Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
File: vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft (raw, json)
Hash identifier: zZdfW8M3wKqLAyNDe/w4Njgtb7lXm64wsoV7fCvCYjc=
Subject key identifier: C8:98:E8:8F:FF:69:09:A2:11:B1:A3:B3:AC:B7:14:48:7B:AE:2D:0D
Authority key identifier: BE:12:5C:AD:7D:D4:C5:F0:20:1E:E2:A2:1D:EA:C3:87:36:69:81:C4
Certificate issuer: /CN=be125cad7dd4c5f0201ee2a21deac387366981c4
Certificate serial: 019897EF0C8CF9E91AD5B08BBDFED69197DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
Manifest number: 1628
Signing time: Mon 11 Aug 2025 07:01:22 +0000
Manifest this update: Mon 11 Aug 2025 07:01:22 +0000
Manifest next update: Tue 12 Aug 2025 07:01:22 +0000
Files and hashes: 1: BF5uYM34somF3uKBjwVBv6TvSUc.roa (hash: LMQTKQzXnQ/SBYJGX5sPOQPjZo/gmRmiCPcpMivc64U=)
2: vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl (hash: R1Co3DE6ZmLD740Jd+nAHxcwEukmUw8wiTgqD/tEfes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 07:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:ef:0c:8c:f9:e9:1a:d5:b0:8b:bd:fe:d6:91:97:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be125cad7dd4c5f0201ee2a21deac387366981c4
Validity
Not Before: Aug 11 07:01:22 2025 GMT
Not After : Aug 12 07:01:22 2025 GMT
Subject: CN=c898e88fff6909a211b1a3b3acb714487bae2d0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:69:ed:fc:7a:8b:2f:3f:3f:29:08:30:39:95:
9e:3d:d6:6c:4a:44:0b:19:89:e0:5f:16:06:67:07:
9d:26:6c:dc:1c:f1:b1:04:80:c3:4d:99:8b:33:c2:
77:0a:fe:94:2b:58:63:97:40:df:ec:17:91:12:a5:
1a:5a:85:a4:64:e8:20:2a:3c:eb:2d:2f:11:4b:8f:
d6:ed:f5:1e:f2:de:ae:8b:b3:65:61:95:18:a3:ab:
23:3d:d7:94:1d:ce:77:6b:39:58:7e:16:e5:74:69:
a6:7e:72:81:d0:72:4a:63:a7:6c:50:7a:c1:6c:68:
a0:e5:b1:37:85:07:e4:f7:20:e2:1e:a4:60:e9:b9:
a3:6b:26:51:58:56:06:7b:fc:2d:5a:c6:1e:28:0d:
ab:52:6f:85:71:92:66:3f:e2:ec:27:13:df:6c:c7:
14:f8:a8:c4:a8:02:db:cb:a4:04:08:4f:7e:43:98:
a2:5f:fc:18:62:94:26:91:65:36:c5:5e:17:e7:78:
cb:5d:b3:99:aa:a0:0a:2b:81:10:97:b7:29:56:49:
cf:36:eb:a3:20:da:8c:a6:63:03:92:5c:6b:bb:b9:
e0:55:44:4b:aa:c7:e1:61:fa:13:93:36:18:05:e1:
b8:be:c4:35:51:bd:da:29:a0:64:75:0d:aa:69:0f:
4f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:98:E8:8F:FF:69:09:A2:11:B1:A3:B3:AC:B7:14:48:7B:AE:2D:0D
X509v3 Authority Key Identifier:
keyid:BE:12:5C:AD:7D:D4:C5:F0:20:1E:E2:A2:1D:EA:C3:87:36:69:81:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:9d:61:41:c1:bf:da:4f:40:16:2d:3a:cc:bb:4e:8d:2a:0d:
b8:72:e8:96:b5:9a:ce:69:57:e1:33:9f:28:fd:16:95:89:99:
3b:1f:b6:c3:a5:b4:93:b4:12:6a:63:1e:5b:2f:36:54:13:b8:
6c:87:49:69:4c:21:28:d5:89:70:0d:df:50:82:4e:8d:a7:0e:
7f:b2:3f:a7:3f:98:5b:2a:9c:2b:0b:f9:07:6e:9b:cb:f1:1a:
f5:5b:5f:2e:2b:b5:28:a1:36:da:1c:6b:84:c5:97:27:62:42:
8a:74:bb:38:66:ff:f6:94:33:96:e2:39:0e:b0:14:a7:42:0a:
8a:0e:33:9e:b3:f1:e4:94:2c:b1:1a:90:4f:a3:90:2e:63:89:
eb:ea:a8:e3:da:51:e3:83:b2:3e:8b:ab:5d:15:f9:94:8f:9c:
59:0a:4d:b8:48:a4:b1:49:56:c7:bc:79:2c:82:75:f0:f4:8f:
45:b8:06:b2:d5:06:47:32:21:1a:57:a2:52:fd:73:82:b9:51:
62:4c:4d:82:9a:f1:ab:80:71:53:c5:27:0b:7e:b1:a5:19:f0:
0c:9c:97:91:c7:b1:0c:be:5e:8b:62:bf:8c:ea:16:5c:c3:d5:
c6:40:50:38:14:ab:51:35:73:17:c3:59:7b:97:68:46:70:e2:
4c:a6:22:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 12:52:36 2025 by rpki-client