Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/25a747-8426-430a-9e30-45b3443a76f9/1/VWyanGGYCpC10MUfhtfLrJ_xQto.mft
File: VWyanGGYCpC10MUfhtfLrJ_xQto.mft (raw, json)
Hash identifier: lt51VH0Il3mkiPPpXT6HlIpDUOhCARWkD+gck4jWHCI=
Subject key identifier: D5:BE:9F:7F:EF:3D:C8:1A:9D:71:91:59:24:0A:76:DD:F4:90:17:A8
Authority key identifier: 55:6C:9A:9C:61:98:0A:90:B5:D0:C5:1F:86:D7:CB:AC:9F:F1:42:DA
Certificate issuer: /CN=556c9a9c61980a90b5d0c51f86d7cbac9ff142da
Certificate serial: 019893A409B92E0CE4976939B07B3EBC904E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VWyanGGYCpC10MUfhtfLrJ_xQto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/25a747-8426-430a-9e30-45b3443a76f9/1/VWyanGGYCpC10MUfhtfLrJ_xQto.mft
Manifest number: 1625
Signing time: Sun 10 Aug 2025 11:00:57 +0000
Manifest this update: Sun 10 Aug 2025 11:00:57 +0000
Manifest next update: Mon 11 Aug 2025 11:00:57 +0000
Files and hashes: 1: VWyanGGYCpC10MUfhtfLrJ_xQto.crl (hash: 6ZhL6gHJudR1YRhdQD6M+x7Du/8EaAaRd9dOrbnyTy0=)
2: haz-HdaagkevUDJWOKHcKbMpfs4.roa (hash: 4MYVAihmuy2VBnQslitsGPSQAlGwL1bJXLz/oBhLSUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/25a747-8426-430a-9e30-45b3443a76f9/1/VWyanGGYCpC10MUfhtfLrJ_xQto.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/25a747-8426-430a-9e30-45b3443a76f9/1/VWyanGGYCpC10MUfhtfLrJ_xQto.mft
rsync://rpki.ripe.net/repository/DEFAULT/VWyanGGYCpC10MUfhtfLrJ_xQto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:a4:09:b9:2e:0c:e4:97:69:39:b0:7b:3e:bc:90:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=556c9a9c61980a90b5d0c51f86d7cbac9ff142da
Validity
Not Before: Aug 10 11:00:57 2025 GMT
Not After : Aug 11 11:00:57 2025 GMT
Subject: CN=d5be9f7fef3dc81a9d719159240a76ddf49017a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:38:9c:df:be:7f:e0:53:ed:69:24:bc:a2:21:
0b:53:a6:d7:e5:e5:9c:51:bb:42:da:6f:97:25:d4:
91:12:3d:21:1c:af:53:70:8b:eb:52:40:f7:e6:69:
49:2d:e6:01:9c:5e:c3:71:ff:fb:35:38:91:16:95:
68:5a:5d:b8:0e:f1:e6:30:8f:7c:37:16:bb:0c:b8:
2b:46:d4:fd:a4:d3:84:bc:43:ad:7f:4a:ab:fa:f7:
17:ed:a1:94:b2:61:c2:55:8e:a1:da:e1:0f:3d:f5:
de:8a:33:d4:b6:2e:ba:3e:a3:34:73:8b:42:8f:0b:
f6:1a:6e:bc:27:b2:4e:30:a6:61:fe:ad:34:45:53:
10:fe:4a:06:a1:31:46:8c:e1:6d:e2:de:ac:2f:2a:
a7:39:72:1a:a9:28:4a:01:84:f1:5d:55:f4:33:ee:
28:3f:02:97:27:e1:65:a1:03:8f:63:73:fb:36:69:
ab:e7:3f:6d:17:36:55:a3:9b:c0:c3:fb:38:c0:dc:
04:d2:31:d6:64:55:91:82:7a:4c:52:2b:2b:9a:8a:
3c:de:7e:d3:d3:93:c7:59:6d:93:8e:e7:e9:93:88:
26:78:74:07:f7:dc:12:21:90:8d:42:3d:08:3c:fa:
c3:c8:b7:4e:bb:59:d9:98:c9:e0:c7:eb:23:e9:65:
55:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:BE:9F:7F:EF:3D:C8:1A:9D:71:91:59:24:0A:76:DD:F4:90:17:A8
X509v3 Authority Key Identifier:
keyid:55:6C:9A:9C:61:98:0A:90:B5:D0:C5:1F:86:D7:CB:AC:9F:F1:42:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VWyanGGYCpC10MUfhtfLrJ_xQto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/25a747-8426-430a-9e30-45b3443a76f9/1/VWyanGGYCpC10MUfhtfLrJ_xQto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/25a747-8426-430a-9e30-45b3443a76f9/1/VWyanGGYCpC10MUfhtfLrJ_xQto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:3a:01:4f:fe:83:f6:13:bf:9a:67:d2:2b:ad:f8:c5:a2:66:
dd:e4:97:a0:7c:d0:ad:d3:34:85:8b:47:d5:63:5e:c9:e5:94:
3d:d2:c6:13:fd:48:f5:02:80:ad:0d:ba:e2:1b:98:f0:ef:24:
79:4f:8d:4f:51:86:02:69:7b:a6:3e:70:9f:72:24:14:ed:67:
2e:d0:2d:60:80:a8:c7:47:5e:99:d1:79:b6:5e:cb:7a:49:d4:
f2:1f:85:ff:81:b1:f9:32:12:50:50:b6:06:2b:be:4e:e8:d0:
4f:15:3a:26:7a:2a:6f:cd:f0:80:6e:74:4e:dc:18:aa:a9:b2:
95:f4:e0:b2:35:be:c4:f4:65:a1:d4:66:14:da:f3:38:aa:61:
47:d1:57:bc:10:0b:52:dd:bb:10:a8:90:6d:6d:c5:62:9d:17:
89:41:08:26:95:9e:a7:89:88:fe:08:7a:85:9c:6d:48:f3:5a:
bf:2d:9f:c0:a1:7a:90:78:1e:6c:8c:27:e1:67:70:58:1b:39:
88:f9:f5:aa:c0:3c:6a:96:75:8c:80:08:08:6e:0b:d7:c3:a4:
19:7f:b4:60:49:94:32:26:b2:3f:cb:5e:c7:4a:8e:70:74:e1:
15:d2:4d:c1:80:13:99:99:26:2e:28:33:2d:59:31:dd:61:1f:
85:0c:48:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:46:42 2025 by rpki-client