Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/9a8d08-e4bb-492f-9863-454f99c74f11/1/VT9MRjGjOFxeOV7h2dqgdrC8z_E.mft
File: VT9MRjGjOFxeOV7h2dqgdrC8z_E.mft (raw, json)
Hash identifier: OQqs4K0FEbkOFSBhHOduNMrFzdT4NaJMp3FBL2WPxPw=
Subject key identifier: 86:DD:6C:16:EF:5D:0F:43:8D:20:13:27:B9:3D:60:1B:D3:94:91:A3
Authority key identifier: 55:3F:4C:46:31:A3:38:5C:5E:39:5E:E1:D9:DA:A0:76:B0:BC:CF:F1
Certificate issuer: /CN=553f4c4631a3385c5e395ee1d9daa076b0bccff1
Certificate serial: 01987419352EF3363B15EDA1EFEC7BF640C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VT9MRjGjOFxeOV7h2dqgdrC8z_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/9a8d08-e4bb-492f-9863-454f99c74f11/1/VT9MRjGjOFxeOV7h2dqgdrC8z_E.mft
Manifest number: 10FD
Signing time: Mon 04 Aug 2025 08:01:05 +0000
Manifest this update: Mon 04 Aug 2025 08:01:05 +0000
Manifest next update: Tue 05 Aug 2025 08:01:05 +0000
Files and hashes: 1: VT9MRjGjOFxeOV7h2dqgdrC8z_E.crl (hash: 6FM32bz6nxNe/UbXw4F9QdEHI+Sv5QNZgez9+ee/IaI=)
2: y1unGvVewluXyGeDL5LFoMVtcdw.roa (hash: /h17T8UK70DqWL88fo4si+DcDqq+rRewkenDmJ5Ct8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/9a8d08-e4bb-492f-9863-454f99c74f11/1/VT9MRjGjOFxeOV7h2dqgdrC8z_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/9a8d08-e4bb-492f-9863-454f99c74f11/1/VT9MRjGjOFxeOV7h2dqgdrC8z_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/VT9MRjGjOFxeOV7h2dqgdrC8z_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:35:2e:f3:36:3b:15:ed:a1:ef:ec:7b:f6:40:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=553f4c4631a3385c5e395ee1d9daa076b0bccff1
Validity
Not Before: Aug 4 08:01:05 2025 GMT
Not After : Aug 5 08:01:05 2025 GMT
Subject: CN=86dd6c16ef5d0f438d201327b93d601bd39491a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:56:b6:74:a1:90:51:28:eb:0d:32:a0:55:ce:
74:63:c1:f4:33:c3:6c:88:89:29:50:3f:88:88:1d:
57:b4:fd:b7:84:8f:a4:1e:6a:f9:41:4a:66:1e:ba:
60:49:8f:f9:c8:51:dd:0d:f9:66:7d:b1:33:21:9e:
76:fc:1f:08:dc:0a:47:60:db:55:d8:57:69:bd:c2:
78:5c:4f:90:66:2e:40:3d:fb:7b:db:5c:0b:76:62:
38:09:43:a6:e4:61:85:4a:08:c9:db:b4:af:56:66:
97:50:2d:1a:04:94:e9:20:af:ef:83:df:d5:fa:8f:
c8:0c:a5:4b:f7:91:83:ee:63:f1:84:ea:ac:85:30:
a6:21:94:05:a4:f6:07:f4:66:a5:72:18:cc:cb:2e:
f7:6f:7f:ae:81:2c:22:4e:09:c8:ba:a0:e1:5f:95:
3d:23:31:91:37:72:30:e2:40:5d:16:75:6f:6d:40:
18:16:5f:69:a4:92:48:5d:90:ae:48:15:4f:b2:d7:
93:0a:ce:b3:31:bc:af:79:b0:df:96:52:f8:f4:30:
04:4a:6a:69:bb:73:c7:3d:df:63:83:f4:3a:41:e0:
80:55:be:2c:c3:a4:16:09:28:08:bb:0f:a0:3a:60:
a3:55:b4:82:30:bd:c7:b5:d7:09:0e:8b:e5:b8:44:
12:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:DD:6C:16:EF:5D:0F:43:8D:20:13:27:B9:3D:60:1B:D3:94:91:A3
X509v3 Authority Key Identifier:
keyid:55:3F:4C:46:31:A3:38:5C:5E:39:5E:E1:D9:DA:A0:76:B0:BC:CF:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VT9MRjGjOFxeOV7h2dqgdrC8z_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/9a8d08-e4bb-492f-9863-454f99c74f11/1/VT9MRjGjOFxeOV7h2dqgdrC8z_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/9a8d08-e4bb-492f-9863-454f99c74f11/1/VT9MRjGjOFxeOV7h2dqgdrC8z_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:2b:f8:f3:76:81:bb:41:7f:a9:07:7f:fa:94:db:0c:4c:f0:
ca:62:42:fd:03:9d:82:c6:e8:75:92:43:45:e9:c0:1e:4b:21:
98:46:5f:8d:4a:e5:89:70:14:48:b2:0b:7b:2d:41:a7:bf:2b:
17:de:26:19:7b:1e:17:ff:35:c5:1c:1c:a2:e5:f5:03:26:3c:
f7:58:8b:74:61:10:62:00:67:e1:58:9d:8d:b5:59:d1:6e:51:
b0:b4:a9:3c:2b:64:ba:ef:da:8e:8e:57:e2:db:9d:85:11:26:
ef:94:c9:6f:d9:6b:9a:d2:77:ed:64:ca:bb:d3:09:bd:00:fc:
c9:43:72:52:e5:90:a5:44:87:bc:e9:98:de:07:46:8f:07:8b:
62:0b:e4:79:81:cd:09:c7:a5:a2:b8:b0:be:01:5f:f7:44:dc:
85:bd:c5:b1:e8:c7:41:e3:77:04:96:a8:fa:bf:69:e5:0f:15:
01:21:cc:98:31:6a:60:56:d6:9f:1e:28:c8:ee:00:ae:28:4d:
78:4f:ef:8c:c1:31:4b:b0:6f:00:29:8e:c9:48:0d:1f:e9:5f:
09:bd:f7:d5:16:98:fc:b8:8c:d9:a7:14:71:31:2f:24:d8:29:
fa:50:b4:85:b5:97:75:b9:e1:cb:02:fe:c8:ee:f7:f9:0e:d7:
77:b5:84:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:49 2025 by rpki-client