Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft
File: VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft (raw, json)
Hash identifier: Ywh3ddQp6DwrV2EDZCft4psICNUR4TmyulP4/dnwrC0=
Subject key identifier: A5:EA:07:7B:F2:C0:7D:E8:D7:35:71:88:3D:B7:56:F2:69:B2:2B:98
Authority key identifier: 57:14:D0:81:F6:5F:0C:8B:04:F1:D2:FE:73:E0:90:B0:7A:B1:AB:58
Certificate issuer: /CN=5714d081f65f0c8b04f1d2fe73e090b07ab1ab58
Certificate serial: 01987C77CA29A268B3A94FD4DD45CDA4264B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxTQgfZfDIsE8dL-c-CQsHqxq1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft
Manifest number: 0DD0
Signing time: Tue 05 Aug 2025 23:01:21 +0000
Manifest this update: Tue 05 Aug 2025 23:01:21 +0000
Manifest next update: Wed 06 Aug 2025 23:01:21 +0000
Files and hashes: 1: VxTQgfZfDIsE8dL-c-CQsHqxq1g.crl (hash: xOi/vi72sYcjJ+VtaD2ctk2TNjs0vwdOaq0kzfhvXX4=)
2: q4OtYqQ5F8toaT0oHQfCemmVpFY.roa (hash: pSnKgnqoG1TyZ2WLGeGgthK4U38JeBxESDQq72YUX64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/VxTQgfZfDIsE8dL-c-CQsHqxq1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:77:ca:29:a2:68:b3:a9:4f:d4:dd:45:cd:a4:26:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5714d081f65f0c8b04f1d2fe73e090b07ab1ab58
Validity
Not Before: Aug 5 23:01:21 2025 GMT
Not After : Aug 6 23:01:21 2025 GMT
Subject: CN=a5ea077bf2c07de8d73571883db756f269b22b98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4d:5a:42:6f:f1:5c:b5:ec:97:6a:d1:7b:86:
a5:d0:18:04:c9:b5:ef:d1:35:36:bd:16:2f:f8:fe:
08:94:f2:1f:26:4b:a0:9b:cc:16:c2:b6:15:70:23:
aa:69:b0:38:37:c1:07:e5:f0:c8:e0:91:fb:79:4e:
10:6e:5b:47:c8:04:de:a0:12:87:55:a2:04:df:8d:
4c:eb:7e:49:f3:a5:07:df:62:20:b9:0b:d0:1b:5e:
28:5f:fc:ad:d0:d4:0a:7d:8b:5e:75:c9:c8:d4:53:
bf:80:6b:3e:9a:af:6d:35:1a:12:ca:fc:1a:74:ed:
bf:78:ce:7a:1c:3a:f5:86:c5:80:eb:48:84:a1:e4:
42:8e:52:7d:bf:f3:b4:43:bb:af:c6:1d:1a:fc:e5:
c1:04:4a:9b:75:46:30:2d:63:f8:c2:d5:4f:3e:6b:
d0:1a:29:1d:c4:fc:b6:a8:1a:24:9e:f2:56:44:d2:
8c:c4:5a:04:06:6b:99:8c:a2:47:3d:45:ea:3b:4c:
2b:cd:50:ff:10:a2:16:40:d8:12:3d:3d:fa:fb:72:
ec:87:ad:2a:50:a0:7e:09:4a:75:8b:a0:f6:17:98:
8e:bd:4e:b0:17:e3:4b:40:86:e8:3b:e3:f6:0b:d1:
d3:81:e1:d1:11:b3:cc:fa:cb:b0:47:db:ce:03:15:
e6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:EA:07:7B:F2:C0:7D:E8:D7:35:71:88:3D:B7:56:F2:69:B2:2B:98
X509v3 Authority Key Identifier:
keyid:57:14:D0:81:F6:5F:0C:8B:04:F1:D2:FE:73:E0:90:B0:7A:B1:AB:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxTQgfZfDIsE8dL-c-CQsHqxq1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:eb:66:db:2f:73:06:09:19:6a:77:35:63:bf:36:ee:90:99:
5b:9f:ce:96:db:ad:f9:f1:3e:f2:41:9e:a3:9f:3b:38:df:29:
17:83:c9:68:4d:d3:f9:24:2f:f4:62:de:be:90:82:59:70:24:
c4:2a:d8:e6:45:f9:87:57:41:dc:d6:e3:82:8d:e5:b5:dc:45:
e4:b3:6d:50:12:03:be:c6:bb:ad:3c:70:c3:3c:c9:36:b4:2d:
b1:cb:23:11:cb:ce:af:31:16:bd:6f:5b:e6:71:84:f0:77:96:
b8:63:56:23:62:9e:d8:41:a6:19:01:a0:c9:c3:f1:e4:93:22:
b4:72:f3:bc:28:5c:a2:2d:6b:01:5c:ab:47:94:ab:99:b7:47:
8e:2e:75:c1:b0:c1:0e:37:84:ed:04:18:99:be:4c:7d:0b:84:
9f:80:e1:af:a8:da:d4:c7:4c:92:f4:f6:63:83:74:d5:24:6c:
48:e0:0f:1e:a0:08:d7:83:19:ac:30:39:e2:78:31:e8:3a:87:
1a:dc:51:ec:b3:65:51:35:d0:b3:92:ad:16:4e:8a:a8:83:34:
3c:c0:be:c5:dc:61:19:ed:60:cd:88:9e:42:04:9e:38:e8:b8:
c5:f3:ce:2b:77:a5:35:75:4f:29:3a:8e:ee:c4:5e:38:4a:e9:
00:5b:37:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:52:39 2025 by rpki-client