Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft
File: VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft (raw, json)
Hash identifier: /qwRnsJNpxVkyAnWYfbRZcatpqF/C408O5vPL6pCm4E=
Subject key identifier: 68:7D:AC:93:FF:03:B3:5E:35:EC:0C:20:C2:28:AE:81:35:16:CA:33
Authority key identifier: 56:43:41:5C:22:E1:41:97:2C:0D:7E:76:C2:4E:88:B2:24:27:B0:24
Certificate issuer: /CN=5643415c22e141972c0d7e76c24e88b22427b024
Certificate serial: 0198726233FFFC95F0D831B5FC1F0D613D04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VkNBXCLhQZcsDX52wk6IsiQnsCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft
Manifest number: 1616
Signing time: Mon 04 Aug 2025 00:01:35 +0000
Manifest this update: Mon 04 Aug 2025 00:01:35 +0000
Manifest next update: Tue 05 Aug 2025 00:01:35 +0000
Files and hashes: 1: 6qanCjcucoDvogEjoEibMas1xCw.roa (hash: iHrFUYTwZPBriNgyEwpJfBAHJGESvwJ6/vI6y1aBDEY=)
2: OJH-3bY7Jey_mmpYXzYEewikSRw.roa (hash: QWW0B/GAEpshetNaEGEwKmz4qiBbm/sCm0lolDcM+Gk=)
3: VkNBXCLhQZcsDX52wk6IsiQnsCQ.crl (hash: JsqlUhDXnaiSSknEdDouenvgaEoRILBDL+83yuP0eaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VkNBXCLhQZcsDX52wk6IsiQnsCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 00:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:62:33:ff:fc:95:f0:d8:31:b5:fc:1f:0d:61:3d:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5643415c22e141972c0d7e76c24e88b22427b024
Validity
Not Before: Aug 4 00:01:35 2025 GMT
Not After : Aug 5 00:01:35 2025 GMT
Subject: CN=687dac93ff03b35e35ec0c20c228ae813516ca33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:1c:83:d2:ec:29:3e:73:c1:af:9d:d8:ea:7c:
63:b4:f1:77:d3:9d:f3:38:c1:67:04:9e:65:75:e9:
1c:38:94:d8:cb:af:25:98:cc:be:52:67:06:2e:57:
69:3f:23:ed:ab:b2:53:ed:d6:3b:2f:51:4b:38:45:
55:a9:e1:61:d1:67:7b:f3:55:78:3d:51:a9:5b:39:
45:93:c7:35:28:2d:79:93:49:ac:db:50:90:44:42:
5f:41:f5:4f:bd:35:d3:4f:3e:e7:88:8c:0f:0a:cf:
99:02:99:05:7d:34:c6:82:36:de:89:58:e9:b0:79:
5a:a5:4f:d5:a8:7d:94:c2:cf:09:a3:cc:42:9d:c5:
22:36:86:71:9b:27:35:65:34:9d:c1:6e:a8:5e:f8:
28:2e:2b:7f:8c:a7:c3:76:76:6e:d4:10:39:9c:df:
13:7f:a6:3a:aa:23:ce:63:f4:46:4a:01:bf:64:3e:
5e:28:0b:41:46:b6:f7:ef:80:82:a2:b1:55:71:ac:
ed:85:30:8a:fe:fa:4c:1f:20:c9:81:11:8e:c3:81:
8c:54:2b:eb:d1:e6:67:ae:ce:d3:f1:c0:2c:0a:c3:
68:c6:5f:c4:7d:68:c5:47:45:b5:8a:c0:93:8d:5c:
4a:b3:94:14:d6:e9:f9:5d:29:e7:c7:fc:4d:91:4a:
91:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:7D:AC:93:FF:03:B3:5E:35:EC:0C:20:C2:28:AE:81:35:16:CA:33
X509v3 Authority Key Identifier:
keyid:56:43:41:5C:22:E1:41:97:2C:0D:7E:76:C2:4E:88:B2:24:27:B0:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkNBXCLhQZcsDX52wk6IsiQnsCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:20:49:e0:62:7f:36:23:85:02:94:06:ab:5a:9a:3c:20:f4:
f9:43:d0:a7:ab:39:66:a6:8f:61:64:76:df:e5:0c:08:0e:8a:
1a:07:34:26:d1:3b:52:33:ad:a4:6e:ae:b3:43:8b:88:1f:b3:
f8:ee:44:ed:bb:4d:e6:3d:34:be:12:a1:65:c5:2f:c0:50:19:
cb:69:79:ad:fb:46:b7:6b:39:bf:d2:8c:90:13:b7:36:33:53:
c6:5a:f6:00:ef:0a:7f:32:21:4d:cd:de:fc:72:96:2c:c5:0c:
09:78:ad:b0:be:0b:5c:d1:6d:5b:06:a2:86:e0:65:7a:9f:7f:
b1:ef:73:73:62:4d:fe:1f:40:cf:21:d0:06:75:61:e0:4a:b1:
f7:40:66:ed:4d:5d:74:df:70:9e:aa:4b:ef:9c:31:ac:48:cb:
c7:1e:5c:ac:3e:8a:7d:4e:92:97:14:80:ff:ba:c7:d9:b1:e5:
18:db:e9:6f:25:3d:5f:e4:07:b0:79:32:a5:4a:df:74:c9:4f:
2d:19:f8:ab:02:01:56:55:e2:a2:5b:a2:65:db:87:c1:3d:30:
dd:5b:48:55:1d:b0:e7:23:8b:9a:ef:98:dd:e0:2b:80:b5:ea:
e6:49:31:7b:dd:62:91:b8:de:24:e0:86:ba:cc:a3:e4:ce:cb:
c0:5d:c5:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:11 2025 by rpki-client