Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/b37216-3ea6-4f90-983b-09c8148bd23f/1/VZcyBKNpaAWG3if5RvyBZlYyqoM.mft
File: VZcyBKNpaAWG3if5RvyBZlYyqoM.mft (raw, json)
Hash identifier: z3mHk50g19K8I0cd6tdNpcmNhtpGTCDFRTJm7EKtMvc=
Subject key identifier: 65:F8:2B:2A:00:A8:9D:AE:F5:AB:0F:6D:F7:88:CA:57:E3:81:F8:9B
Authority key identifier: 55:97:32:04:A3:69:68:05:86:DE:27:F9:46:FC:81:66:56:32:AA:83
Certificate issuer: /CN=55973204a369680586de27f946fc81665632aa83
Certificate serial: 01989E9565EDB1BEF8CAB963CC19BCB1192C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZcyBKNpaAWG3if5RvyBZlYyqoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/b37216-3ea6-4f90-983b-09c8148bd23f/1/VZcyBKNpaAWG3if5RvyBZlYyqoM.mft
Manifest number: 014D
Signing time: Tue 12 Aug 2025 14:00:47 +0000
Manifest this update: Tue 12 Aug 2025 14:00:47 +0000
Manifest next update: Wed 13 Aug 2025 14:00:47 +0000
Files and hashes: 1: VZcyBKNpaAWG3if5RvyBZlYyqoM.crl (hash: lhsDxKAvJdjKOXzMF3SrGdNgdyC7SdYlx3yvwazyRQQ=)
2: mSTn9O6BnESLT6h3yoW1YArpQb4.roa (hash: 7y3jZgmc8JKyp1pmRABgyXmd8BIDMBzt7/dcJJXvkSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/b37216-3ea6-4f90-983b-09c8148bd23f/1/VZcyBKNpaAWG3if5RvyBZlYyqoM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/b37216-3ea6-4f90-983b-09c8148bd23f/1/VZcyBKNpaAWG3if5RvyBZlYyqoM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VZcyBKNpaAWG3if5RvyBZlYyqoM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:95:65:ed:b1:be:f8:ca:b9:63:cc:19:bc:b1:19:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55973204a369680586de27f946fc81665632aa83
Validity
Not Before: Aug 12 14:00:47 2025 GMT
Not After : Aug 13 14:00:47 2025 GMT
Subject: CN=65f82b2a00a89daef5ab0f6df788ca57e381f89b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:83:21:45:b6:13:89:57:6b:4d:ef:33:80:20:
eb:a6:8f:11:cd:a7:ce:3f:5f:f7:73:5d:c3:4d:e2:
b2:4f:92:d8:5c:5a:c8:a0:05:c1:45:70:4b:6f:e6:
30:51:9c:04:00:7f:be:3a:8c:e0:e1:c6:ae:0c:29:
dd:5c:4f:21:2a:3d:f2:59:3f:ee:03:0c:7b:71:4c:
58:51:5c:23:58:b7:4f:fd:f5:3d:8c:f2:31:9e:13:
05:a4:23:dc:4d:a9:06:51:0e:96:9a:fb:d1:a9:ed:
30:c7:67:c8:5f:0c:e2:07:b0:a6:46:2a:97:71:59:
68:3e:f3:1c:04:16:a6:77:0c:70:d1:cd:7d:5a:5f:
8d:1a:13:9c:45:72:57:a2:59:95:8c:2a:79:7d:55:
3c:11:38:21:41:a5:8a:79:9c:0f:6b:3b:e3:ef:29:
e7:84:7e:95:3c:3b:ff:c5:00:6c:10:5b:a6:cd:db:
b2:3d:58:7d:fb:42:0f:3d:9c:78:a3:02:36:fa:f4:
ec:c3:eb:3a:4d:b2:20:a2:ff:a1:93:fe:73:22:04:
48:10:21:20:7d:70:8c:f1:14:92:d9:ca:b1:4d:f7:
71:60:fb:37:b8:7e:c1:b7:3e:5f:1f:01:4d:1b:c3:
38:6f:ee:60:1b:9b:78:c8:24:3f:93:3f:92:f7:72:
e3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:F8:2B:2A:00:A8:9D:AE:F5:AB:0F:6D:F7:88:CA:57:E3:81:F8:9B
X509v3 Authority Key Identifier:
keyid:55:97:32:04:A3:69:68:05:86:DE:27:F9:46:FC:81:66:56:32:AA:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZcyBKNpaAWG3if5RvyBZlYyqoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b37216-3ea6-4f90-983b-09c8148bd23f/1/VZcyBKNpaAWG3if5RvyBZlYyqoM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b37216-3ea6-4f90-983b-09c8148bd23f/1/VZcyBKNpaAWG3if5RvyBZlYyqoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ef:ae:56:ca:03:b0:9a:60:5f:54:15:ce:c0:6f:a0:dc:dc:86:
9a:ff:7a:04:03:f3:c7:88:3f:b4:54:fa:89:80:63:a0:46:75:
71:7e:28:08:71:9f:8a:a0:33:b7:c7:bd:d8:e3:aa:63:be:1d:
99:da:2d:0c:d7:00:25:af:42:35:a5:3f:37:9a:7c:4b:f1:2b:
f2:ac:94:2f:c9:f1:60:8a:03:bc:58:7e:6b:6b:36:b3:61:48:
a8:67:0d:36:5f:62:ed:10:d5:5b:80:c3:e7:b4:1e:77:e3:ee:
e7:b9:65:67:d5:bd:8e:e6:89:02:a2:52:32:ce:32:b3:48:8c:
43:29:1b:23:87:dd:0b:0f:98:0a:98:1c:f0:38:55:84:39:7b:
de:b1:ad:15:2b:3a:a4:2a:73:e9:b6:c4:3b:c1:3d:8b:0b:49:
93:4b:e5:96:0f:69:dc:25:94:ea:ff:25:09:f9:e3:cb:19:8c:
a7:3f:c6:7e:3c:11:05:51:b3:52:ed:4d:92:aa:b7:4e:73:2e:
6b:97:c8:32:28:11:56:85:b8:19:5e:8b:14:48:c5:0c:39:e5:
87:36:43:38:5b:9e:13:7a:07:b7:10:70:b6:c9:c9:da:77:59:
81:1a:52:92:9f:a2:83:72:7a:96:9e:81:05:b4:c5:2e:ea:a1:
fe:52:62:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:42:27 2025 by rpki-client