Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/VHkd3iyb3qNmzn7GxagAxdpjNFQ.mft
File: VHkd3iyb3qNmzn7GxagAxdpjNFQ.mft (raw, json)
Hash identifier: DQ0iJzxm2P6qOhVT4ZRm+eqTyxSblKNIH/DY00s1hFQ=
Subject key identifier: EA:1D:A8:2A:6B:4C:E3:36:EB:5D:14:C2:94:ED:D9:97:3B:42:03:DB
Authority key identifier: 54:79:1D:DE:2C:9B:DE:A3:66:CE:7E:C6:C5:A8:00:C5:DA:63:34:54
Certificate issuer: /CN=54791dde2c9bdea366ce7ec6c5a800c5da633454
Certificate serial: 01987CAE6BF166666F22883D44B3AE52DA6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHkd3iyb3qNmzn7GxagAxdpjNFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/VHkd3iyb3qNmzn7GxagAxdpjNFQ.mft
Manifest number: 13D7
Signing time: Wed 06 Aug 2025 00:01:02 +0000
Manifest this update: Wed 06 Aug 2025 00:01:02 +0000
Manifest next update: Thu 07 Aug 2025 00:01:02 +0000
Files and hashes: 1: 45perw_w1j6f13fS2dhRsqX1J5M.roa (hash: DYBg8sY6Y3Ov/VU9uOEBk40lHTsP43PpQZFd0Uj3ouA=)
2: VHkd3iyb3qNmzn7GxagAxdpjNFQ.crl (hash: Qj9PLxiQFlWi2iQciKFz+/lcvwR41ElgJPxwv5KOKko=)
3: lVcXLet5xDC9hx49fSzHNMkhKuQ.roa (hash: yDDXEEZlcdjv6pPGItKtHPkxBZnpxpZ1NCia9fyNgYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/VHkd3iyb3qNmzn7GxagAxdpjNFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/VHkd3iyb3qNmzn7GxagAxdpjNFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VHkd3iyb3qNmzn7GxagAxdpjNFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:ae:6b:f1:66:66:6f:22:88:3d:44:b3:ae:52:da:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54791dde2c9bdea366ce7ec6c5a800c5da633454
Validity
Not Before: Aug 6 00:01:02 2025 GMT
Not After : Aug 7 00:01:02 2025 GMT
Subject: CN=ea1da82a6b4ce336eb5d14c294edd9973b4203db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:aa:d3:31:1a:65:bc:71:1d:aa:e2:3b:22:e5:
fc:15:1d:08:7d:7d:f9:b0:14:df:c1:24:c4:1e:32:
f7:b7:b2:af:8a:05:77:c1:b8:cf:fd:cd:ff:31:2d:
7f:a3:c0:c6:2b:63:3f:da:de:64:13:b6:54:8a:ed:
dc:f4:d2:15:95:ea:18:96:5a:9c:90:75:db:22:81:
7f:31:3c:f9:d3:da:cc:95:61:ef:39:c4:23:ae:a2:
56:d8:61:2c:7a:52:3a:8d:cf:a2:bb:cf:de:9b:ac:
94:cc:ef:76:1c:77:a9:fe:75:7c:f3:e2:13:70:a1:
86:3b:01:f0:e3:e7:aa:4c:0c:d3:1f:94:e8:18:48:
14:38:a4:ed:5a:48:54:16:bb:ae:4c:63:f7:ed:45:
e8:e0:bf:cf:2d:ee:1a:dd:65:d4:24:ce:a1:6e:22:
3b:17:9f:cf:72:0e:fe:9b:96:1e:97:6b:be:36:fe:
18:78:e8:1a:c3:66:2f:cc:ac:42:2e:50:97:f0:67:
ad:96:bf:da:74:95:e3:ac:e6:60:2f:9f:c5:94:64:
9c:11:ac:46:f7:72:f4:6e:b3:10:e6:a3:db:21:2c:
8e:45:46:20:d5:79:8d:00:b6:50:b7:10:de:8d:82:
e8:ec:b6:80:31:b9:5f:7b:13:f1:4e:72:66:f8:c0:
df:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:1D:A8:2A:6B:4C:E3:36:EB:5D:14:C2:94:ED:D9:97:3B:42:03:DB
X509v3 Authority Key Identifier:
keyid:54:79:1D:DE:2C:9B:DE:A3:66:CE:7E:C6:C5:A8:00:C5:DA:63:34:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHkd3iyb3qNmzn7GxagAxdpjNFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/VHkd3iyb3qNmzn7GxagAxdpjNFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/VHkd3iyb3qNmzn7GxagAxdpjNFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:68:cb:85:b0:be:07:24:3d:ee:30:24:b2:8c:c6:44:1c:19:
e3:c6:2e:1f:36:dc:63:70:f9:31:7e:26:5b:e2:eb:4b:31:50:
03:be:74:98:09:3f:3a:6b:d1:e3:1a:26:9b:09:aa:aa:4e:60:
72:07:97:d8:d3:45:78:e2:18:60:c7:ed:5f:d2:72:88:ff:31:
50:ff:15:cd:b8:ce:68:c0:ca:a5:4a:35:f1:22:31:17:31:9e:
fe:4c:c3:60:97:99:79:3d:b2:bd:d5:87:bb:70:a0:54:19:ff:
17:13:c3:11:c4:81:f2:b8:97:02:02:3b:fb:33:74:dd:ec:50:
41:55:8d:30:56:73:c0:0f:76:a5:16:18:b1:6d:9c:e7:82:d7:
8c:f7:d2:9f:4c:ee:e3:c1:77:a5:6e:46:fc:06:17:ea:ab:3b:
94:dc:c2:e9:ae:0d:28:1c:02:cb:c3:bf:b6:f9:8d:5f:56:04:
6a:73:20:46:42:31:d2:e5:8d:4a:f3:01:d5:21:8e:73:7f:46:
30:be:ca:d5:6c:a9:e6:1a:64:7b:db:d5:d1:ec:42:f7:f3:84:
a1:50:ce:e0:c5:4d:96:7c:4c:fd:a1:e1:45:91:64:8f:3c:8a:
98:6d:84:a2:c4:1e:6d:e3:6d:34:60:6c:b2:fa:25:cb:81:ea:
0e:fa:2a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:27:24 2025 by rpki-client