Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft
File: VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft (raw, json)
Hash identifier: eYcZtQ+FS1ND/HSuXWoJcjTf0KS4onYQSK599T7TdG4=
Subject key identifier: E9:67:1C:13:B9:D1:B3:42:3C:45:1F:42:30:73:B3:42:45:08:D7:48
Authority key identifier: 54:3E:20:BF:5F:25:2B:1B:DB:D2:1D:C9:9D:94:CD:97:EA:7F:0F:E6
Certificate issuer: /CN=543e20bf5f252b1bdbd21dc99d94cd97ea7f0fe6
Certificate serial: 019895C95CC7659ED922ECA806B3A92A0CF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft
Manifest number: 1106
Signing time: Sun 10 Aug 2025 21:00:58 +0000
Manifest this update: Sun 10 Aug 2025 21:00:58 +0000
Manifest next update: Mon 11 Aug 2025 21:00:58 +0000
Files and hashes: 1: 8ywt7YsrRBMREchgHLgyKhwPgx4.roa (hash: aCuMcxrQC+7OXrTGuhaVav/hwtQSKlgeWzdcYZWQMpw=)
2: VD4gv18lKxvb0h3JnZTNl-p_D-Y.crl (hash: dUtNV52PS2eljXY0sr4Jh12qn8sRP6vOf+kbKDFeVws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 21:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:c9:5c:c7:65:9e:d9:22:ec:a8:06:b3:a9:2a:0c:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543e20bf5f252b1bdbd21dc99d94cd97ea7f0fe6
Validity
Not Before: Aug 10 21:00:58 2025 GMT
Not After : Aug 11 21:00:58 2025 GMT
Subject: CN=e9671c13b9d1b3423c451f423073b3424508d748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:f4:a6:17:bc:63:a9:8f:ae:be:46:52:00:f6:
4e:b3:e5:f5:d1:0e:21:c5:18:da:7a:c9:4f:34:a3:
b2:fc:61:30:2a:98:40:84:34:ff:94:44:d4:09:8a:
b4:52:4a:b1:c5:1e:92:5a:25:b1:2f:67:3a:95:0e:
05:89:95:60:b4:db:5d:1c:60:84:35:07:67:bf:bd:
0e:b1:83:d2:da:76:f0:54:40:b7:ea:6f:ec:11:aa:
be:bc:ab:1b:4d:ab:ba:f7:95:57:ad:65:41:c6:52:
9e:ab:44:13:98:9c:fe:ec:81:c1:19:f4:4a:47:c3:
d6:68:44:21:f0:e5:a3:3e:db:af:fe:cd:b5:71:7d:
de:11:c3:4f:f9:33:7d:9c:fe:52:d9:bc:56:a8:ab:
bd:08:0e:5b:25:fc:6d:48:5e:41:93:b5:38:c0:b1:
12:83:2d:8f:56:7b:f7:b3:1a:c2:8e:35:87:3e:b2:
6e:80:27:ec:08:00:7a:e8:98:80:31:08:f6:af:5f:
dd:e1:f4:67:41:19:c3:10:63:eb:b8:40:a9:13:6b:
52:64:87:1c:13:43:b6:2d:fb:f3:e8:f9:84:f9:39:
4c:a4:ed:e9:a9:c7:11:ad:e4:a2:ba:02:45:a2:91:
34:40:2e:3b:0f:e5:57:ef:16:58:17:04:e6:b2:69:
80:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:67:1C:13:B9:D1:B3:42:3C:45:1F:42:30:73:B3:42:45:08:D7:48
X509v3 Authority Key Identifier:
keyid:54:3E:20:BF:5F:25:2B:1B:DB:D2:1D:C9:9D:94:CD:97:EA:7F:0F:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:32:c3:59:fb:87:e1:6d:e7:9d:ab:a1:8c:6b:eb:29:37:34:
fb:04:37:10:4e:cc:cc:97:0d:03:97:84:3f:1c:05:ac:a9:ef:
c8:38:da:81:cf:44:84:b0:81:d7:86:28:cb:64:98:93:e8:bc:
97:3f:d7:ce:36:82:da:67:bb:d1:66:ce:1d:ca:b1:d2:e5:ce:
f3:b7:88:c1:5c:71:ec:26:92:f5:13:e8:3c:32:63:ad:02:cb:
57:8f:fa:a1:f9:c6:9e:74:22:7e:0f:fe:d2:59:e9:f1:e8:8e:
bb:5a:0d:1e:38:e1:81:8d:da:71:a0:34:b9:30:3a:51:87:cc:
ee:7f:0c:ae:57:ca:8e:4b:14:e8:c6:15:e0:94:e9:b3:ec:b7:
17:ac:25:ee:9d:63:75:73:d5:ce:fd:8c:d7:37:ae:c8:51:42:
65:dd:40:40:ae:26:81:ec:e0:23:08:05:20:ae:28:80:1d:7c:
53:a2:9e:e0:c3:bd:60:03:e5:03:7e:3a:d1:4f:47:5b:ad:f9:
da:81:4d:6d:fc:b6:d0:8c:62:f2:9e:dd:8d:c6:fc:ed:d1:b4:
94:d8:57:0f:2b:84:3f:07:1b:47:47:c5:9a:85:3b:fa:86:0b:
26:7d:6b:76:f2:7d:a2:8a:88:cb:5b:7f:04:d6:fb:64:f4:d9:
72:41:59:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:08:55 2025 by rpki-client