Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/0c8b0f-5384-4580-89c2-a637650c74ae/1/VwoYGqCQy5cGBaJaelfWU1R_IyQ.mft
File: VwoYGqCQy5cGBaJaelfWU1R_IyQ.mft (raw, json)
Hash identifier: 4uRyAKULzH76Tvo3LbnTujj80aeeZdpeuGMmd3eu0lA=
Subject key identifier: 1F:FE:39:2D:17:3D:67:A7:49:30:A6:DC:EF:13:A6:37:F6:16:92:02
Authority key identifier: 57:0A:18:1A:A0:90:CB:97:06:05:A2:5A:7A:57:D6:53:54:7F:23:24
Certificate issuer: /CN=570a181aa090cb970605a25a7a57d653547f2324
Certificate serial: 0198952548E7CED9DA195C544CAD5B590AFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VwoYGqCQy5cGBaJaelfWU1R_IyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/0c8b0f-5384-4580-89c2-a637650c74ae/1/VwoYGqCQy5cGBaJaelfWU1R_IyQ.mft
Manifest number: 1627
Signing time: Sun 10 Aug 2025 18:01:45 +0000
Manifest this update: Sun 10 Aug 2025 18:01:45 +0000
Manifest next update: Mon 11 Aug 2025 18:01:45 +0000
Files and hashes: 1: 46uMqFoZIbx_W9-E8n9u53LtPPw.roa (hash: 2dilAY9A0HBjLWWldEcSomY7yF95pmwR+zYOHTlJZo4=)
2: IZTqsNkTgWjmY4RtPaRP8pP_4y4.roa (hash: snBSRgtB4DOLpSGdb4h6kFLqnhtBFWYeDh0vluESnyk=)
3: VwoYGqCQy5cGBaJaelfWU1R_IyQ.crl (hash: jWn+KH6p+WH32wz2b9c43G4ou+4nh6rkbaoDebDlpos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/0c8b0f-5384-4580-89c2-a637650c74ae/1/VwoYGqCQy5cGBaJaelfWU1R_IyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/0c8b0f-5384-4580-89c2-a637650c74ae/1/VwoYGqCQy5cGBaJaelfWU1R_IyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VwoYGqCQy5cGBaJaelfWU1R_IyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:25:48:e7:ce:d9:da:19:5c:54:4c:ad:5b:59:0a:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=570a181aa090cb970605a25a7a57d653547f2324
Validity
Not Before: Aug 10 18:01:45 2025 GMT
Not After : Aug 11 18:01:45 2025 GMT
Subject: CN=1ffe392d173d67a74930a6dcef13a637f6169202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fb:f9:45:a5:6e:33:ba:72:f4:db:2c:7a:b7:
2f:cf:59:4f:e8:cd:84:ff:9a:7b:0e:6e:df:60:21:
ab:ba:4a:38:6c:ab:6c:d5:9c:54:55:ca:2a:be:8e:
59:6e:98:0a:15:f4:20:80:69:9c:2f:f0:10:38:cd:
d9:a2:14:60:62:92:0c:94:63:41:2f:17:01:31:9e:
9f:2d:c4:a7:23:4d:11:db:78:ed:da:4c:1a:a2:cb:
66:4d:91:19:34:63:44:a0:df:1f:d1:17:91:e1:e4:
54:f4:36:f3:05:5b:00:15:33:57:76:eb:91:44:8b:
dc:f1:f5:4e:16:27:33:aa:ca:4f:87:93:95:2f:6e:
eb:0a:e1:c3:a3:a5:7b:43:d8:bb:9b:a0:29:43:1b:
59:fc:3a:3c:bc:13:62:e1:7e:d3:29:a9:b8:45:13:
7e:7a:56:17:9f:f6:67:f5:16:18:ce:da:8b:4d:28:
a5:9d:61:fd:f5:09:e1:07:e3:85:6f:42:32:a6:47:
48:56:55:46:6c:43:fc:24:d6:e3:58:3d:88:af:96:
08:69:a1:5e:cd:5f:5b:0f:06:4f:e6:19:4e:94:2a:
40:23:a7:57:83:c7:6b:2c:8b:32:e5:e6:25:fa:d0:
2e:ed:bd:22:b5:c8:f3:fa:8a:7b:11:22:bd:71:68:
5f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:FE:39:2D:17:3D:67:A7:49:30:A6:DC:EF:13:A6:37:F6:16:92:02
X509v3 Authority Key Identifier:
keyid:57:0A:18:1A:A0:90:CB:97:06:05:A2:5A:7A:57:D6:53:54:7F:23:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwoYGqCQy5cGBaJaelfWU1R_IyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0c8b0f-5384-4580-89c2-a637650c74ae/1/VwoYGqCQy5cGBaJaelfWU1R_IyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0c8b0f-5384-4580-89c2-a637650c74ae/1/VwoYGqCQy5cGBaJaelfWU1R_IyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:24:65:85:21:76:a3:ca:27:51:dd:51:1c:8f:dd:8f:82:d2:
e1:89:50:2d:0c:1a:d6:91:4d:71:30:fc:f4:6a:85:6e:0c:fc:
33:fe:68:2b:5e:fb:6a:11:c7:e7:0a:ca:41:87:92:3b:5c:65:
62:34:e4:b8:96:f5:4c:3a:3f:3c:09:ba:77:4e:27:1a:34:43:
81:2f:d1:34:73:2f:af:0c:dd:5f:76:19:75:df:58:d0:77:94:
f3:7c:df:54:6d:2d:8d:e1:6a:38:46:78:bf:36:d0:f4:d4:a1:
97:58:45:05:23:05:a1:f0:72:ec:85:5e:01:e7:52:ed:41:76:
a7:71:66:b4:79:9d:28:99:66:d8:20:cb:ab:7b:9a:49:ce:4a:
1f:0a:e3:10:93:f2:08:75:43:b9:49:1a:2e:d6:2f:eb:9a:61:
a8:99:af:f1:97:1d:b5:99:bb:26:7c:fe:53:6e:b0:fb:77:c1:
62:7e:25:70:c3:8f:07:d6:8a:9b:c4:5f:f7:e0:7d:6f:80:d7:
af:c2:0f:ab:55:ba:13:db:88:f5:01:a4:84:b6:b6:2c:fd:05:
47:81:08:d0:eb:fd:79:8f:57:11:f9:4b:1b:f9:6d:c3:82:a1:
06:73:c5:17:b3:8b:b3:a5:83:8a:a2:ad:76:97:c3:24:f9:a0:
09:3c:49:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 20:58:57 2025 by rpki-client