Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft
File: vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft (raw, json)
Hash identifier: KkFabB1T6EZd49awvYufItOCOZxdPsVXeqkRzA/tTI8=
Subject key identifier: 20:99:CA:91:FA:26:90:D1:B0:FF:C8:E8:99:0D:CC:E0:D5:AA:73:79
Authority key identifier: BE:A1:89:0C:30:5B:0F:2D:A4:20:B0:16:97:E3:BF:23:D4:85:AB:64
Certificate issuer: /CN=bea1890c305b0f2da420b01697e3bf23d485ab64
Certificate serial: 019873E3251A6F396E83500B306FAE16E93D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqGJDDBbDy2kILAWl-O_I9SFq2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft
Manifest number: 0E57
Signing time: Mon 04 Aug 2025 07:02:02 +0000
Manifest this update: Mon 04 Aug 2025 07:02:02 +0000
Manifest next update: Tue 05 Aug 2025 07:02:02 +0000
Files and hashes: 1: kwNFG0wAspm4fsxR2YrPKVGk1Ig.roa (hash: Mk2aoCm4frK824+nr9MmscS3ypVOVo2+1jHAmjQT/qI=)
2: vqGJDDBbDy2kILAWl-O_I9SFq2Q.crl (hash: 1q+qXWG56uMpN4jJzAcVpBtAwKuJ+l2bz6g6Ip5ZQao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/vqGJDDBbDy2kILAWl-O_I9SFq2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:25:1a:6f:39:6e:83:50:0b:30:6f:ae:16:e9:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea1890c305b0f2da420b01697e3bf23d485ab64
Validity
Not Before: Aug 4 07:02:02 2025 GMT
Not After : Aug 5 07:02:02 2025 GMT
Subject: CN=2099ca91fa2690d1b0ffc8e8990dcce0d5aa7379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a3:24:ab:d9:1b:60:6d:90:75:c4:5b:83:85:
2c:28:20:73:4f:8b:c7:1a:b7:63:45:45:65:ca:92:
15:7a:de:86:c1:c1:e5:c8:07:ce:90:fd:84:9a:ba:
9c:6d:f2:1d:b8:75:3b:32:ae:64:8e:e9:29:0d:18:
a0:a4:d0:f9:75:51:22:04:50:8f:69:b3:7e:a5:a7:
21:ec:26:b8:3c:dc:97:40:6f:4c:72:c0:5c:a9:2c:
bd:7a:52:e0:49:96:77:f6:de:6b:b9:1d:22:f7:ca:
87:ff:54:35:47:a5:2e:3e:d2:c6:d3:3b:b4:aa:dc:
9f:cf:6c:bd:e4:08:bc:75:17:8a:b8:dd:c5:5e:32:
60:54:9d:8e:14:1f:38:00:4a:49:be:c0:50:b1:ef:
fd:48:b3:fb:65:0c:fc:54:41:5b:b0:16:0c:f7:a2:
14:8e:fb:ac:e6:e2:99:c6:9d:c4:a4:64:68:2d:78:
2e:51:e9:74:ce:7d:23:4f:a2:47:7e:11:7a:0a:46:
1b:4f:2d:44:54:06:0f:b2:5c:c2:78:32:21:33:48:
04:ce:94:42:87:0c:27:99:34:cc:cf:b6:e9:f8:f1:
04:95:27:34:27:b4:55:bc:f5:49:d1:7f:be:1b:c2:
2d:c6:44:97:56:84:6f:dc:b7:1e:ba:4d:53:b0:51:
95:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:99:CA:91:FA:26:90:D1:B0:FF:C8:E8:99:0D:CC:E0:D5:AA:73:79
X509v3 Authority Key Identifier:
keyid:BE:A1:89:0C:30:5B:0F:2D:A4:20:B0:16:97:E3:BF:23:D4:85:AB:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqGJDDBbDy2kILAWl-O_I9SFq2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:89:2c:30:5b:5f:62:d6:75:9e:9d:b2:59:22:ef:bb:c3:44:
6b:72:d5:52:d5:2f:69:ec:cc:76:16:c4:a0:06:9a:96:c8:94:
e4:80:9a:f0:68:d2:16:8e:9b:34:26:37:67:83:b5:1b:6d:6c:
cc:5e:7c:b2:d2:7d:8a:ed:da:f2:be:ac:34:e0:f0:c6:f2:22:
8b:3f:5c:bb:de:39:59:a0:2a:d2:1d:b0:79:fc:72:46:be:9d:
ff:ba:d2:f5:5e:cd:91:36:f1:24:c8:94:98:f9:05:a1:d5:37:
f0:ad:4c:1a:54:f6:88:e8:3c:5d:ca:06:4f:91:8d:b4:37:fb:
81:1d:4f:56:30:58:0b:51:13:48:b2:dd:c3:c1:0d:c5:6c:1e:
ec:1a:aa:56:f6:9f:2d:a1:8e:69:7a:8c:7b:e6:d7:3a:63:47:
46:ab:95:e1:97:d2:6a:c2:4c:0c:fe:bf:de:62:3a:a8:35:24:
b3:cc:48:5d:82:c7:84:c7:07:01:f8:6e:0e:ed:f2:1b:20:9a:
d1:c8:c7:e2:f8:e9:65:92:2b:72:d5:13:86:e6:fa:54:f1:8d:
fb:e5:f8:0a:76:ed:50:3c:ea:71:c6:8a:be:44:4d:1c:d0:cc:
88:cf:0c:7d:2f:4f:d4:8e:7f:38:72:87:89:34:3c:dc:50:80:
f3:db:0a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:59:11 2025 by rpki-client