
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/53d0f5-7c16-400f-8e2e-52018b45fad1/1/1-VrEskcnSM6ye_jFQ-Ftt7s2lYY.mft
File: 1-VrEskcnSM6ye_jFQ-Ftt7s2lYY.mft (raw, json)
Hash identifier: Q+l2cbJHYf56SE2iMuuj1dzFAfuaI6ayltsNzs+ocQc=
Subject key identifier: 38:D1:A8:55:34:D4:4E:05:66:92:15:08:A0:BF:41:0C:2F:56:E5:52
Authority key identifier: F9:5A:C4:B2:47:27:48:CE:B2:7B:F8:C5:43:E1:6D:B7:BB:36:95:86
Certificate issuer: /CN=f95ac4b2472748ceb27bf8c543e16db7bb369586
Certificate serial: 019896A503F517D92F6C2D98E60B581623B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-VrEskcnSM6ye_jFQ-Ftt7s2lYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/53d0f5-7c16-400f-8e2e-52018b45fad1/1/1-VrEskcnSM6ye_jFQ-Ftt7s2lYY.mft
Manifest number: 0603
Signing time: Mon 11 Aug 2025 01:00:53 +0000
Manifest this update: Mon 11 Aug 2025 01:00:53 +0000
Manifest next update: Tue 12 Aug 2025 01:00:53 +0000
Files and hashes: 1: 0_5G3WRzshlLEZ0xV-9i-mzzvJU.roa (hash: lKrDP0bITSxhK9qROQpQt1df+rqNUNqNFLiSE61PZ7c=)
2: 1-VrEskcnSM6ye_jFQ-Ftt7s2lYY.crl (hash: aMv+ApzJDQAknXKy33bY2FIGVYhwQFMAyuVqpi85Cac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/53d0f5-7c16-400f-8e2e-52018b45fad1/1/1-VrEskcnSM6ye_jFQ-Ftt7s2lYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/53d0f5-7c16-400f-8e2e-52018b45fad1/1/1-VrEskcnSM6ye_jFQ-Ftt7s2lYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-VrEskcnSM6ye_jFQ-Ftt7s2lYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a5:03:f5:17:d9:2f:6c:2d:98:e6:0b:58:16:23:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f95ac4b2472748ceb27bf8c543e16db7bb369586
Validity
Not Before: Aug 11 01:00:53 2025 GMT
Not After : Aug 12 01:00:53 2025 GMT
Subject: CN=38d1a85534d44e0566921508a0bf410c2f56e552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c9:3b:ac:85:f1:1e:0a:12:26:d4:11:b9:30:
d6:c0:a6:82:54:cb:74:bd:d0:94:34:a7:7c:84:a5:
5c:f3:97:89:da:ca:f6:e3:b6:34:2f:bf:be:2e:ea:
f0:6e:64:a2:44:19:50:3d:73:4f:11:69:3a:f7:89:
4a:15:b2:80:cb:07:66:0b:5d:8c:47:d1:07:4f:c7:
6a:49:ed:09:8c:6b:fa:67:99:b1:5b:f8:38:5f:8d:
84:0c:a9:32:86:8a:5c:ec:42:47:cb:9d:08:87:ef:
34:74:e5:65:0b:40:03:6c:73:61:e9:64:80:42:c5:
ff:c2:b7:e4:05:8a:39:56:db:b1:b9:ab:e8:ad:43:
32:ad:5a:43:e9:1b:83:bd:65:0e:ef:05:49:0d:86:
ee:10:2a:5b:ab:86:c2:27:16:49:07:06:6f:35:66:
28:30:0c:fd:5b:28:ff:06:47:93:af:bc:97:7e:a3:
e2:0b:95:ec:c5:a8:21:8b:91:e4:65:af:f7:0d:2b:
47:be:c8:ee:6d:7e:e8:7a:97:b5:ae:c2:7f:7e:f0:
9d:ee:81:90:f6:db:47:39:ae:da:eb:e3:81:32:e9:
ab:94:9c:46:a7:c3:66:b8:0f:25:cd:a1:55:f0:12:
dc:22:00:6b:2c:58:ad:47:2f:c0:a1:fb:9d:9b:da:
70:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D1:A8:55:34:D4:4E:05:66:92:15:08:A0:BF:41:0C:2F:56:E5:52
X509v3 Authority Key Identifier:
keyid:F9:5A:C4:B2:47:27:48:CE:B2:7B:F8:C5:43:E1:6D:B7:BB:36:95:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-VrEskcnSM6ye_jFQ-Ftt7s2lYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/53d0f5-7c16-400f-8e2e-52018b45fad1/1/1-VrEskcnSM6ye_jFQ-Ftt7s2lYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/53d0f5-7c16-400f-8e2e-52018b45fad1/1/1-VrEskcnSM6ye_jFQ-Ftt7s2lYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:d5:37:d5:c5:5d:06:5d:ef:1c:40:a2:dd:39:c8:1c:71:42:
02:a0:9e:50:38:57:0b:af:20:e2:ef:7b:0b:c9:5e:e4:c5:c4:
3e:a0:1a:71:46:d3:61:ec:86:dd:b9:93:5c:1e:19:a7:a3:13:
dc:1f:89:6d:5f:19:28:d6:e1:2d:ed:c6:b9:be:44:50:60:0e:
2c:21:b2:87:e6:8d:55:89:06:b2:78:ac:74:0d:71:f3:d2:68:
5c:e9:34:1a:27:11:16:46:72:15:2a:e8:4b:6b:0c:dd:20:e7:
59:84:65:32:36:ea:80:6b:13:cf:ab:3d:73:74:aa:96:09:26:
b9:c6:64:66:f0:00:97:76:8a:52:88:c5:c7:ec:03:9f:5d:9e:
a1:98:c7:a7:d2:c4:1a:2b:8f:03:e0:9c:48:f0:0d:e7:29:06:
13:48:04:96:86:89:b6:f9:b6:ea:f0:d9:36:01:00:76:5f:f0:
81:94:9e:d0:7e:45:8a:ef:2e:39:55:94:12:0d:4c:2c:e8:0f:
4e:f9:7d:89:cc:3c:a4:0a:84:a6:54:78:75:d0:7f:df:02:03:
c8:0b:a6:66:92:8d:b9:5c:b1:f1:61:82:83:4a:a4:92:39:10:
96:0a:d4:23:96:55:b3:2e:63:26:99:81:43:f5:94:fa:66:20:
db:33:7c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:08:46 2025 by rpki-client