Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.mft
File: Vk6tOAljA7xLah8rAuG5G-SEkUY.mft (raw, json)
Hash identifier: 2YZ96nvXFAIemzOFO/+GONu0g313yK4A/FX+wWgJIQs=
Subject key identifier: C5:52:70:FB:AD:1A:02:87:57:15:A7:B6:3B:BD:C1:D3:25:6E:3E:38
Authority key identifier: 56:4E:AD:38:09:63:03:BC:4B:6A:1F:2B:02:E1:B9:1B:E4:84:91:46
Certificate issuer: /CN=564ead38096303bc4b6a1f2b02e1b91be4849146
Certificate serial: 01988D6AB7A7556CBDA42275E15676FF6049
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vk6tOAljA7xLah8rAuG5G-SEkUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.mft
Manifest number: 0B6B
Signing time: Sat 09 Aug 2025 06:00:37 +0000
Manifest this update: Sat 09 Aug 2025 06:00:37 +0000
Manifest next update: Sun 10 Aug 2025 06:00:37 +0000
Files and hashes: 1: Q1FzunJJgm72n4cjnOFriVc18KU.roa (hash: 9QqXBfYauaWBi+EvcV0793mlb9DkJUiHomWOWZ5zJGk=)
2: Vk6tOAljA7xLah8rAuG5G-SEkUY.crl (hash: 4i5ko4zQLSfcI6T0QBBjiIejJDcTeCZmCSIKWAk6w+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vk6tOAljA7xLah8rAuG5G-SEkUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:6a:b7:a7:55:6c:bd:a4:22:75:e1:56:76:ff:60:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=564ead38096303bc4b6a1f2b02e1b91be4849146
Validity
Not Before: Aug 9 06:00:37 2025 GMT
Not After : Aug 10 06:00:37 2025 GMT
Subject: CN=c55270fbad1a02875715a7b63bbdc1d3256e3e38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:23:fb:de:8e:61:98:43:e3:0f:08:e1:a3:79:
f9:0c:94:d9:2e:6c:95:a3:c2:53:40:f3:38:02:8c:
52:e3:ba:b3:c1:ea:f6:a4:8c:d6:a1:81:f7:23:c5:
d9:d3:58:81:77:e4:d3:95:c0:d5:e8:c6:a6:e6:b7:
8d:20:81:27:53:28:4a:5f:48:1e:64:28:53:58:5e:
8b:1a:aa:f6:ca:19:69:98:bd:1a:a8:03:e6:24:86:
24:ab:24:81:ae:b5:01:2c:63:bc:86:1f:7b:97:5e:
e0:41:6c:19:ad:5f:c3:40:30:76:32:09:08:26:8a:
11:03:cb:7b:66:c8:53:d1:10:00:23:02:4b:2d:24:
c6:2d:b2:ea:aa:c6:62:95:1e:9d:ff:dc:26:27:29:
38:c5:4a:69:6f:54:5e:c1:c7:97:21:40:69:17:e0:
de:aa:e1:38:18:0b:71:a4:30:c0:bf:d9:84:79:ee:
bf:d8:44:4b:84:bb:b7:2d:2a:71:6a:2e:cb:e0:cf:
54:54:56:65:29:14:83:42:9a:1c:30:53:59:97:9a:
53:fa:d8:76:5b:25:96:b0:b5:8f:af:ef:9b:8a:91:
66:fb:f5:01:ca:02:3c:ba:be:dd:4c:4a:cc:b0:f3:
ae:ab:c3:05:43:fd:b2:42:7d:4b:0f:91:23:c9:ad:
a1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:52:70:FB:AD:1A:02:87:57:15:A7:B6:3B:BD:C1:D3:25:6E:3E:38
X509v3 Authority Key Identifier:
keyid:56:4E:AD:38:09:63:03:BC:4B:6A:1F:2B:02:E1:B9:1B:E4:84:91:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vk6tOAljA7xLah8rAuG5G-SEkUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:ff:f8:13:03:ed:01:fb:eb:c4:a9:bb:16:76:70:ca:2d:d3:
3c:a6:90:e7:56:fc:58:74:90:b3:d1:9a:cc:3d:80:9f:99:f0:
0d:da:aa:2b:b0:de:32:0a:ef:ed:3d:74:1b:2d:3e:90:56:f8:
e9:48:ff:17:6d:68:bc:4a:b6:c2:9a:c3:b9:22:8f:e7:2b:aa:
27:d4:bb:76:77:fa:9e:c1:00:44:01:c4:08:c3:0b:9d:90:25:
49:68:b2:c4:8a:fb:ad:1f:96:33:8f:4f:d1:e7:ae:80:0c:d3:
46:23:fc:5a:1f:ab:dc:cd:3d:0f:0d:9f:80:36:2e:5e:c0:81:
f9:79:97:c1:c3:c3:65:0f:4b:4f:7c:e3:40:91:20:32:11:fc:
fa:a0:66:fb:4b:f7:1f:12:c9:0e:92:90:65:a6:2e:8e:c9:60:
83:b4:bc:84:ee:a4:82:3d:4b:a2:91:b3:52:33:4e:f2:9a:37:
1b:c0:24:5e:fc:5a:7f:48:f7:fe:7f:85:01:33:53:17:f0:63:
ec:5e:a7:bf:ff:9c:e8:d4:5d:cd:8d:66:bf:6b:17:d8:b2:89:
9a:ec:51:9f:7b:58:e0:fa:57:d8:68:dd:67:54:f9:59:bc:bf:
dd:76:d9:97:47:a1:16:02:df:36:fc:11:bd:0c:b0:29:ba:57:
60:a7:ac:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:32:41 2025 by rpki-client