Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft
File: VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft (raw, json)
Hash identifier: jSeX3cqUV262454y/e16N93hItr2pavFyzojc14Qnxc=
Subject key identifier: DF:C4:D4:98:99:F5:DC:13:50:59:F9:07:B5:AE:C3:10:D2:43:78:ED
Authority key identifier: 55:24:23:ED:90:50:00:F6:9A:D9:3E:EF:C6:66:BB:9B:1A:DD:CB:37
Certificate issuer: /CN=552423ed905000f69ad93eefc666bb9b1addcb37
Certificate serial: 019874500D1FCFBC974A876BF539BD24F699
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSQj7ZBQAPaa2T7vxma7mxrdyzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft
Manifest number: 161A
Signing time: Mon 04 Aug 2025 09:00:59 +0000
Manifest this update: Mon 04 Aug 2025 09:00:59 +0000
Manifest next update: Tue 05 Aug 2025 09:00:59 +0000
Files and hashes: 1: 2mQ_q8-dGNGRe3nqpXkavXNspDg.roa (hash: /3YCHcej9bstt2T6B00QHN8/IPSuEaJEhcwHBYjcdtw=)
2: 5SSOCLgHzcxdzYdGNpYRPqovl-A.roa (hash: PUdiBPSqRZwnkbR0oFATrv5zTfcNr+UqMdxjxEau1ew=)
3: VSQj7ZBQAPaa2T7vxma7mxrdyzc.crl (hash: 05yzn+RGlzaLIK9G72PmgOjVsoIeTtLHr5WUxF0LSB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VSQj7ZBQAPaa2T7vxma7mxrdyzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:0d:1f:cf:bc:97:4a:87:6b:f5:39:bd:24:f6:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552423ed905000f69ad93eefc666bb9b1addcb37
Validity
Not Before: Aug 4 09:00:59 2025 GMT
Not After : Aug 5 09:00:59 2025 GMT
Subject: CN=dfc4d49899f5dc135059f907b5aec310d24378ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:dc:5b:c8:f0:ee:1e:d0:18:bf:36:57:d1:f8:
92:cb:c3:f5:f4:c0:16:04:b1:1c:a2:b1:43:74:d2:
e6:45:bd:af:c7:da:32:65:e2:f7:ae:67:63:a6:69:
d8:77:f8:57:8c:74:26:c9:85:75:e7:61:bb:e5:80:
6e:02:1e:e5:0c:25:dc:71:83:2b:71:32:f2:b5:85:
0d:d2:d6:55:5d:17:7f:88:23:9b:db:32:29:68:88:
b0:f7:1d:f2:4e:eb:81:08:24:d1:ca:ec:ac:c3:ab:
dc:d4:ff:30:6b:50:8e:74:7b:99:f6:0b:8a:c5:96:
10:84:c0:d3:f2:83:eb:09:1b:be:82:c5:70:4d:5c:
e1:24:b5:76:29:98:3a:64:4d:67:6b:05:08:ec:57:
08:dd:dd:e2:42:b7:74:d4:dd:4a:7d:03:af:a9:50:
37:c0:26:88:c7:fe:49:6b:81:ef:da:1d:85:8c:fd:
3e:d8:8e:2f:83:bc:23:12:aa:91:bf:0d:25:5c:06:
af:9b:9a:71:14:8e:49:dd:e7:4c:db:75:87:0a:10:
5c:3e:34:f2:bf:44:45:21:2a:99:1b:29:26:f0:16:
c2:e3:10:86:f9:48:18:0a:6b:df:a4:98:9f:3e:cb:
7a:ca:34:fb:45:e0:bf:a7:0a:1b:c3:c6:0d:6c:24:
9c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C4:D4:98:99:F5:DC:13:50:59:F9:07:B5:AE:C3:10:D2:43:78:ED
X509v3 Authority Key Identifier:
keyid:55:24:23:ED:90:50:00:F6:9A:D9:3E:EF:C6:66:BB:9B:1A:DD:CB:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSQj7ZBQAPaa2T7vxma7mxrdyzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:29:2e:d7:0d:09:e3:fb:8e:17:83:62:26:d0:b9:19:55:07:
52:cb:6f:46:b5:88:83:1d:67:77:4c:51:03:d9:71:e4:de:f7:
63:01:c5:32:9a:50:f3:3a:e4:6b:e8:6b:25:c6:cf:4f:a9:0c:
67:1a:3a:8b:7f:90:24:cc:1d:95:00:41:c0:70:64:7b:f8:5b:
14:4b:94:07:1b:fb:e5:d8:55:1d:b0:52:a8:14:33:17:f0:11:
fa:d2:32:ed:ed:3f:dc:eb:d2:c1:12:66:02:81:41:24:bd:91:
4b:15:01:8d:4f:05:62:e4:64:39:cf:aa:2c:3c:55:d2:26:30:
95:9e:a4:f0:54:92:a8:d3:2d:a6:51:23:bf:56:8e:72:a9:e0:
a0:93:53:0a:f8:df:8a:dd:87:3e:b6:57:ec:42:45:f2:b4:b4:
d5:11:8d:dc:d6:58:12:d6:9b:e8:25:89:37:53:38:2a:d5:56:
bd:a5:0c:86:57:8b:3d:8e:c6:5c:4d:2a:7b:b8:b4:3a:93:7b:
7a:ff:99:ae:00:37:94:f6:8c:78:e3:f7:0c:d5:f9:9a:a5:09:
cc:20:3a:e1:37:98:57:2b:84:86:e5:14:b5:8b:d5:e3:fa:25:
8b:30:8d:83:f8:7a:89:3a:1c:ee:79:b1:21:21:6e:76:5e:96:
ce:84:2c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:59:43 2025 by rpki-client