Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft
File: VRGWi3l6ylfWEYAak6hcuGTkPnI.mft (raw, json)
Hash identifier: FktZ/H/2bQ/gfmp9MEzvuw7e/jFhtEbAmnAgd3NvA7g=
Subject key identifier: 38:AB:D3:87:2F:11:09:3B:7F:B4:52:18:C5:DB:D8:19:3F:1B:C7:6A
Authority key identifier: 55:11:96:8B:79:7A:CA:57:D6:11:80:1A:93:A8:5C:B8:64:E4:3E:72
Certificate issuer: /CN=5511968b797aca57d611801a93a85cb864e43e72
Certificate serial: 01987A8929382C655AAAA50ACB27130928E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRGWi3l6ylfWEYAak6hcuGTkPnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft
Manifest number: 0EF1
Signing time: Tue 05 Aug 2025 14:01:05 +0000
Manifest this update: Tue 05 Aug 2025 14:01:05 +0000
Manifest next update: Wed 06 Aug 2025 14:01:05 +0000
Files and hashes: 1: FkEK24gMOi9MxsRr642Srdl8lHQ.roa (hash: DtYbP2drcIzf0g2tEEsCLYpdXSaGIQ0MZgdI48xnP+Q=)
2: VRGWi3l6ylfWEYAak6hcuGTkPnI.crl (hash: q7kgoGQbf0fkD5Y2c48fYW4Tt8zZJSVVBj3qJi5+oYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/VRGWi3l6ylfWEYAak6hcuGTkPnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:89:29:38:2c:65:5a:aa:a5:0a:cb:27:13:09:28:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5511968b797aca57d611801a93a85cb864e43e72
Validity
Not Before: Aug 5 14:01:05 2025 GMT
Not After : Aug 6 14:01:05 2025 GMT
Subject: CN=38abd3872f11093b7fb45218c5dbd8193f1bc76a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:95:09:ac:11:bd:92:e7:97:11:ae:1f:a5:0b:
78:14:d5:bd:25:a3:02:a7:ef:1d:b0:20:53:c9:3b:
b3:59:27:4f:8f:99:39:17:b9:86:e0:2a:64:1a:5f:
21:9b:28:dc:39:7d:75:2d:38:09:4c:6d:be:dc:71:
f9:5e:21:9e:cf:8d:3a:c3:56:78:09:17:6c:c1:bf:
f9:d3:92:5c:92:e6:45:f0:47:ef:b1:d4:57:d0:83:
0e:c5:34:08:44:d4:4c:55:49:3e:73:94:34:55:d9:
61:10:6c:59:a3:46:b2:ad:61:08:a7:35:05:1b:90:
d2:d0:e1:eb:6c:6e:29:ed:93:c2:d3:72:68:aa:25:
7a:a6:30:2e:ad:19:c8:6d:dc:87:3b:01:89:fc:54:
2f:3f:f2:34:88:0a:51:21:7e:bb:0c:b9:9e:65:e0:
86:c0:f7:6a:a4:a8:23:e9:59:e4:98:2c:51:2e:d3:
a0:56:df:c2:3c:41:12:76:4c:d1:d0:3b:e9:48:92:
55:f8:8d:05:fa:55:34:91:37:6c:e1:67:34:fd:f7:
f7:fe:3f:d7:41:1d:14:69:3d:18:f4:58:e6:68:78:
b9:ff:2d:1b:df:85:8d:97:6d:c3:97:ac:32:42:02:
3d:e1:a4:1e:8f:d7:01:6f:06:80:b7:a2:40:d0:a7:
21:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:AB:D3:87:2F:11:09:3B:7F:B4:52:18:C5:DB:D8:19:3F:1B:C7:6A
X509v3 Authority Key Identifier:
keyid:55:11:96:8B:79:7A:CA:57:D6:11:80:1A:93:A8:5C:B8:64:E4:3E:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRGWi3l6ylfWEYAak6hcuGTkPnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:6c:f5:16:2c:2b:2d:27:d6:7a:e1:29:a0:ea:fb:43:2e:a0:
6d:56:68:fd:f9:29:f2:01:f9:10:96:86:95:3c:2d:fd:56:2e:
82:9b:a3:f6:3e:a7:4e:25:96:36:51:d3:98:75:d7:a3:98:91:
26:b0:8c:cf:5e:da:5b:91:03:1e:c4:57:bb:ee:04:da:e1:1c:
e9:f0:66:1a:a5:9e:11:33:72:33:36:45:d2:34:f7:79:ab:8d:
28:b7:ac:24:2a:f2:36:19:2e:54:c7:98:6b:b8:63:96:62:e2:
c7:0e:90:32:b5:47:cb:ac:4f:8c:3d:b1:e0:a0:a3:bc:63:ae:
b1:69:b4:1c:43:7a:48:c0:69:53:66:c4:6c:b3:8e:39:23:38:
d1:f1:98:fc:73:aa:b4:8c:2b:79:85:ed:9e:51:8f:92:b6:aa:
1a:36:52:9c:d4:03:f9:74:6c:9a:97:a6:3e:f5:15:02:99:d8:
da:fc:2d:27:cf:56:9b:c1:cb:08:49:af:9e:a2:f5:94:4e:6b:
1c:e3:07:51:15:2a:81:e2:7d:a0:c9:d6:6f:15:71:5c:45:a4:
8c:db:dc:9b:97:3d:8a:60:e2:93:f0:ce:b4:fa:3a:95:41:db:
32:4f:09:72:92:43:1b:72:ff:bf:51:7f:77:78:9b:64:e8:7a:
80:10:8e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 19:58:43 2025 by rpki-client