Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.mft
File: vdQmL2QrG7C1Oyptd5jAiZ0eTUM.mft (raw, json)
Hash identifier: dASlb23l6Kdsf7yJ6Tpan7DYDyPQeNQVvkgNMf8eOgA=
Subject key identifier: 1A:71:C6:17:89:4F:2C:CA:8F:3A:BE:59:DD:B2:DC:C0:0B:61:D5:39
Authority key identifier: BD:D4:26:2F:64:2B:1B:B0:B5:3B:2A:6D:77:98:C0:89:9D:1E:4D:43
Certificate issuer: /CN=bdd4262f642b1bb0b53b2a6d7798c0899d1e4d43
Certificate serial: 01988957B37DCBEE916BA8FA48573F229E3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.mft
Manifest number: 0B86
Signing time: Fri 08 Aug 2025 11:01:22 +0000
Manifest this update: Fri 08 Aug 2025 11:01:22 +0000
Manifest next update: Sat 09 Aug 2025 11:01:22 +0000
Files and hashes: 1: 3Vc8GAv3OdpXw-IEwIeY1NxUP6c.roa (hash: qDWay94UtnkH+WvsjYkj9wPwpR3+5E60OgC2LXVgLK8=)
2: hj3e4V3BcXmmC3J4J-LR8jJvgpQ.roa (hash: ajCXRDGbAHENq7O0wMkVKgSnARDHbWRHh8qUlDNLW3k=)
3: o3kVjVR-Bk2kY6NJIMAGFLe8Jgw.roa (hash: RhEyDbo5nJOAevwisCtwUttff0SfpdFcDo7LzXQNDoo=)
4: vdQmL2QrG7C1Oyptd5jAiZ0eTUM.crl (hash: 1G0w/TqxvM/n0TvwSXaAsUtn5I595ELIxnS9w3ppqnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:57:b3:7d:cb:ee:91:6b:a8:fa:48:57:3f:22:9e:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdd4262f642b1bb0b53b2a6d7798c0899d1e4d43
Validity
Not Before: Aug 8 11:01:22 2025 GMT
Not After : Aug 9 11:01:22 2025 GMT
Subject: CN=1a71c617894f2cca8f3abe59ddb2dcc00b61d539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:78:df:7e:07:d2:41:5e:52:e2:38:95:b9:8b:
4c:97:7a:e2:05:59:aa:9c:d1:5c:c4:b1:92:0a:6c:
14:48:31:d9:60:96:b6:fd:c3:94:81:96:e8:80:65:
79:4f:b5:8c:66:a7:94:a0:b2:5a:5b:b7:96:16:67:
44:ef:16:05:32:41:4c:60:ba:21:a1:a3:70:b0:57:
2d:9d:8e:98:96:74:61:b9:c1:7d:a1:e7:32:aa:e7:
bd:51:d3:d2:49:9b:08:3d:15:b4:b6:ec:fe:2b:71:
e5:62:8e:ba:23:b6:31:d2:8f:44:82:70:7f:e1:c9:
e0:10:3f:47:b0:9a:81:df:ad:1c:d1:71:30:fd:f7:
8c:4a:33:6e:1d:fd:55:6f:e9:92:39:8e:1c:b6:d5:
3b:52:86:ae:87:f9:54:21:b0:47:15:d5:43:02:ae:
6f:3d:17:1f:d6:9a:e7:72:39:b0:9d:49:8c:ea:73:
13:cb:db:11:4b:03:69:01:2f:9b:ff:75:9e:c7:d3:
87:2f:c1:b9:2a:7e:6e:45:98:24:14:38:96:e3:59:
17:76:f7:2c:b4:89:aa:0d:10:52:87:1b:99:09:74:
28:9b:c1:49:2b:54:7d:0a:8a:5c:89:8d:7a:ce:56:
16:03:2f:15:57:c1:7d:43:ff:b5:77:9f:64:b3:c2:
28:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:71:C6:17:89:4F:2C:CA:8F:3A:BE:59:DD:B2:DC:C0:0B:61:D5:39
X509v3 Authority Key Identifier:
keyid:BD:D4:26:2F:64:2B:1B:B0:B5:3B:2A:6D:77:98:C0:89:9D:1E:4D:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:2f:08:9b:ca:b8:f7:8b:ce:f2:7d:b1:38:aa:bf:69:86:ff:
6f:a5:e2:3e:bd:56:41:30:99:7e:f1:b2:ed:b6:a6:66:1e:c7:
62:d4:76:29:8e:45:45:5a:41:d5:77:76:f6:b6:70:b5:da:62:
9e:1d:ab:40:4e:c9:54:80:5f:30:cf:75:ee:d2:82:0e:76:bf:
7a:b7:bd:8a:c6:e0:da:5c:6e:f9:06:a5:84:11:e4:8f:f6:79:
9c:53:5a:9d:30:2a:f2:3d:fb:51:b1:32:19:66:d4:a0:9d:ec:
22:4d:83:cf:42:9c:21:6e:e3:76:ac:1d:ed:db:97:d8:f1:e8:
61:33:de:43:f1:e5:f4:97:4d:3a:92:7a:0f:13:f3:59:88:f2:
ee:67:fd:3b:83:72:5b:ea:3a:36:37:b6:8e:1d:dd:10:e4:e6:
66:16:8e:79:ff:28:3d:f4:94:a2:d3:03:51:28:3d:d3:58:01:
3d:74:48:16:a7:55:62:6a:d4:1c:aa:ec:e7:6d:7b:1a:a5:11:
d3:12:0f:76:eb:a3:f2:6a:5b:64:45:7b:5e:7c:db:1e:bc:27:
16:4f:16:4c:e6:16:3c:71:65:3c:0b:56:2b:95:95:7e:a5:58:
c4:41:99:31:57:79:e0:c9:35:78:f5:8a:49:46:d7:be:21:96:
d6:21:a8:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 21:02:48 2025 by rpki-client