Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.mft
File: VRNzP1CmpEqRS5-Pjr941_pOqaA.mft (raw, json)
Hash identifier: dRV7sXqP3w374oypxAzKOMleD0szdm2dFS2iXavAWNI=
Subject key identifier: 08:2C:24:99:C3:67:3B:EA:CD:31:4B:7F:E3:0D:84:87:01:85:E9:50
Authority key identifier: 55:13:73:3F:50:A6:A4:4A:91:4B:9F:8F:8E:BF:78:D7:FA:4E:A9:A0
Certificate issuer: /CN=5513733f50a6a44a914b9f8f8ebf78d7fa4ea9a0
Certificate serial: 01976929AFE50B11792F3EBF17A882F17F9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRNzP1CmpEqRS5-Pjr941_pOqaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.mft
Manifest number: 12B8
Signing time: Fri 13 Jun 2025 12:00:28 +0000
Manifest this update: Fri 13 Jun 2025 12:00:28 +0000
Manifest next update: Sat 14 Jun 2025 12:00:28 +0000
Files and hashes: 1: 0T5ioKjx83-tTr3Mt9le068JcTQ.roa (hash: W8RCmNZUMfFbxdN1LMLcVYrh7MEw9Ur5XcdnTWf1Txo=)
2: VRNzP1CmpEqRS5-Pjr941_pOqaA.crl (hash: wiLdqnUPVNdElUhocTJRUuJT4xEZ4YMncNqi+Q7ShpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VRNzP1CmpEqRS5-Pjr941_pOqaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:af:e5:0b:11:79:2f:3e:bf:17:a8:82:f1:7f:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5513733f50a6a44a914b9f8f8ebf78d7fa4ea9a0
Validity
Not Before: Jun 13 12:00:28 2025 GMT
Not After : Jun 14 12:00:28 2025 GMT
Subject: CN=082c2499c3673beacd314b7fe30d84870185e950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:45:53:ee:6f:2d:98:b2:d7:6e:50:a6:34:73:
3e:78:bb:1c:a9:a0:9c:75:d6:d4:01:27:3a:d5:86:
a0:5f:77:3f:01:ae:5a:b2:90:b9:66:52:5d:5d:b6:
07:c8:62:9d:21:98:76:f0:ad:43:45:2b:84:6e:9b:
0d:4c:87:8d:3b:56:50:9d:97:75:ad:14:c8:91:23:
54:c5:11:56:de:89:53:df:1b:9b:ad:a7:ef:3f:c7:
4f:10:91:b4:4e:e4:30:b9:90:71:1a:45:18:69:83:
fa:92:83:86:10:eb:da:78:24:9a:17:de:72:4f:46:
93:f4:1b:68:ce:b7:22:61:db:95:66:a0:1d:3b:2e:
d8:7a:16:e3:30:df:db:fd:1f:21:7b:f4:94:72:f4:
60:19:83:8e:b8:8f:dd:26:a4:01:63:2b:25:91:7d:
31:dd:19:be:5c:14:5b:07:ce:13:ce:e7:88:da:2c:
3a:4f:78:f1:d9:89:80:51:92:8e:e2:73:d4:d0:f0:
8f:34:05:84:69:67:5d:c3:f2:33:5b:c3:65:2c:f3:
bf:d0:96:12:74:ba:eb:f7:d5:75:e9:db:83:b2:e2:
2e:73:b2:cc:16:bd:3b:b1:d5:0c:3e:1c:93:2d:c0:
cf:d8:97:36:93:50:46:a8:f7:1c:13:bb:74:bb:7f:
74:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:2C:24:99:C3:67:3B:EA:CD:31:4B:7F:E3:0D:84:87:01:85:E9:50
X509v3 Authority Key Identifier:
keyid:55:13:73:3F:50:A6:A4:4A:91:4B:9F:8F:8E:BF:78:D7:FA:4E:A9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRNzP1CmpEqRS5-Pjr941_pOqaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:87:ae:4e:82:14:6d:e4:59:97:ed:23:b7:db:14:81:bf:37:
69:e6:f5:ab:0b:b8:ca:d6:a5:fc:45:21:d6:53:a1:97:d0:d8:
55:cb:6c:4c:1f:6a:8e:6a:02:25:25:c0:f5:13:74:e2:49:f1:
57:13:76:dd:11:15:41:4c:15:ef:24:d8:e8:0a:b6:e0:00:5a:
97:a8:da:76:a5:4f:10:be:c7:ce:46:8a:5d:29:30:26:80:1b:
8e:e3:bd:24:f4:10:d8:dd:58:58:7c:2e:95:70:d6:7f:5a:7f:
5e:e6:d3:54:81:70:95:8e:17:85:55:51:6a:20:a4:13:ab:e7:
8f:2f:1e:08:42:81:8e:5a:9a:2c:ea:df:ec:06:5e:49:96:f4:
61:2c:98:8f:12:44:5e:19:d6:51:08:4b:97:71:66:3c:f9:f8:
9a:2d:f6:6d:98:7c:f6:4c:da:ad:b3:8a:8d:0d:fb:9d:89:01:
94:74:27:d0:60:08:c2:d7:59:b3:67:af:9f:aa:73:34:bf:42:
67:4d:fb:73:08:76:18:cd:d6:65:1e:39:d2:96:35:27:3d:d1:
c6:4c:d9:ce:22:5f:09:1e:67:76:83:9f:e3:cc:94:44:37:9e:
27:32:65:ca:74:3d:f6:f2:23:b1:3f:46:ec:fc:e4:64:39:8b:
0d:c7:c4:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:22:34 2025 by rpki-client