Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/VJEwJvB5zaJBrvRRT9NTwoMw5GE.mft
File: VJEwJvB5zaJBrvRRT9NTwoMw5GE.mft (raw, json)
Hash identifier: TZAFpF0bo2JNPadjZ3RxU+kH5VhOn2TawTHs3u9HPwM=
Subject key identifier: 60:7B:69:30:F7:B8:18:17:60:A4:DD:EB:C8:79:15:CE:57:1F:C0:31
Authority key identifier: 54:91:30:26:F0:79:CD:A2:41:AE:F4:51:4F:D3:53:C2:83:30:E4:61
Certificate issuer: /CN=54913026f079cda241aef4514fd353c28330e461
Certificate serial: 01987306A4096A7E01B2FEC8A28956238FE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJEwJvB5zaJBrvRRT9NTwoMw5GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/VJEwJvB5zaJBrvRRT9NTwoMw5GE.mft
Manifest number: 091A
Signing time: Mon 04 Aug 2025 03:01:11 +0000
Manifest this update: Mon 04 Aug 2025 03:01:11 +0000
Manifest next update: Tue 05 Aug 2025 03:01:11 +0000
Files and hashes: 1: VJEwJvB5zaJBrvRRT9NTwoMw5GE.crl (hash: 0uWN85xdY8HrAb8rHZ10CKi8HrrTV6VAC3JNyJsA+Rk=)
2: r03a4FD5QDtqrMjhRP_L2N8sPt8.roa (hash: MsCswh8Y77pSHpRZqJYoQ4n9OWB/3Qp0BgO62Er81go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/VJEwJvB5zaJBrvRRT9NTwoMw5GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/VJEwJvB5zaJBrvRRT9NTwoMw5GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VJEwJvB5zaJBrvRRT9NTwoMw5GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:a4:09:6a:7e:01:b2:fe:c8:a2:89:56:23:8f:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54913026f079cda241aef4514fd353c28330e461
Validity
Not Before: Aug 4 03:01:11 2025 GMT
Not After : Aug 5 03:01:11 2025 GMT
Subject: CN=607b6930f7b8181760a4ddebc87915ce571fc031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:da:67:be:b4:5f:5c:09:76:c8:c5:29:b6:33:
b8:d4:ff:ee:5a:bc:aa:67:c6:f8:39:2f:e0:4e:38:
c0:9a:c8:4d:ee:a9:9e:c5:8c:d4:80:09:d3:5d:f3:
7c:f3:52:1f:24:59:c0:6c:dd:5d:8a:80:b4:db:32:
ce:29:5e:c8:ba:92:86:a8:b0:b9:b3:a7:2f:c8:b1:
e0:cf:ce:72:c3:7a:45:8f:f4:8a:ee:1b:ee:bc:70:
bb:2d:5c:4f:51:ee:fc:6c:65:17:84:a5:ab:e7:43:
de:9a:c5:4e:29:fa:c4:28:4d:64:13:eb:82:1f:da:
6b:83:8d:3e:15:84:5c:83:11:22:cf:b9:f4:16:4c:
e6:12:ee:d5:fa:84:d0:3c:4b:3a:8f:d2:ec:b6:80:
c0:40:4c:29:2c:19:30:f1:72:04:23:57:bd:bb:2b:
bf:72:0e:cc:d1:ce:20:c9:f2:dd:04:eb:89:25:19:
07:9c:3f:08:c4:09:2e:be:54:35:55:0b:9f:1a:fa:
e1:47:b8:6c:1b:8c:e8:48:33:71:52:04:a7:b8:e5:
c6:b9:1f:ab:a1:76:31:51:46:e0:cf:e1:23:00:99:
07:f6:d9:0c:f8:4d:7c:f3:1d:3a:94:32:46:6d:17:
38:2b:cd:b1:b0:1e:f1:69:96:aa:9d:c1:ca:1f:2d:
41:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:7B:69:30:F7:B8:18:17:60:A4:DD:EB:C8:79:15:CE:57:1F:C0:31
X509v3 Authority Key Identifier:
keyid:54:91:30:26:F0:79:CD:A2:41:AE:F4:51:4F:D3:53:C2:83:30:E4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJEwJvB5zaJBrvRRT9NTwoMw5GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/VJEwJvB5zaJBrvRRT9NTwoMw5GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/VJEwJvB5zaJBrvRRT9NTwoMw5GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:e9:7d:8e:d9:2c:47:38:14:11:d4:1b:03:78:74:24:25:95:
23:26:83:c7:15:2e:74:8f:fe:60:d5:b4:b3:ab:c0:37:7d:4b:
61:94:f9:d7:76:56:5b:32:6b:8b:a5:0a:59:3f:3c:5b:6a:f8:
bf:5c:dd:9c:2e:cc:ea:01:42:51:2a:6d:45:82:a1:34:a5:32:
42:2f:1d:ec:29:1a:d2:0f:58:e3:e9:53:c2:33:94:05:67:f3:
fe:f8:4f:4a:72:ea:28:6d:83:12:a0:d6:c2:2e:c5:eb:e2:e7:
12:32:7a:d4:8b:db:8e:6a:32:1d:47:b1:bd:c3:ca:7d:4b:46:
57:a7:0a:2d:69:50:c8:2e:01:c3:f9:f7:15:6b:3c:34:ff:85:
9f:25:0f:c7:7c:ab:10:3a:59:14:ea:e8:a2:01:f1:4c:d8:e1:
0d:1d:8c:4e:87:1b:92:8c:71:6c:7b:18:16:1b:c1:2f:4b:65:
bb:3e:98:83:7e:38:03:96:3a:5f:10:68:c4:31:60:bc:b3:fa:
47:48:70:51:77:95:29:63:c1:4f:4d:06:93:46:88:3d:2f:cb:
70:69:0c:42:2f:68:bd:e4:94:42:7e:0d:ee:c7:18:75:46:02:
dc:fb:99:5a:94:53:aa:a6:e2:7e:66:a5:80:bf:97:eb:d9:58:
97:d2:83:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:13 2025 by rpki-client