Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/bd7780-eb53-4c1d-acce-cfe7e3f9f92d/1/VM4kRaLoh0MYvySbc6ZUyZCRnuA.mft
File: VM4kRaLoh0MYvySbc6ZUyZCRnuA.mft (raw, json)
Hash identifier: DERIER/NNL2Vt2dcQhE25GDLv29NreTMpS4aAwmSJRA=
Subject key identifier: 45:64:4D:04:52:75:B5:DA:2E:A8:75:BD:DD:84:92:86:EC:7C:D0:4B
Authority key identifier: 54:CE:24:45:A2:E8:87:43:18:BF:24:9B:73:A6:54:C9:90:91:9E:E0
Certificate issuer: /CN=54ce2445a2e8874318bf249b73a654c990919ee0
Certificate serial: 019873E34A0CDDAE252971331A38122B8E05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VM4kRaLoh0MYvySbc6ZUyZCRnuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7780-eb53-4c1d-acce-cfe7e3f9f92d/1/VM4kRaLoh0MYvySbc6ZUyZCRnuA.mft
Manifest number: 0DAA
Signing time: Mon 04 Aug 2025 07:02:12 +0000
Manifest this update: Mon 04 Aug 2025 07:02:12 +0000
Manifest next update: Tue 05 Aug 2025 07:02:12 +0000
Files and hashes: 1: VM4kRaLoh0MYvySbc6ZUyZCRnuA.crl (hash: Vb0aRtZWgFolqg/zaf7fAT9Q8WGuYSx+lxOXC3OaiiI=)
2: qCD8L1dMgJ9yzf77qP7Yswj5ta4.roa (hash: oyvr0Mb88tpow7HpmKv7H5W0zqdzX3mbbm1lwxbPABw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7780-eb53-4c1d-acce-cfe7e3f9f92d/1/VM4kRaLoh0MYvySbc6ZUyZCRnuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7780-eb53-4c1d-acce-cfe7e3f9f92d/1/VM4kRaLoh0MYvySbc6ZUyZCRnuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VM4kRaLoh0MYvySbc6ZUyZCRnuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:4a:0c:dd:ae:25:29:71:33:1a:38:12:2b:8e:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54ce2445a2e8874318bf249b73a654c990919ee0
Validity
Not Before: Aug 4 07:02:12 2025 GMT
Not After : Aug 5 07:02:12 2025 GMT
Subject: CN=45644d045275b5da2ea875bddd849286ec7cd04b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:12:88:a3:85:da:e5:40:09:05:a7:dd:c4:5b:
7b:4f:ae:80:9d:a3:6b:73:5d:61:c5:de:0a:c6:11:
57:45:86:a5:a0:a2:c0:f5:0f:ac:b5:8d:fd:be:47:
24:2b:74:e1:27:70:05:20:cd:58:8f:ac:9e:4a:a7:
f5:65:10:53:07:65:de:bf:57:1d:b8:5b:c5:15:17:
ef:19:5e:09:d6:91:c5:20:4d:22:ca:6f:ac:b7:f2:
03:dc:d9:63:dc:27:56:d4:b1:79:63:84:3a:43:7c:
da:1e:77:55:ad:83:9a:9d:f9:77:73:11:5b:b2:ca:
94:c0:91:de:d7:28:45:79:29:c2:6d:89:69:5e:32:
d2:e8:0d:89:cb:32:11:8e:42:47:7d:86:08:d0:bc:
5d:e9:a1:8c:32:9c:38:cf:8d:fb:bf:86:d8:30:f2:
6b:55:97:fc:5b:4c:0e:dc:58:b9:5a:05:9a:37:f9:
69:dc:bb:1e:63:a2:ee:f0:47:8b:d2:11:c6:79:3e:
98:02:eb:8b:af:25:bf:6f:6f:93:5e:6c:1e:68:87:
75:75:cc:92:79:03:2f:15:4b:c2:3b:9d:a2:0c:17:
e7:6c:3c:70:0a:09:91:16:d2:1a:f1:40:67:f8:07:
39:05:18:9d:45:09:ff:92:0d:d9:0a:bb:0a:46:02:
35:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:64:4D:04:52:75:B5:DA:2E:A8:75:BD:DD:84:92:86:EC:7C:D0:4B
X509v3 Authority Key Identifier:
keyid:54:CE:24:45:A2:E8:87:43:18:BF:24:9B:73:A6:54:C9:90:91:9E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VM4kRaLoh0MYvySbc6ZUyZCRnuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7780-eb53-4c1d-acce-cfe7e3f9f92d/1/VM4kRaLoh0MYvySbc6ZUyZCRnuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7780-eb53-4c1d-acce-cfe7e3f9f92d/1/VM4kRaLoh0MYvySbc6ZUyZCRnuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:5f:6d:aa:91:fa:b3:19:90:68:3c:9a:10:a5:83:18:09:f3:
dd:e7:94:60:e7:5d:90:3f:bd:25:b2:35:28:f3:85:f5:28:cb:
37:17:1d:17:5e:92:53:88:1a:9b:a0:dd:75:ad:ee:12:22:b5:
8d:98:a0:03:d5:ea:73:b5:94:4b:f5:92:0f:8c:0d:ff:73:38:
00:2e:d3:01:fa:eb:97:5a:cf:b3:10:f0:36:6d:5f:1e:cf:d1:
c9:8e:27:d4:0c:71:28:e7:1e:c2:28:9f:9e:e1:f8:fa:1f:0c:
3b:12:6b:c7:c8:a2:46:3f:28:ca:eb:53:9e:06:b4:2b:9a:f5:
ac:22:05:04:19:e3:da:ed:4f:8d:c5:96:77:4a:c5:23:72:c5:
d0:b0:b6:7d:47:a7:57:a7:06:20:79:f1:be:94:90:87:2f:8c:
8f:de:8e:34:20:35:98:47:f0:30:7e:21:68:29:d4:22:d8:ff:
c2:f9:74:19:1a:37:9c:4a:a1:4b:18:b0:4c:c5:44:30:8e:47:
b1:85:13:87:26:54:28:54:2c:22:1a:16:df:08:86:99:bb:39:
2f:b5:c8:d7:bd:3e:ff:f4:7c:ef:e2:cf:1b:42:4f:2f:17:29:
5d:fe:db:5d:67:85:ce:f5:d9:cc:f3:90:05:18:3f:8a:c7:5d:
a9:81:18:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:17:45 2025 by rpki-client