Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.mft
File: VSV3WnBqwAyC-ikzniLkMQgJnnk.mft (raw, json)
Hash identifier: SkgIAZuJwk+gwry5KxTbWciMvCBp9T6Vgli0lshH3nc=
Subject key identifier: 3E:79:E3:B7:E2:6A:21:AE:8C:47:55:92:9B:34:7E:89:BB:39:98:2D
Authority key identifier: 55:25:77:5A:70:6A:C0:0C:82:FA:29:33:9E:22:E4:31:08:09:9E:79
Certificate issuer: /CN=5525775a706ac00c82fa29339e22e43108099e79
Certificate serial: 0198744FD04797364CDB6C846D9DB6FE01FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSV3WnBqwAyC-ikzniLkMQgJnnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.mft
Manifest number: 10ED
Signing time: Mon 04 Aug 2025 09:00:44 +0000
Manifest this update: Mon 04 Aug 2025 09:00:44 +0000
Manifest next update: Tue 05 Aug 2025 09:00:44 +0000
Files and hashes: 1: 7Hysv3h3cIK_WddtBkhV4eeOKec.roa (hash: vqkbaBvGL81dJNu1I/whqip6EIOAqXAyhwvf9zKaCBc=)
2: VSV3WnBqwAyC-ikzniLkMQgJnnk.crl (hash: ChoYxYDskWkdXfWe66q0LYCV0H7cTGrXOobfSzvGLM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VSV3WnBqwAyC-ikzniLkMQgJnnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:d0:47:97:36:4c:db:6c:84:6d:9d:b6:fe:01:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5525775a706ac00c82fa29339e22e43108099e79
Validity
Not Before: Aug 4 09:00:44 2025 GMT
Not After : Aug 5 09:00:44 2025 GMT
Subject: CN=3e79e3b7e26a21ae8c4755929b347e89bb39982d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a9:5b:5c:03:83:ed:c5:5c:34:41:a7:64:a9:
b3:a8:db:50:73:71:21:de:60:68:ab:78:63:7a:a9:
ea:c9:e2:3d:19:f6:bb:f0:69:35:11:47:96:17:85:
88:64:04:41:fd:5f:4d:ee:54:fd:5e:d5:eb:c0:eb:
1f:03:5b:8b:fe:a3:ec:e5:9f:43:5a:7c:15:b3:5f:
30:7a:2e:60:ca:da:4d:87:00:a2:4b:41:5d:f2:fa:
bd:78:ad:61:68:e5:29:28:69:39:f0:3d:73:af:b6:
9c:3c:ce:e1:ac:20:5c:9c:45:cd:aa:e1:77:9e:84:
6f:03:06:6d:b2:35:fb:5a:9a:ea:db:5e:be:42:d3:
f6:27:5e:28:84:a6:26:f8:4a:bc:2c:26:43:1b:67:
cc:ba:74:ad:9c:e7:3d:e7:e3:aa:31:64:d7:75:eb:
09:45:90:cb:80:83:86:ef:d2:48:24:7f:58:84:74:
31:de:00:39:4a:4e:b4:43:c0:3c:68:80:9d:1b:6d:
6f:58:8d:54:53:46:76:ea:f9:80:81:a8:b3:97:ab:
45:3d:6c:da:79:25:ea:bf:e5:5a:ac:e0:73:7f:6c:
c9:4f:6c:a1:b5:57:77:83:13:6e:ea:0f:7a:1d:35:
10:94:7a:03:36:a1:8d:9f:e8:11:7a:fc:2e:b6:cb:
85:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:79:E3:B7:E2:6A:21:AE:8C:47:55:92:9B:34:7E:89:BB:39:98:2D
X509v3 Authority Key Identifier:
keyid:55:25:77:5A:70:6A:C0:0C:82:FA:29:33:9E:22:E4:31:08:09:9E:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSV3WnBqwAyC-ikzniLkMQgJnnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:1b:84:04:93:2c:7b:87:74:13:11:3c:66:e8:61:69:af:71:
fd:9c:13:26:5c:2d:94:35:fe:37:52:ab:fd:6d:ab:65:c7:ff:
08:c2:c1:ba:b2:45:a0:5f:ed:6c:81:72:d5:55:4e:c4:03:0f:
da:ea:c6:34:bc:cc:4d:36:8d:10:cd:71:2b:b4:e8:05:0f:09:
c6:e7:3e:29:c0:1d:c9:58:d4:ce:83:6d:ac:88:78:7f:46:92:
3a:b8:40:50:8e:13:f4:2d:62:9e:e8:45:83:8d:5f:db:a0:46:
f0:58:a1:74:92:32:4d:cd:30:9c:83:94:1b:29:5a:98:a0:e2:
9b:16:0b:c6:18:00:a3:e9:37:80:3c:fe:d1:e7:cb:c1:9a:63:
98:54:fd:94:2d:a2:af:8a:16:7d:36:63:ee:61:6c:d4:17:65:
80:a6:10:7c:64:7f:a4:50:32:aa:db:86:42:96:73:d9:36:33:
90:e5:84:d5:36:de:41:37:90:ff:ba:8c:18:17:df:0c:bc:96:
79:e5:53:73:56:dd:24:ce:fe:b0:55:7b:32:70:96:2c:2f:bb:
d4:24:b0:b9:5c:a4:d6:71:e9:66:51:12:35:01:a5:4d:e0:d0:
2d:ba:9b:e1:7c:a5:01:3a:c1:12:5d:df:d4:13:4c:6f:7e:63:
7f:09:62:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:00:44 2025 by rpki-client