Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/VZp2lBLS2WO0kevjHUQRHcr8zJQ.mft
File: VZp2lBLS2WO0kevjHUQRHcr8zJQ.mft (raw, json)
Hash identifier: NZ7skOJQ9WENzs40mRgoh4G4RSj2ry8hAOVkiKny2Bs=
Subject key identifier: 44:01:51:F9:2B:40:1B:88:25:6B:40:4E:AB:D9:F3:46:28:D3:30:D0
Authority key identifier: 55:9A:76:94:12:D2:D9:63:B4:91:EB:E3:1D:44:11:1D:CA:FC:CC:94
Certificate issuer: /CN=559a769412d2d963b491ebe31d44111dcafccc94
Certificate serial: 01988B1090C1ECE10CC1265D889F1C484AEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZp2lBLS2WO0kevjHUQRHcr8zJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/VZp2lBLS2WO0kevjHUQRHcr8zJQ.mft
Manifest number: 0506
Signing time: Fri 08 Aug 2025 19:02:55 +0000
Manifest this update: Fri 08 Aug 2025 19:02:55 +0000
Manifest next update: Sat 09 Aug 2025 19:02:55 +0000
Files and hashes: 1: VZp2lBLS2WO0kevjHUQRHcr8zJQ.crl (hash: 0j0ptsPYckJUdC76f01oi3PArWR3a4kZnjj8EPRXESI=)
2: r1lquQ-XjIWjOg1LAkyGn6KMjo0.roa (hash: wZhXEM3Xxa5+Fz5oyJ1++QkvfDJcpfPRAfCqMyTq70w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/VZp2lBLS2WO0kevjHUQRHcr8zJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/VZp2lBLS2WO0kevjHUQRHcr8zJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VZp2lBLS2WO0kevjHUQRHcr8zJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:02:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:10:90:c1:ec:e1:0c:c1:26:5d:88:9f:1c:48:4a:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=559a769412d2d963b491ebe31d44111dcafccc94
Validity
Not Before: Aug 8 19:02:55 2025 GMT
Not After : Aug 9 19:02:55 2025 GMT
Subject: CN=440151f92b401b88256b404eabd9f34628d330d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:60:be:a9:18:d7:1d:41:6f:9c:06:bf:ee:f8:
d2:96:2f:7f:6e:cb:e1:e7:01:6d:2f:89:ed:6e:7c:
95:a6:97:29:a3:53:6c:13:cc:3f:01:cf:63:45:d8:
ab:0c:3d:58:40:bc:ad:80:3c:8f:01:60:84:f4:4f:
22:53:84:80:3f:3b:ff:6e:c0:2e:19:b1:1b:db:6a:
bc:f7:f8:33:9e:1d:5e:94:d7:ff:26:85:de:75:b5:
ef:83:05:96:ef:0a:58:1f:44:3a:5f:d4:87:43:ca:
70:29:a3:cc:4a:4b:21:a5:a7:8d:38:c3:e4:09:4d:
d7:31:b7:a6:b7:e8:93:98:28:bb:7a:c0:c5:50:9f:
25:bd:bb:75:55:c0:ff:96:19:28:cc:35:15:5b:12:
ae:ec:53:aa:74:c5:aa:06:8f:66:3b:77:3f:74:f6:
9c:5b:7c:75:d8:2e:f1:30:3a:26:59:0d:9a:5b:46:
01:37:71:cf:9c:91:a3:cb:cc:b3:d6:3a:e5:29:a0:
7e:15:0c:57:4e:78:56:c7:4c:82:10:03:aa:48:7e:
38:79:06:5a:98:62:b9:84:ab:44:35:e7:25:d1:f1:
f8:26:2e:e1:14:8e:7e:bd:53:37:54:9b:37:27:40:
e0:a7:89:57:ad:b2:2f:5d:f0:40:0f:33:7a:c8:29:
4d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:01:51:F9:2B:40:1B:88:25:6B:40:4E:AB:D9:F3:46:28:D3:30:D0
X509v3 Authority Key Identifier:
keyid:55:9A:76:94:12:D2:D9:63:B4:91:EB:E3:1D:44:11:1D:CA:FC:CC:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZp2lBLS2WO0kevjHUQRHcr8zJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/VZp2lBLS2WO0kevjHUQRHcr8zJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/VZp2lBLS2WO0kevjHUQRHcr8zJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:7e:ef:02:e0:14:61:18:58:4c:64:46:ee:89:ff:a3:c0:34:
c5:2b:f3:b4:e8:d3:ab:ef:42:b6:26:a4:23:5e:b1:89:75:ae:
af:20:61:a4:6b:c7:25:10:df:23:f9:f3:46:63:25:1a:37:d4:
1a:26:fb:a3:39:99:95:2a:f8:55:e1:8d:bc:0d:9f:8f:47:43:
0b:af:37:f6:9a:cb:82:28:9f:0f:47:12:12:8a:1f:bd:96:8d:
90:de:02:20:35:90:8a:59:28:78:d0:bd:8c:3d:bd:ca:ec:bf:
21:22:9e:8f:52:80:c7:1c:47:73:fc:4e:7a:55:37:30:19:03:
35:10:31:ff:17:61:ee:29:99:d3:e1:5d:9f:5f:0f:98:35:70:
15:70:3c:f4:a2:90:9d:b9:05:50:0c:cb:df:43:5c:63:b2:bc:
5b:96:37:91:0d:24:e5:c8:1f:6d:cd:f4:50:e1:eb:77:a6:e8:
44:e0:7b:85:5a:0c:ce:98:71:86:5b:01:cb:d6:ef:ad:e4:df:
43:62:a8:a6:37:ff:1c:ff:ca:54:e5:40:0a:68:4a:93:51:60:
3a:7e:bd:73:f8:b3:78:1a:25:38:00:f6:1e:6a:08:15:f4:a8:
a1:be:58:46:d3:30:52:06:17:69:dd:f2:77:36:95:94:6f:ce:
6c:78:d7:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:34:57 2025 by rpki-client