Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.mft
File: vqse58Ta0p0SfVZdG5N5RlwoiTc.mft (raw, json)
Hash identifier: OQGem6RvIVQu17pTK+//c774H4nRE9nNRwZjhRQjlJ8=
Subject key identifier: 30:C6:AF:7A:06:B9:D8:94:41:47:FF:75:4A:96:AD:FE:E5:A5:F8:37
Authority key identifier: BE:AB:1E:E7:C4:DA:D2:9D:12:7D:56:5D:1B:93:79:46:5C:28:89:37
Certificate issuer: /CN=beab1ee7c4dad29d127d565d1b9379465c288937
Certificate serial: 019893A3BCBE892F95B4AB056EA7C8416EEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqse58Ta0p0SfVZdG5N5RlwoiTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.mft
Manifest number: 1626
Signing time: Sun 10 Aug 2025 11:00:38 +0000
Manifest this update: Sun 10 Aug 2025 11:00:38 +0000
Manifest next update: Mon 11 Aug 2025 11:00:38 +0000
Files and hashes: 1: M6HhHlPpshdNz9eD4RpZo054CNI.roa (hash: Oj0e4uW1W20zki7xK3pquycyEqfpqSDKDUOaElxS5vM=)
2: vqse58Ta0p0SfVZdG5N5RlwoiTc.crl (hash: GTo/Zs5jrAQeklyI7OiNsA2ftX8bdWu1POB1snqsArU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vqse58Ta0p0SfVZdG5N5RlwoiTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 11:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:a3:bc:be:89:2f:95:b4:ab:05:6e:a7:c8:41:6e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beab1ee7c4dad29d127d565d1b9379465c288937
Validity
Not Before: Aug 10 11:00:38 2025 GMT
Not After : Aug 11 11:00:38 2025 GMT
Subject: CN=30c6af7a06b9d8944147ff754a96adfee5a5f837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3a:c8:c7:00:e3:b4:11:ce:25:1a:97:85:06:
48:7c:8d:02:61:d3:00:0c:48:c6:1d:b6:b3:9f:90:
56:3b:64:4a:66:61:f9:6f:3a:e1:10:e2:1f:71:7e:
89:47:74:94:a1:9e:60:56:ef:bc:30:e7:d2:34:c4:
bc:e0:8e:db:83:2b:a8:8d:d1:e8:a9:79:fa:db:a8:
da:f1:4b:f9:13:78:18:bb:9b:07:3d:14:57:0a:5c:
be:9b:f3:94:3f:2b:45:6d:5f:38:7b:4b:f9:a4:97:
8b:42:b9:e1:4d:31:f5:b9:d1:78:a8:ff:3e:ac:7f:
58:b8:1a:03:95:bd:a6:e0:51:2a:7b:be:ea:5d:f9:
ec:cd:95:01:ae:b2:83:6a:bb:f2:09:48:a7:ad:53:
56:4d:c5:0a:9e:18:40:71:65:76:df:c5:3f:09:7a:
1e:a4:1c:9c:b1:f5:40:01:16:41:b7:cc:5a:57:12:
ea:9f:49:d8:e7:9e:03:bd:65:27:c2:af:f7:70:f5:
d5:1b:78:14:ef:63:ed:6d:87:82:b4:88:ba:1a:a3:
0f:3c:be:d6:bc:d1:8a:a6:a1:01:b0:1f:8d:59:54:
88:0d:48:5a:64:7b:e5:97:85:4a:7e:19:d8:b5:be:
b1:d2:29:82:be:35:57:05:93:9c:ba:1b:ba:f1:e2:
6d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:C6:AF:7A:06:B9:D8:94:41:47:FF:75:4A:96:AD:FE:E5:A5:F8:37
X509v3 Authority Key Identifier:
keyid:BE:AB:1E:E7:C4:DA:D2:9D:12:7D:56:5D:1B:93:79:46:5C:28:89:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqse58Ta0p0SfVZdG5N5RlwoiTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:2e:34:0e:5d:f8:a9:78:4e:20:99:34:c1:79:10:fb:b2:ea:
b0:9a:92:de:79:4e:b1:4b:d2:f5:79:3c:37:5f:1b:44:9e:ea:
d2:17:7a:52:8f:4a:dc:4b:6d:c8:f0:90:b8:5d:73:37:65:02:
6f:08:dd:c9:13:b0:cb:8b:36:e8:8c:f3:98:93:1f:b0:3e:52:
13:1f:e7:04:8a:7f:ba:99:5b:1b:78:96:f4:32:f2:60:38:7a:
5b:ea:c9:cc:52:07:2d:aa:77:ce:58:5b:79:c8:77:6b:12:fc:
34:9b:63:b3:27:53:36:93:dc:10:0d:c7:44:6e:36:ca:69:af:
d4:25:75:d1:f1:e9:72:ce:28:c8:64:7b:47:c4:96:f8:b3:2f:
31:22:8b:15:fa:ee:c8:45:e4:2f:fb:67:ec:d7:be:13:10:5f:
b7:42:2e:88:04:09:d7:c7:6c:9c:d2:3e:48:92:b4:a1:4c:46:
9b:7b:32:29:24:32:0a:38:25:7d:e8:f0:e7:1a:e5:b6:f5:7c:
a2:4e:6d:d2:63:84:18:03:98:5d:7a:a8:3b:91:97:39:d3:bf:
f3:2d:d3:8b:13:73:6c:25:a2:3a:78:3e:2f:4f:a8:7b:08:c5:
29:5e:ad:4b:aa:bc:69:8c:83:ce:e1:47:d8:f0:4f:9c:c7:cb:
97:1b:e5:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:13:07 2025 by rpki-client