Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft
File: VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft (raw, json)
Hash identifier: E+UN3X/yTgheWSb7cv+kFRVCrRo5rhjfm185WOYFrFM=
Subject key identifier: 81:4E:70:F9:FC:41:75:59:D2:F1:78:C9:95:E5:24:58:C8:F3:1A:71
Authority key identifier: 55:98:AE:5D:5F:12:82:5A:84:E6:C4:01:C0:13:CA:5E:5D:CD:9E:C9
Certificate issuer: /CN=5598ae5d5f12825a84e6c401c013ca5e5dcd9ec9
Certificate serial: 01988A333ED397F355EAC802A934A77E2305
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft
Manifest number: 11A2
Signing time: Fri 08 Aug 2025 15:01:10 +0000
Manifest this update: Fri 08 Aug 2025 15:01:10 +0000
Manifest next update: Sat 09 Aug 2025 15:01:10 +0000
Files and hashes: 1: OWdgTZjswlIH3v8ekYIkiNAvWUY.roa (hash: MSHfYYjKBHxQgm8RGtw1Edy9L8nTXsEr57VvXXxuBE0=)
2: QSe63n0wV0G34lbZHXnZK7pmzzE.roa (hash: 7B+EEFEFOgiMUXqvkdrddtCieIKLinndsMD4DdmL4nc=)
3: VZiuXV8SglqE5sQBwBPKXl3Nnsk.crl (hash: WC26G5ZvUXKhuxLKl+yo2q96BH1ypQzmpl0SQdzDQms=)
4: ugFuorQM8DhT-wz-0vA4nqmcQwE.roa (hash: b33Tld52Z6orIx0s3ge2TfpSdeJbJcXrLaJg2ZbQtPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:33:3e:d3:97:f3:55:ea:c8:02:a9:34:a7:7e:23:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5598ae5d5f12825a84e6c401c013ca5e5dcd9ec9
Validity
Not Before: Aug 8 15:01:10 2025 GMT
Not After : Aug 9 15:01:10 2025 GMT
Subject: CN=814e70f9fc417559d2f178c995e52458c8f31a71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c3:be:ad:c0:f4:98:49:3a:9d:ce:72:52:6c:
3a:24:b6:44:03:71:5f:75:70:6b:d9:26:a3:ec:c3:
37:01:fa:f1:9c:39:3c:f7:60:76:61:a2:e3:f9:26:
9d:21:8f:69:9a:51:98:e1:bd:ac:3d:7a:bc:c8:21:
11:8b:1f:60:7b:06:bf:5b:94:30:8f:0e:63:75:a0:
7b:60:d1:ef:6d:1a:26:24:3a:9c:e6:9c:70:60:72:
81:cd:7b:98:23:bb:f1:cd:12:a2:70:86:5b:9a:20:
7b:bf:64:e8:dd:be:d8:64:72:5b:23:9d:d8:36:00:
b5:d4:c6:b2:7a:bc:8f:d3:6c:f7:db:26:bf:3a:c4:
6f:53:7b:0b:eb:86:63:74:e2:fe:1f:20:2d:b2:9f:
ef:b0:55:cd:f0:09:6e:1c:0e:38:4a:fb:35:68:cc:
f8:08:18:95:a1:20:55:e4:15:08:d9:73:47:23:61:
e9:1f:f3:e4:e6:f2:db:c8:32:d9:a0:d2:53:e3:02:
09:97:cf:f7:b6:54:66:8e:fb:a2:ee:f2:57:44:5d:
02:b8:26:86:41:c9:74:e8:c9:3e:aa:67:b0:3f:ec:
22:36:1e:27:e7:f2:ec:90:a2:68:8d:07:b5:21:e7:
ac:86:74:f9:a2:df:7b:59:bc:c0:07:a5:9f:b2:5f:
7c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:4E:70:F9:FC:41:75:59:D2:F1:78:C9:95:E5:24:58:C8:F3:1A:71
X509v3 Authority Key Identifier:
keyid:55:98:AE:5D:5F:12:82:5A:84:E6:C4:01:C0:13:CA:5E:5D:CD:9E:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:1a:83:3e:5a:28:fb:b8:a2:74:92:62:60:9f:2e:31:67:23:
5a:43:f0:b1:74:d7:7b:8a:8b:04:55:f4:95:86:4a:ee:35:a2:
25:1e:ce:df:86:8a:b8:f1:f2:9a:79:3c:f0:be:80:bd:dd:5e:
ce:ac:aa:3c:50:31:04:b1:15:ae:94:3c:09:eb:8c:f6:b5:e0:
88:33:2e:02:17:2e:fb:9a:92:2e:cd:41:70:01:db:ad:89:9a:
02:df:be:a8:49:f9:f8:55:9f:32:1e:4b:ec:1c:27:68:22:93:
aa:0e:a1:a4:e2:1f:6a:cf:e4:fa:87:d1:2d:93:34:35:87:d7:
72:12:5f:ba:92:12:5f:c7:7b:83:ad:aa:c4:b4:ee:75:14:a6:
25:39:e6:01:ab:4b:ec:75:97:ba:9a:2d:71:44:52:fb:42:38:
0e:aa:d7:0d:cc:1f:e6:9e:f8:d8:55:8c:ac:1b:f9:93:8e:90:
3d:fc:f8:95:4d:78:a7:a5:35:84:81:0f:f5:41:cf:cc:39:ac:
c4:da:02:4a:2e:c0:1a:cf:d7:8c:4c:b3:21:35:93:20:f7:ea:
00:11:dc:26:e8:08:26:e7:46:89:03:a3:87:15:8a:da:68:94:
51:7b:11:51:21:25:23:9c:1d:fe:66:d1:24:14:f1:80:6c:ec:
c3:b2:f0:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:23:19 2025 by rpki-client