Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
File: VAxPdC_TKaNvzSnE65hOX0lRXZk.mft (raw, json)
Hash identifier: wupA4TYoaNeRSGQov8mNn5In3+8+jAJUk38faFyIUys=
Subject key identifier: 20:5E:0B:08:15:78:90:79:C4:B6:59:11:DD:7F:FF:4B:19:13:91:37
Authority key identifier: 54:0C:4F:74:2F:D3:29:A3:6F:CD:29:C4:EB:98:4E:5F:49:51:5D:99
Certificate issuer: /CN=540c4f742fd329a36fcd29c4eb984e5f49515d99
Certificate serial: 01988F90B3A979BA87B8CE2C47BA5323EACB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
Manifest number: 1019
Signing time: Sat 09 Aug 2025 16:01:21 +0000
Manifest this update: Sat 09 Aug 2025 16:01:21 +0000
Manifest next update: Sun 10 Aug 2025 16:01:21 +0000
Files and hashes: 1: 6hSnRR0poSKLkgYbDLBwSreCHXw.roa (hash: 2LSwLZwlqMozkmvNpXnEPuZJylqRvk5GNtgnCAWWf9Y=)
2: VAxPdC_TKaNvzSnE65hOX0lRXZk.crl (hash: yuNmyumDJz+56sotIts79cY9X0N6046dOONRtOHIjIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:90:b3:a9:79:ba:87:b8:ce:2c:47:ba:53:23:ea:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=540c4f742fd329a36fcd29c4eb984e5f49515d99
Validity
Not Before: Aug 9 16:01:21 2025 GMT
Not After : Aug 10 16:01:21 2025 GMT
Subject: CN=205e0b0815789079c4b65911dd7fff4b19139137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8a:0d:32:37:dd:ca:cc:cf:77:e5:b7:36:ed:
46:de:d5:eb:98:bf:40:ef:a5:4b:70:9c:87:ff:20:
e2:f8:cc:a2:fc:e4:f3:b3:ab:c5:91:17:1e:e3:89:
3a:c7:2b:86:34:28:0c:b9:30:5d:ad:93:8d:ab:9b:
1b:fe:e2:bc:c0:e3:8c:7b:ff:09:25:c1:37:c5:ad:
e6:59:45:d9:2e:4a:ce:d3:d2:e4:b8:56:c2:55:3c:
94:ba:fd:b2:e5:e4:fa:88:8a:ff:d7:14:6f:4b:53:
5b:95:f9:1c:54:fc:6d:d5:c6:be:e3:9d:ed:13:9a:
0c:45:5c:18:91:fd:ac:96:47:4c:6b:4d:d3:b8:19:
e7:a5:e8:2d:e0:75:eb:36:4c:10:6e:e9:13:29:e9:
57:83:31:36:12:9d:7e:3a:24:b7:6d:c3:43:2f:b6:
83:43:6d:fd:9d:ca:be:31:ad:90:56:e1:f3:19:2a:
df:e8:aa:06:57:03:d4:91:32:ab:6f:de:42:d7:63:
5e:91:44:c7:76:e2:0b:b7:d8:5c:4b:98:1b:f4:3c:
dc:e4:42:bc:72:44:ee:35:d4:6d:a3:ff:a5:dc:ad:
05:37:0d:64:81:07:f7:e3:b7:15:83:2e:b8:ef:87:
f6:3f:f3:84:7a:72:41:54:3f:f7:9e:3a:f5:18:79:
09:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:5E:0B:08:15:78:90:79:C4:B6:59:11:DD:7F:FF:4B:19:13:91:37
X509v3 Authority Key Identifier:
keyid:54:0C:4F:74:2F:D3:29:A3:6F:CD:29:C4:EB:98:4E:5F:49:51:5D:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:fd:13:b3:94:c8:86:c1:7b:28:36:4c:84:1f:5b:b2:0a:96:
de:98:9f:ce:4c:86:75:02:9e:da:49:21:f4:a2:ae:06:10:de:
c6:1e:c4:d0:a9:55:99:0e:82:9d:91:96:74:cf:f0:66:73:56:
73:2d:f7:6a:33:1f:bf:4d:52:41:5b:05:86:03:21:13:a4:3c:
85:37:f3:ba:3b:37:7b:2a:f0:a9:c5:29:2a:39:6e:1d:88:04:
18:d7:06:10:ae:36:a7:c6:1a:cb:bf:03:1e:05:1a:db:c0:b8:
09:d2:9f:4c:42:0a:49:f7:73:0d:9a:3e:90:d3:fb:5d:2b:79:
d9:d6:86:d1:54:54:10:a1:5a:e6:57:04:7e:ae:65:f6:0f:20:
bb:d2:4e:ed:ec:9e:3b:44:fa:b3:ff:d5:37:93:a0:c5:73:23:
75:11:e6:7f:7e:90:07:3d:41:c7:de:c7:10:8f:1d:ed:51:f2:
ee:28:f8:e8:e8:bc:4c:b2:a7:2c:37:d2:05:49:00:1a:f1:27:
0f:33:31:e0:61:c4:b6:a1:53:01:4e:0f:ff:ff:05:85:0d:99:
45:71:20:c4:46:3b:73:03:d4:e2:dd:90:e6:dd:d8:95:9c:41:
d1:23:a8:b4:01:3b:26:95:8e:6b:4e:3e:ee:25:34:6c:a3:ce:
51:b6:43:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:42:09 2025 by rpki-client