Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/dd3dd1-09b5-4aa2-aec0-9fb1ce4d720b/1/VFhKIZ9vUGbYSO0quWTaiWbUCio.mft
File: VFhKIZ9vUGbYSO0quWTaiWbUCio.mft (raw, json)
Hash identifier: jpHbJ/QuGB0NFUVURx/HjxxqrxWC2wyYEAu/PofGPU8=
Subject key identifier: C2:BA:8A:1F:F5:35:79:9A:F7:E2:4F:5A:22:3B:10:D9:23:BF:89:52
Authority key identifier: 54:58:4A:21:9F:6F:50:66:D8:48:ED:2A:B9:64:DA:89:66:D4:0A:2A
Certificate issuer: /CN=54584a219f6f5066d848ed2ab964da8966d40a2a
Certificate serial: 0198808B0DFD44DD6F85B16C3AF592FE6ACD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VFhKIZ9vUGbYSO0quWTaiWbUCio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/dd3dd1-09b5-4aa2-aec0-9fb1ce4d720b/1/VFhKIZ9vUGbYSO0quWTaiWbUCio.mft
Manifest number: 1621
Signing time: Wed 06 Aug 2025 18:00:53 +0000
Manifest this update: Wed 06 Aug 2025 18:00:53 +0000
Manifest next update: Thu 07 Aug 2025 18:00:53 +0000
Files and hashes: 1: VFhKIZ9vUGbYSO0quWTaiWbUCio.crl (hash: mZFbIiZZ2ivMTd+iYvKuOgvyf/tIQdhNkzYs0ssYrUQ=)
2: yO-xzrVzP9w-99d-1MgI3akuEEw.roa (hash: /wfJmKbrJk5HLRMl66b8UyeroQ01b/DROieeTJUHsw8=)
3: ykuZpqMlHSUIWtYa1mPsmyPe9Ho.roa (hash: yZcmu9TrDVEdaIS3LL1L046LUfG1VEvG/7HySIUseIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/dd3dd1-09b5-4aa2-aec0-9fb1ce4d720b/1/VFhKIZ9vUGbYSO0quWTaiWbUCio.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/dd3dd1-09b5-4aa2-aec0-9fb1ce4d720b/1/VFhKIZ9vUGbYSO0quWTaiWbUCio.mft
rsync://rpki.ripe.net/repository/DEFAULT/VFhKIZ9vUGbYSO0quWTaiWbUCio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 18:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:8b:0d:fd:44:dd:6f:85:b1:6c:3a:f5:92:fe:6a:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54584a219f6f5066d848ed2ab964da8966d40a2a
Validity
Not Before: Aug 6 18:00:53 2025 GMT
Not After : Aug 7 18:00:53 2025 GMT
Subject: CN=c2ba8a1ff535799af7e24f5a223b10d923bf8952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:12:cb:4a:79:4e:cd:c0:e8:64:40:dc:38:2c:
24:82:ca:ab:f9:33:7b:0d:39:4c:ea:00:e6:94:02:
19:32:99:25:60:07:b4:71:1f:0e:de:f5:2a:4c:87:
5a:44:4a:b1:23:ff:b4:f1:11:81:3a:51:43:9e:cd:
32:c3:74:7d:a3:5a:c9:84:a3:4d:66:20:fb:f6:99:
3b:d2:fe:3d:de:0b:56:d2:0c:b0:40:2c:8f:d7:6f:
c9:67:06:80:7e:ea:d0:63:93:69:5d:f8:43:87:1b:
37:55:92:c0:79:69:bd:49:e4:7d:0d:ca:aa:ba:8b:
cd:94:c9:f0:1b:5b:9e:c5:a2:3b:16:c6:3d:04:b2:
94:b0:01:48:c9:2b:fe:40:d8:a8:32:03:e0:aa:85:
f9:74:23:31:d8:d3:5e:74:43:45:12:87:5b:0f:38:
41:af:86:29:7a:a8:ef:99:06:b9:b3:3e:4c:61:a3:
af:f2:ad:41:b0:f7:fa:00:32:01:56:e8:1d:ff:1e:
6c:c7:60:2a:b9:65:ba:22:be:4a:28:60:54:6f:9e:
a3:ab:b3:76:14:87:67:94:dc:53:b6:a1:74:70:6a:
2d:76:3a:9b:06:42:84:9e:b2:e2:49:ac:98:32:77:
a5:76:68:d6:3f:f7:e0:c5:69:db:88:7d:80:9c:35:
57:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:BA:8A:1F:F5:35:79:9A:F7:E2:4F:5A:22:3B:10:D9:23:BF:89:52
X509v3 Authority Key Identifier:
keyid:54:58:4A:21:9F:6F:50:66:D8:48:ED:2A:B9:64:DA:89:66:D4:0A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VFhKIZ9vUGbYSO0quWTaiWbUCio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/dd3dd1-09b5-4aa2-aec0-9fb1ce4d720b/1/VFhKIZ9vUGbYSO0quWTaiWbUCio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/dd3dd1-09b5-4aa2-aec0-9fb1ce4d720b/1/VFhKIZ9vUGbYSO0quWTaiWbUCio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:26:84:ee:f3:7c:f6:df:00:28:57:3e:db:62:6d:22:ae:fc:
37:19:83:52:df:11:fb:8b:f5:10:3c:31:92:d1:7a:52:3d:3e:
ef:29:17:e2:e0:b9:a2:61:58:b6:0f:40:88:2f:80:a6:38:95:
63:dd:6f:e2:ea:fc:0b:6b:0f:e4:84:1c:39:f2:69:e8:cf:57:
3d:5b:7f:c2:d2:4d:14:3c:07:86:7d:df:e0:fc:34:ef:15:42:
6a:b3:fe:3e:70:21:e6:cd:b4:75:16:b3:2d:c6:3d:9d:26:5f:
b8:f2:e7:12:5e:9d:d7:00:c8:40:cc:7e:d1:69:c7:f0:49:f3:
08:03:15:4a:6e:c7:4e:d0:a7:45:52:f8:4e:84:d0:71:4b:00:
23:93:1c:aa:7b:55:10:f2:1b:62:6d:4d:f7:b5:ea:fe:f3:30:
12:fe:da:35:10:99:f0:b0:d0:44:f5:3c:31:55:f2:12:5e:93:
80:c1:75:3a:2f:a6:6b:f8:7c:94:85:44:c8:33:d4:84:13:2e:
c0:e8:3a:5b:d9:7a:12:77:a0:64:cb:dd:02:74:d3:3e:db:5f:
b9:06:50:e2:3e:42:ac:6e:df:0f:d2:4a:04:06:34:77:52:04:
42:0f:e3:a4:b2:06:56:74:0a:33:d8:d6:e8:4a:18:00:1a:de:
5b:6d:f2:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:03:21 2025 by rpki-client