Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/d158e1-512b-4486-af87-b490a6d6be25/1/VXe0uHq4aspXflbjjVuKWBPMzD0.mft
File: VXe0uHq4aspXflbjjVuKWBPMzD0.mft (raw, json)
Hash identifier: jAth4+ti0ezymOHXng6tqzhLOm3g8XkwLZMRqfZy4Mo=
Subject key identifier: CE:5E:C1:64:9C:EF:27:CA:5B:89:10:8A:F1:FB:E5:DE:69:A8:AF:E9
Authority key identifier: 55:77:B4:B8:7A:B8:6A:CA:57:7E:56:E3:8D:5B:8A:58:13:CC:CC:3D
Certificate issuer: /CN=5577b4b87ab86aca577e56e38d5b8a5813cccc3d
Certificate serial: 01988C8F0AC02F1626440B1FAD2693A772B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VXe0uHq4aspXflbjjVuKWBPMzD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/d158e1-512b-4486-af87-b490a6d6be25/1/VXe0uHq4aspXflbjjVuKWBPMzD0.mft
Manifest number: 1156
Signing time: Sat 09 Aug 2025 02:00:41 +0000
Manifest this update: Sat 09 Aug 2025 02:00:41 +0000
Manifest next update: Sun 10 Aug 2025 02:00:41 +0000
Files and hashes: 1: P9bs-w5DkWpu1aBuTV3PHAzvH6Q.roa (hash: oAepJ4+j0gmtz7XxqoB+yGPsz6tmKuFLhq6h9fcVyTY=)
2: VXe0uHq4aspXflbjjVuKWBPMzD0.crl (hash: RP3OpPF5XTOLJdW72fusmzOroc20fgk3JBGatBxvZWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/d158e1-512b-4486-af87-b490a6d6be25/1/VXe0uHq4aspXflbjjVuKWBPMzD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/d158e1-512b-4486-af87-b490a6d6be25/1/VXe0uHq4aspXflbjjVuKWBPMzD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VXe0uHq4aspXflbjjVuKWBPMzD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:8f:0a:c0:2f:16:26:44:0b:1f:ad:26:93:a7:72:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5577b4b87ab86aca577e56e38d5b8a5813cccc3d
Validity
Not Before: Aug 9 02:00:41 2025 GMT
Not After : Aug 10 02:00:41 2025 GMT
Subject: CN=ce5ec1649cef27ca5b89108af1fbe5de69a8afe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:df:3a:40:ea:85:50:b1:4c:d3:1f:31:a6:da:
47:9d:6e:4c:b7:03:19:6d:7f:10:04:64:f1:fa:79:
44:d9:1a:a4:34:0a:aa:0e:6e:f9:4c:11:69:67:3e:
34:c9:f2:78:ca:1c:b0:1a:28:4b:c4:11:78:cf:a6:
a7:a5:c8:a2:df:c0:ec:41:ed:19:49:85:2c:75:9e:
46:eb:49:c9:99:d1:87:31:19:90:e3:af:5f:74:ab:
ec:2a:80:53:41:76:e9:7a:f3:c7:07:8d:66:cd:7e:
ec:cf:06:b1:16:07:c0:ac:62:6d:c8:87:1d:ee:b0:
9f:d2:47:5d:32:7c:5a:b6:42:84:9e:33:92:23:d1:
0f:bb:67:1a:1f:95:4d:ef:c1:0f:fe:5f:49:55:96:
c3:f5:38:6d:4c:6c:8c:4d:55:be:ac:62:38:e9:6d:
41:a7:de:ae:eb:2d:10:29:29:23:7d:df:15:df:20:
6f:0b:79:17:13:f7:b9:03:e4:7e:c5:30:c5:a5:94:
d1:e2:27:9b:38:78:0e:bb:a0:24:e5:6f:c4:60:07:
72:da:74:d1:fb:25:d7:26:d6:fb:d5:23:d9:9d:35:
2f:03:0b:34:81:e4:a1:56:b0:8b:ad:92:15:f7:94:
4b:4e:e9:af:aa:7e:7a:1d:17:89:dd:c2:bc:1f:87:
c9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:5E:C1:64:9C:EF:27:CA:5B:89:10:8A:F1:FB:E5:DE:69:A8:AF:E9
X509v3 Authority Key Identifier:
keyid:55:77:B4:B8:7A:B8:6A:CA:57:7E:56:E3:8D:5B:8A:58:13:CC:CC:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXe0uHq4aspXflbjjVuKWBPMzD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d158e1-512b-4486-af87-b490a6d6be25/1/VXe0uHq4aspXflbjjVuKWBPMzD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d158e1-512b-4486-af87-b490a6d6be25/1/VXe0uHq4aspXflbjjVuKWBPMzD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:64:88:41:6c:f8:21:24:29:f4:56:db:52:b1:da:74:11:ca:
57:9d:8d:26:39:0f:8b:c3:69:c0:d6:d8:43:5c:5b:e0:74:f2:
e7:6d:19:b6:32:59:c4:f5:7a:b5:7d:5e:eb:8d:11:d8:c1:02:
38:bb:16:79:31:62:17:d4:87:dc:47:18:6d:89:72:c3:05:a2:
04:d6:15:57:92:24:13:2c:c5:a2:a5:d7:5f:1a:b7:e4:a8:4b:
d6:9a:f0:90:9a:b2:a3:47:de:64:16:1b:00:64:35:15:fb:5b:
6b:b7:3b:f7:d5:dc:9b:0f:40:f2:95:fb:cf:df:f0:7a:ad:f6:
4f:2d:ad:65:4e:55:a0:44:8b:3b:d3:10:e8:ef:02:22:52:ec:
3a:6f:2b:b5:5f:11:9b:94:b5:92:1a:b2:f9:6d:69:d0:3c:4a:
2c:9e:2c:0d:3d:7c:ae:e6:cb:a3:7d:84:80:d3:e2:5c:63:bd:
44:64:fc:8c:0b:b8:41:d2:0d:df:96:a7:34:67:fd:fe:17:79:
f5:c3:21:94:df:8c:a5:1d:eb:c4:ca:87:a0:36:1a:0f:7e:61:
c0:40:4e:10:19:28:64:56:de:e0:c8:ae:c2:41:5d:84:8d:73:
d6:71:19:ca:54:10:f1:f3:e3:da:7a:f8:e8:41:b2:77:9f:a9:
f3:d9:78:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:34:55 2025 by rpki-client