:93:
86:37:b2:52:8b:2a:46:9c:c9:d9:99:b1:0b:4e:e3:
34:9c:61:78:39:25:5b:fa:41:bb:6e:63:03:66:e4:
09:65:4d:93:f9:b1:45:a1:d5:ad:e0:99:de:49:30:
4e:23:bd:13:65:55:cc:f5:7a:e1:58:87:ea:3c:83:
b6:ea:90:90:f7:b1:cd:b9:9b:98:ef:30:e7:93:f9:
5c:b0:3a:c0:13:36:06:8c:f1:2b:48:db:cd:49:0e:
3a:4c:39:22:ff:02:40:67:c4:4f:51:71:7d:a3:aa:
63:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:1B:DB:DD:A5:A9:0C:D2:29:91:58:93:CC:CB:8C:9F:5B:4E:F6:F9
X509v3 Authority Key Identifier:
keyid:54:58:DD:A6:FA:D9:36:DA:89:52:00:01:AA:28:2B:FA:CC:8B:82:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VFjdpvrZNtqJUgABqigr-syLguM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/4781ea-0a32-43f9-9890-de97bcd40368/1/VFjdpvrZNtqJUgABqigr-syLguM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/4781ea-0a32-43f9-9890-de97bcd40368/1/VFjdpvrZNtqJUgABqigr-syLguM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:c7:6d:73:e9:d8:2c:59:05:11:16:f0:25:64:26:fe:5a:96:
f3:9d:36:f6:5d:c0:25:4c:84:50:70:29:b8:91:29:f1:1a:49:
e9:e0:58:f7:04:68:95:1b:76:52:79:df:2a:e3:12:97:df:9c:
e6:3f:07:08:69:7a:38:bb:5d:e6:f2:c2:4f:52:c3:c1:f8:cf:
c4:b8:65:f7:b6:38:9b:34:c0:83:d7:43:05:59:ef:3a:a9:3a:
86:b3:fc:d0:43:42:ec:6b:62:5d:14:ec:78:eb:24:96:01:e0:
60:06:12:cd:d1:88:38:be:af:77:9e:c5:73:ae:a3:47:90:df:
b0:01:e7:5b:8e:b7:bf:5e:b0:1f:02:2f:6b:32:54:e0:37:61:
5d:60:46:c9:0b:25:9c:a5:54:49:44:bc:45:68:d6:90:f4:d1:
07:bd:09:71:ff:53:f1:2a:a5:f8:1d:aa:7c:d6:5f:55:70:45:
1c:67:b0:df:ee:35:55:c2:a8:23:f0:7a:bf:fc:ae:0b:aa:29:
e7:5a:0a:36:a1:be:a8:6f:20:89:1c:e1:6f:3d:a9:25:25:9a:
b1:f1:00:2a:41:01:2d:17:ab:91:39:04:26:3c:5c:6b:89:12:
31:6b:27:47:41:22:1d:ce:1e:fc:31:78:36:ee:2b:00:e0:e0:
7c:d4:09:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:14:50 2025 by rpki-client