Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft
File: VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft (raw, json)
Hash identifier: 8yuwOK/lQmJCS9EYTLB2ascSreQX/Ebwy7Ia0VIOWiE=
Subject key identifier: 37:BE:15:F2:F8:CE:82:32:7D:5C:28:2C:18:40:86:91:8C:39:BF:BF
Authority key identifier: 54:0F:4A:1B:92:33:8B:49:CA:63:02:12:19:05:9C:E5:70:FF:59:64
Certificate issuer: /CN=540f4a1b92338b49ca63021219059ce570ff5964
Certificate serial: 019880C280C71203D96B8C18E2349D89184B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VA9KG5Izi0nKYwISGQWc5XD_WWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft
Manifest number: 0453
Signing time: Wed 06 Aug 2025 19:01:27 +0000
Manifest this update: Wed 06 Aug 2025 19:01:27 +0000
Manifest next update: Thu 07 Aug 2025 19:01:27 +0000
Files and hashes: 1: VA9KG5Izi0nKYwISGQWc5XD_WWQ.crl (hash: 1uQ5a1R9XartjscQopYIUB5U1bkZPicVYgKQ6se7ehw=)
2: _WaDfELTBc_dUmy6Cu013iGAFy4.roa (hash: 4Ui783wG8atURB8iqdX/TxaJyYCKy9S+Gr0JJXsrTgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VA9KG5Izi0nKYwISGQWc5XD_WWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 19:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:c2:80:c7:12:03:d9:6b:8c:18:e2:34:9d:89:18:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=540f4a1b92338b49ca63021219059ce570ff5964
Validity
Not Before: Aug 6 19:01:27 2025 GMT
Not After : Aug 7 19:01:27 2025 GMT
Subject: CN=37be15f2f8ce82327d5c282c184086918c39bfbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e9:30:b7:78:20:65:5c:96:c0:1c:a8:1f:3b:
e4:cc:84:3c:91:55:8c:f8:22:f2:1d:32:b0:cf:3d:
c7:24:2d:3c:47:88:f9:b1:77:16:ec:61:5d:a8:19:
04:c8:d6:8d:07:fd:a3:8d:fc:24:fb:b9:49:4c:f8:
71:90:1b:d0:57:fb:86:9d:14:a7:c2:65:ea:63:b8:
fe:1a:73:56:5d:69:56:37:26:4a:db:76:96:c3:7a:
48:0e:d5:b3:c4:00:2b:fc:c0:6c:a8:a6:e1:ce:88:
42:df:65:50:db:2a:d3:1c:2e:58:ec:e7:bd:0f:ef:
34:d2:8c:d8:06:a2:3f:01:a3:11:e6:0d:2d:de:7b:
b6:b0:ef:22:6c:6d:bd:c5:f2:b3:4f:27:81:90:d3:
cd:b1:15:40:af:0a:6d:e9:47:fc:b9:af:cb:12:e9:
6a:82:ff:41:4d:21:d2:dd:61:95:96:5b:0c:8b:43:
df:a3:31:00:38:28:f7:35:b2:d8:00:01:56:a0:e9:
7d:13:18:c4:a6:76:e2:7a:63:8b:69:55:92:22:94:
50:d5:aa:3a:c5:b3:08:61:fb:d8:01:72:a2:6d:9b:
3e:f1:cc:c9:12:cf:0f:fc:4f:01:08:ab:13:77:e6:
47:7b:32:e8:11:44:ae:ba:27:50:43:e2:60:b3:d0:
f7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:BE:15:F2:F8:CE:82:32:7D:5C:28:2C:18:40:86:91:8C:39:BF:BF
X509v3 Authority Key Identifier:
keyid:54:0F:4A:1B:92:33:8B:49:CA:63:02:12:19:05:9C:E5:70:FF:59:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VA9KG5Izi0nKYwISGQWc5XD_WWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:57:58:f4:a6:94:75:4a:89:80:55:34:8b:b4:49:1e:57:1a:
d5:96:ef:ae:a5:aa:5d:0b:05:ab:7a:1e:ca:ac:42:10:97:85:
cc:d3:e4:02:be:df:6d:03:bc:92:08:ae:b8:b5:5b:41:8a:53:
48:79:e6:f0:a6:ab:d1:5e:6b:0a:38:a1:96:e9:e1:58:54:4f:
4f:ec:aa:14:8d:d9:90:2a:b8:4e:ca:14:eb:ab:0d:c2:31:e5:
99:16:17:0d:83:c3:c4:a4:b5:59:95:89:8b:d8:a5:ad:7f:e0:
de:31:47:89:86:2a:7b:3b:ae:e0:ec:fd:75:3c:5d:1a:9f:30:
6a:1e:31:be:ad:ff:fb:39:6f:a2:e6:cf:a0:9d:f5:fe:2d:e2:
e9:06:36:9a:87:96:06:b7:24:f0:16:a6:45:69:5a:18:a4:8b:
ae:79:5b:a5:ff:0f:5e:f5:db:7c:7a:f6:dd:30:68:d5:e2:eb:
36:cd:4f:f9:ef:d9:20:43:98:f2:54:55:19:8f:dc:c9:d7:bf:
e9:87:3a:3d:e4:0c:6c:2a:3e:8c:56:e3:3c:0f:1b:be:54:c3:
42:30:c3:f8:e5:63:2f:0a:8d:cd:62:4e:5e:7d:6a:f7:d0:61:
47:70:a7:2e:43:eb:c3:66:b1:fb:66:d2:31:ef:ce:b4:24:eb:
71:e0:ed:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:59:51 2025 by rpki-client